HB2774 - Right to Know Act

• Creates transparency requirements for commercial websites and online services that collect personal information from Illinois residents, requiring operators to disclose what data they collect and which third parties receive it.

• Operators must include in customer agreements: categories of personal information collected, categories of third parties with whom data is shared, and designated contact information (email or toll-free number) for customers to request disclosure details.

• Customers can request information about all personal information disclosures from the prior 12 months, and operators must respond within 30 days at no charge.

• Provides private right of action for violations, allowing customers to recover liquidated damages of $10 or actual damages (whichever is greater), injunctive relief, and reasonable attorney's fees.

• Exempts financial institutions under Gramm-Leach-Bliley Act, health information under HIPAA, telecommunications companies under the Communications Act, and government contractors from the Act's requirements.