SB1502 - Illinois Right to Know Data Transparency and Privacy Protection Act

• Requires commercial website and online service operators to disclose all categories of personal information collected from Illinois customers and provide customers with a designated contact address to request this information.

• Mandates operators disclose to customers the categories of personal information shared with third parties and the names of all third parties receiving that information, available free of charge for disclosures made after the act's effective date.

• Establishes customer right to request disclosure information within a 30-day response period, with operators limited to responding to one request per customer per 12-month period; parents or guardians may request on behalf of customers under age 18.

• Defines "personal information" broadly to include identity, address, financial, medical, location, internet activity, and other sensitive data categories including information pertaining to customers' children.

• Classifies violations as unlawful practices under the Consumer Fraud and Deceptive Business Practices Act, enforceable by the Attorney General and State's Attorneys, while exempting businesses with 10 or fewer employees, financial institutions, government agencies, tax-exempt organizations, and public utilities.