IL HB2785

Creates the Geolocation Privacy Protection Act requiring private entities to obtain affirmative express consent from users before collecting, using, storing, or disclosing geolocation information from location-based applications on devices.

Requires notice to users that specifies what geolocation information will be collected, the purpose(s) for collection or use, and identifies entities to whom information may be disclosed.

Exempts collection without consent for parental/guardian location of unemancipated minors, court-appointed guardians locating incapacitated persons, and provision of fire, medical, public safety, or emergency services.

Excludes geolocation data stored locally on devices from the act's requirements and allows continued use after initial consent unless the terms for collection purpose or disclosure are materially changed.

Applies only to location-based applications created or modified after the effective date; exempts healthcare providers subject to HIPAA and financial institutions subject to Gramm-Leach-Bliley Act.

Makes violations of the act unlawful practices under the Consumer Fraud and Deceptive Business Practices Act and voids any waivers or non-compliant agreements.