HB2404 - Right to Know Act

• Creates the "Right to Know Act" requiring commercial website and online service operators to notify Illinois customers about personal information collection and sharing practices in customer agreements.

• Operators must identify all categories of personal information collected, all categories of third parties receiving that information, and provide customer rights descriptions with designated request addresses (email or toll-free phone).

• Requires operators to make available to customers free of charge within 30 days: all categories of personal information disclosed and names of all third parties who received it for the prior 12 months.

• Mandates manufacturers and companies collecting personal information from Illinois residents develop a data protection safety plan.

• Provides customers a right of action with recovery of $10 or actual damages (whichever is greater), injunctive relief, and reasonable attorneys' fees; voids any waivers or non-compliant agreements.