IL HB3453

Creates the Geolocation Privacy Protection Act requiring private entities that own, operate, or control location-based applications to obtain affirmative express consent from users before disclosing their geolocation information to third parties.

Requires private entities to provide clear notice specifying that geolocation information will be disclosed, the purposes for disclosure, and the names and categories of entities that may receive the information.

Permits disclosure without consent in specific circumstances: locating unemancipated minors or legally incapacitated persons, emergency services, court orders or subpoenas, and consumer transactions where disclosure is reasonably expected.

Designates violations as unlawful practices enforceable by the Illinois Attorney General under the Consumer Fraud and Deceptive Business Practices Act; prohibits private right of action and voids any waivers or non-compliant agreements.

Exempts health care providers subject to HIPAA, financial institutions subject to the Gramm-Leach-Bliley Act, and transportation network providers when disclosing geolocation information consistent with those laws or user expectations; applies only to applications created or modified after the act's effective date.