SB1365 - Right to Know Act Summary

• Creates the Right to Know Act requiring commercial website and online service operators to notify Illinois customers about personal information collection and sharing practices in customer agreements.

• Requires operators to identify all categories of personal information collected, list third parties who receive such information, and provide customers with a designated email or toll-free number to request disclosure details.

• Mandates operators disclose to customers all categories of personal information disclosed to third parties and the names of those third parties, with responses required within 30 days of customer request.

• Requires manufacturers and companies collecting personal information from Illinois residents to develop a data protection safety plan.

• Provides customers with a right of action for violations, allowing recovery of liquidated damages of $10 or actual damages (whichever is greater), injunctive relief, and reasonable attorneys' fees; voids any waivers or agreements that do not comply with the Act.