SB3334 - Illinois Age-Appropriate Design Code Act

• Creates the Illinois Age-Appropriate Design Code Act requiring all covered entities operating in Illinois that process children's data to do so in the best interests of children under 18 years old.

• Mandates covered entities complete data protection impact assessments for online services, products, or features reasonably likely to be accessed by children and maintain documentation of these assessments.

• Prohibits covered entities from profiling children by default, processing unnecessary personal data, using dark patterns to manipulate children, collecting precise geolocation data by default, and allowing monitoring without obvious signals to the child.

• Establishes civil penalties of up to $2,500 per affected child for negligent violations and up to $7,500 per affected child for intentional violations, enforced by the Attorney General with no private right of action.

• Applies to for-profit entities with annual revenues over $25 million (adjusted annually), or that annually buy, receive, sell, or share personal data of 50,000+ consumers or households, or derive 50%+ of annual revenues from selling personal data; requires compliance by January 1, 2025 for existing services.