IL HB2913

Requires data brokers operating in Illinois to register annually with the Attorney General by January 31, paying a registration fee and disclosing information including whether they collect data on minors, precise geolocation, or reproductive health care data

Mandates the Attorney General establish an accessible deletion mechanism by January 1, 2027, allowing consumers to request deletion of their personal information from all registered data brokers through a single request

Beginning August 1, 2027, data brokers must check the deletion mechanism at least every 45 days and process deletion requests within 45 days; after deletion, brokers must continue deleting the consumer's data every 45 days unless the consumer opts out

Imposes civil penalties of $200 per day for data brokers that fail to register, plus unpaid fees and investigation costs; violations of the deletion mechanism requirements constitute unlawful practices under the Consumer Fraud and Deceptive Business Practices Act

Creates the Data Broker Registry Fund to receive registration fees and penalties, with funds used to administer and enforce the Act; requires data brokers to undergo independent compliance audits every 3 years starting January 1, 2029