IL SB0051

Creates the Illinois Age-Appropriate Design Code Act requiring businesses providing online services, products, or features likely accessed by children (under 18) to complete data protection impact assessments before launching new offerings and biennially thereafter

Mandates businesses configure default privacy settings to high-level protection for children, prohibits profiling children by default, bans collection of precise geolocation data unless strictly necessary, and forbids use of "dark patterns" to manipulate children into providing personal information

Establishes civil penalties of up to $2,500 per affected child for negligent violations and up to $7,500 per affected child for intentional violations, enforceable only through civil action by the Attorney General

Creates an 8-member Children's Data Protection Working Group appointed by the Governor, Senate President, House Speaker, and Attorney General to submit reports to the General Assembly on best practices starting January 1, 2026, with the group dissolving January 1, 2032

Requires data protection impact assessments for existing online services accessed by children to be completed by July 1, 2026, and gives businesses in substantial compliance a 90-day cure period after receiving notice of alleged violations