IL SB0052

Creates the Privacy Rights Act establishing comprehensive consumer data privacy protections for Illinois residents, applying to businesses with over $25 million in annual revenue, those handling personal information of 100,000+ consumers, or those deriving 50%+ of revenue from selling consumer data

Grants consumers rights to delete personal information, correct inaccuracies, know what data is collected and sold, opt out of data sales/sharing, limit use of sensitive personal information, and protection from retaliation for exercising these rights

Establishes the Privacy Protection Agency, a 5-member board with authority to implement, enforce, and adopt rules for the Act, including power to investigate violations, issue subpoenas, and impose administrative fines up to $2,500 per violation or $7,500 for intentional violations involving minors

Creates a private right of action for consumers whose unencrypted personal information is subject to unauthorized access due to a business's failure to implement reasonable security measures, with statutory damages of $100-$750 per consumer per incident

Creates the Consumer Privacy Fund to receive penalties and settlement proceeds, with funds allocated to offset enforcement costs, make grants for privacy education and consumer protection, and invest remaining funds with earnings deposited into the General Revenue Fund