IL SB2255

Prohibits using surveillance data (personal characteristics, behaviors, biometric information) in automated decision systems to set individualized prices for consumers or wages for employees

Defines surveillance data broadly to include web browsing history, purchase history, financial circumstances, political affiliations, and biometric identifiers like fingerprints, facial geometry, and genetic information

Exempts insurers using only risk-relevant data in compliance with the Illinois Insurance Code, and entities using consumer reports in compliance with the Fair Credit Reporting Act for credit decisions

Employers may use automated wage-setting only if based solely on job-related data, with plain-language disclosure before hiring about what data is considered and how the system works

Violations carry civil penalties up to $10,000 per violation (per consumer, employee, or transaction), with private right of action allowing recovery of actual damages, $3,000 per violation, or treble damages for bad faith conduct