IL SB2875

Creates the Illinois Consumer Data Privacy Act, establishing comprehensive data privacy protections for Illinois residents acting in individual or household contexts.

Applies to entities that process personal data of 100,000+ consumers annually, or derive over 25% of gross revenue from selling personal data while processing data of 25,000+ consumers.

Grants consumers rights to access their personal data, obtain lists of third parties receiving their data, request corrections to inaccurate information, and question automated profiling of their information.

Defines "sensitive data" to include racial/ethnic origin, religious beliefs, health conditions, sexual orientation, biometric/genetic data, children's data, and precise geolocation information requiring heightened protections.

Exempts state and local governments, federally recognized Indian tribes, data covered by HIPAA and other federal laws, and prohibits consent obtained through "dark patterns" (manipulative user interfaces).