IL SB3220

Establishes consumer rights to confirm data processing, correct inaccuracies, delete personal data, obtain copies of previously provided data, and opt out of targeted advertising, data sales, or profiling.

Applies to businesses operating in Illinois or targeting Illinois residents that process personal data of at least 100,000 consumers annually, or 25,000 consumers while deriving over 50% of gross revenue from data sales.

Exempts government entities, financial institutions subject to Gramm-Leach-Bliley, HIPAA-covered entities, nonprofit organizations, higher education institutions, and public utilities.

Grants the Attorney General exclusive enforcement authority and creates the Consumer Privacy Fund to be administered by the Attorney General's Office.

Amends the Freedom of Information Act to exempt data protection impact assessments created under this Act from public disclosure.