IL SB3548

Establishes consumer rights to confirm data processing, correct inaccuracies, delete personal data, obtain copies of their data, and opt out of targeted advertising, data sales, or profiling

Applies to businesses operating in Illinois that process personal data of at least 100,000 consumers annually, or 25,000 consumers if deriving over 50% of gross revenue from data sales

Exempts government entities, financial institutions subject to Gramm-Leach-Bliley Act, HIPAA-covered entities, nonprofit organizations, higher education institutions, and public utilities

Grants exclusive enforcement authority to the Illinois Attorney General and creates a Consumer Privacy Fund administered by the Attorney General's Office

Amends the Freedom of Information Act to exempt data protection impact assessments conducted under this Act from public disclosure requirements