DATA PRIVACY AND PROTECTION House SponsorsRep. Abdelnasser Rashid 1/7/2025HouseSession Sine Die New Act Creates the Illinois Data Privacy and Protection Act. Provides that a covered entity (any entity or any person, other than an individual acting in a non-commercial context, that alone or jointly with others determines the purposes and means of collecting, processing, or transferring covered data) may not collect, process, or transfer covered data unless the collection, processing, or transfer is limited to what is reasonably necessary and proportionate. Provides that a covered entity and a service provider shall establish, implement, and maintain reasonable policies, practices, and procedures concerning the collection, processing, and transferring of covered data. Contains provisions concerning retaliation; transparency; individual data rights; consent; data protection for children and minors; civil rights; data security; small business protections; executive responsibility; service providers and third parties; enforcement; severability; and rulemaking. Effective 180 days after becoming law. 2/17/2023HouseFiled with the Clerk by Rep. Abdelnasser Rashid 2/17/2023HouseFirst Reading 2/17/2023HouseReferred to Rules Committee 2/28/2023HouseAssigned to Cybersecurity, Data Analytics, & IT Committee 3/10/2023HouseRule 19(a) / Re-referred to Rules Committee 3/12/2024HouseAssigned to Cybersecurity, Data Analytics, & IT Committee 4/5/2024HouseRule 19(a) / Re-referred to Rules Committee 1/7/2025HouseSession Sine Die