HB 3041
DATA PRIVACY AND PROTECTION
May require changes to AI practices. Monitor and prepare.
TL;DR
Illinois Rep. Abdelnasser Rashid introduced HB 3041, a comprehensive data privacy bill that would regulate how companies collect, use, and share consumer data, including data used to train and operate AI systems. The bill has stalled in the Rules Committee, but if revived, it would create new consumer rights (access, deletion, opt-out) and impose obligations on businesses handling Illinois residents' data.
How This Might Impact Your Business
Any company collecting personal data from Illinois residents would face new obligations, regardless of where the company is headquartered, similar to how California's CPRA reaches out-of-state businesses.
Consumer-facing industries (retail, e-commerce, financial services, healthcare, adtech) would need to honor data access, correction, deletion, and opt-out requests, requiring new internal workflows and customer portals.
AI and machine learning operations could be directly affected if the bill restricts using personal data for automated decision-making or profiling without consent.
Data brokers and adtech firms face the heaviest lift, with likely registration, disclosure, and opt-out-of-sale requirements.
Smaller businesses may get thresholds (common cutoffs are 100,000 consumers or $25M revenue), but mid-market and enterprise companies should assume coverage.
Non-compliance typically carries Illinois Attorney General enforcement and per-violation fines; Illinois has a track record (see BIPA) of supporting private lawsuits that generate class actions.
Current status is stalled (re-referred to Rules Committee), meaning no immediate deadline, but Illinois has been actively pursuing privacy legislation and a revised version could move next session.
What Should You Do
Ask your privacy or legal team to map what Illinois resident data you collect, store, and share, including data fed into AI models or vendor tools.
Benchmark your current privacy program against existing state laws (California, Colorado, Virginia); if you are already compliant there, you are mostly ready for Illinois.
Review AI vendor contracts for data processing terms, especially around training data and automated decision-making disclosures.
Assign someone to monitor HB 3041 and related Illinois privacy bills; watch for a reintroduction or amended version in the next session.
If you operate in adtech, data brokerage, or use AI for consumer profiling, start scoping an opt-out mechanism now since it will be required under almost any version of this law.
Who It Affects
Sponsors
Status Timeline
committee
Rule 19(a) / Re-referred to Rules Committee
March 27, 2026
AI-generated analysis for informational purposes only. Not legal advice. Always consult a qualified attorney for legal guidance.
Need help preparing your team for AI compliance?
Talk to LaunchReady about AI Training