IllinoisSB2273104th General Assembly (2025–2026)Senate

HEALTH DATA PRIVACY ACT

Sponsored By: Celina Villanueva (Democratic)

In Committee

Summary

Creates the Protect Health Data Privacy Act. Provides that a regulated entity shall disclose and maintain a health data privacy policy that clearly and conspicuously discloses specified information. Sets forth provisions concerning health data privacy policies. Provides that a regulated entity shall not collect, share, or store health data, except in specified circumstances. Provides that it is unlawful for any person to sell or offer to sell health data concerning an individual without first obtaining valid authorization from the individual. Provides that a valid authorization to sell individual health data must contain specified information; a copy of the signed valid authorization must be provided to the individual; and the seller and purchaser of health data must retain a copy of all valid authorizations for sale of health data for 6 years after the date of its signature or the date when it was last in effect, whichever is later. Sets forth provisions concerning the consent required for collection, sharing, and storage of health data. Provides that an individual has the right to withdraw consent from the processing of the individual's health data. Provides that it is unlawful for a regulated entity to engage in discriminatory practices against individuals solely because they have not provided consent to the processing of their health data or have exercised any other rights provided by the provisions or guaranteed by law. Sets forth provisions concerning an individual's right to confirm whether a regulated entity is collecting, selling, sharing, or storing any of the individual's health data; an individual's right to have the individual's health data that is collected by a regulated entity deleted; prohibitions regarding geofencing; and individual health data security. Provides that any person aggrieved by a violation of the provisions shall have a right of action in a State circuit court or as a supplemental claim in federal district court against an offending party. Provides that the Attorney General may enforce a violation of the provisions as an unlawful practice under the Consumer Fraud and Deceptive Business Practices Act. Defines terms. Makes a conforming change in the Consumer Fraud and Deceptive Business Practices Act.

assignmentsexecutive

Personalized for You

How does this bill affect your finances?

Personalize government policy and PRIA will tell you what this bill means for your household, plus every other piece of legislation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.

Bill Overview

No Economic Impacts Identified for this Bill

Sponsors & Cosponsors

Sponsor

  • Celina Villanueva

    Democratic • Senate

Cosponsors

There are no cosponsors for this bill.

Roll Call Votes

No roll call votes available for this bill.

Actions Timeline

  1. Rule 3-9(a) / Re-referred to Assignments

    5/22/2026Senate
  2. Rule 3-9(a) / Re-referred to Assignments

    5/22/2026Senate
  3. Rule 2-10 Committee/3rd Reading Deadline Established As May 22, 2026

    5/15/2026Senate
  4. Rule 2-10 Committee/3rd Reading Deadline Established As May 15, 2026

    4/24/2026Senate
  5. Rule 2-10 Committee Deadline Established As April 24, 2026

    3/27/2026Senate
  6. Rule 2-10 Committee Deadline Established As March 27, 2026

    3/13/2026Senate
  7. To AI and Social Media

    2/4/2026Senate
  8. Re-assigned to Executive

    1/27/2026Senate
  9. Rule 3-9(a) / Re-referred to Assignments

    4/11/2025Senate
  10. Rule 2-10 Committee Deadline Established As April 11, 2025

    3/21/2025Senate
  11. To AI and Social Media

    3/19/2025Senate
  12. Assigned to Executive

    3/12/2025Senate
  13. Referred to Assignments

    2/7/2025Senate
  14. First Reading

    2/7/2025Senate
  15. Filed with Secretary by Sen. Celina Villanueva

    2/7/2025Senate

Bill Text

Related Bills

Back to State Legislation