Illinois — data protection and AI governance
Biometric Information Privacy Act (BIPA), in force since 2008-10-03. Supervisory authority: Tribunaux (droit d'action privé).
Data protection
- Instrument
- Biometric Information Privacy Act (BIPA)
- In force since
- 2008-10-03
- Authority
- Tribunaux (droit d'action privé)
- Penalties
- 1 000-5 000$/violation (action privée)
- Key obligations
- Consentement écrit pour la biométrie
- Droit d'action privé
- Politique de conservation publique
What the engine decides here
These three attributes are what an agent decision depends on in this jurisdiction. They are modelled, sourced and dated.
- Transfer regime
- Open
No general transfer regime applies: moving data out is not conditioned by this framework.
- Localisation mandate
- Not modelled
- Automated decision rights
- Not modelled
- Verified on
- 2026-08-14
Three decisions, computed just now
Same actions, this jurisdiction's context. These answers come out of the engine as the page renders — the same function the API calls.
- ALLOW
Read an internal contract
Low-risk operation
- ALLOW
Send a customer record to US_FED
Low-risk operation
- DENY
Decide on a job application
Decision reserved for a human
Advisory decisions. StructureClerk decides; your infrastructure enforces.
AI governance
- Framework
- HB 3773 (IA en emploi)
- Status
- enacted
- Date
- 2026-01-01
- Key points
- Interdiction de discrimination par IA en emploi
- Notification de l'usage d'IA aux candidats/employés
Do your agents operate in Illinois?
The authority API makes these attributes executable: an ALLOW, APPROVE, DENY or ESCALATE decision before the agent acts, with signed evidence any third party can verify.