Skip to content
Back to Destinations

United States — Illinois: compliance overview

2 regulations, 6 mapped obligations and 0 data-transfer routes, organised by when they start to bind you and what you have to do.

Regulatory timeline: what comes next

  1. 2026-01-01

    P.A. 103-804 takes effect

    Illinois Human Rights Act provisions on AI in employment (HB 3773)

Applicable regulations (2)

AmendedData & privacyRelevance Critical

Illinois Biometric Information Privacy Act (BIPA)

A Chinese AI company is caught when it: (1) deploys facial access control, time and attendance or security systems in Illinois stores, plants, offices or campuses; (2) performs face liveness detection, face unlock, fingerprint or voiceprint verification on Illinois user devices, since on-device capture is still collection; (3) collects eye, hand, gait or voice data from Illinois users through AR or VR, smart cockpit or robotics products; (4) trains models on datasets containing Illinois residents face or voice data, or purchases or receives such datasets, since the statute lists purchasing, receiving through trade and otherwise obtaining together; or (5) supplies SDKs or cloud services with those capabilities to U.S. customers operating in Illinois, who will contractually push the notice and consent responsibility back to the vendor.

4 obligations · reviewed 2026-09-12

In forceAI regulationRelevance High

Illinois Human Rights Act provisions on AI in employment (HB 3773)

A Chinese company is caught when it: (1) employs staff in Illinois and uses algorithmic tools in resume screening, interview scoring, performance evaluation, scheduling, promotion or reduction-in-force decisions, requiring both absence of discriminatory effect and employee notice; (2) uses ZIP codes directly or indirectly as model features, including geographic features derived from addresses, since the proxy prohibition is express and free-standing; or (3) supplies recruiting, performance or workforce management AI to U.S. employers operating in Illinois, where the statutory duty sits with the employer but customers will contractually require fairness testing results and cooperation with investigations.

2 obligations · reviewed 2026-09-12

Sources (2)

Content as of 2026-09-12 · corpus 2026.09|Compiled from public official sources with links and review dates for compliance decision support. Rules change; have licensed professionals review before external disclosure, regulatory filing or contractual commitments.

GDPR · PIPL · CCPA control mapping
Traceable AI · cited when sourced
ISO 27001 alignment in progress
WCAG 2.1 AA accessibility target
United States — Illinois: compliance overview | HaiWen HQ