Illinois Cybersecurity Compliance in 2026: Laws, New Bills and Deadlines for Chicago-Area Businesses

Illinois has no single cybersecurity law. PIPA, BIPA, and HB 3773 apply depending on the data you hold and how you use it. PIPA requires reasonable security and breach notice “without unreasonable delay,” with no 45-day deadline. BIPA requires written consent before collecting biometrics, and HB 3773 has required notice for AI in hiring since January 1, 2026. Many “new bills” are only proposals, so confirm a bill is enacted and in effect before treating its date as a deadline.