Illinois Governor Signs Age-Appropriate Design Code into Law - EPIC – Electronic Privacy Information Center
Illinois has enacted an Age-Appropriate Design Code, imposing new data privacy obligations on businesses that provide online services likely to be accessed by minors.
Aforeworn detected this change in the US State Data-Privacy Laws space on August 3, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated High urgency. Businesses operating online services, apps, or connected products likely to be accessed by children in Illinois, including multistate retailers, adtech/data brokers, SaaS platforms, and privacy consultants. should confirm how it applies to their specific situation before acting. There is a time constraint attached: Not specified in the provided text; check the law's effective date.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors US State Data-Privacy Laws continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
New legal requirements for designing online services with the best interests of minors in mind, including data minimization, default privacy settings, and risk assessments.
Who it affects
Businesses operating online services, apps, or connected products likely to be accessed by children in Illinois, including multistate retailers, adtech/data brokers, SaaS platforms, and privacy consultants.
What you must do
Review and update product design and data practices to comply with the Age-Appropriate Design Code, including conducting Data Protection Impact Assessments and implementing privacy-by-default settings.
Deadline
Not specified in the provided text; check the law's effective date.
Never miss a change like this again
Aforeworn watches US State Data-Privacy Laws around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in US State Data-Privacy Laws
- New Jersey’s New Data Broker Law Imposes Compliance Obligations on Entities That Provide Personal Data to Data Brokers, Prohibits the Sale of Sensitive Data - Morrison Foerster
- Paxton, NetChoice both declare victory in court decisions on Texas SCOPE Act - biometricupdate.com
- FTC sues Hims & Hers for sharing patient health data with Meta and Snap - SecNews.gr
- OK HB1012: Data privacy; Oklahoma Computer Data Privacy Act; consumer protection; civil penalties; effective da
- Connecticut Amends Its Data Privacy Act to Increase Data Protections - WilmerHale