SB2823 104TH GENERAL ASSEMBLY

LRB104 16967 SPS 30381 b

104TH GENERAL ASSEMBLY
State of Illinois
2025 and 2026
SB2823

Introduced 1/13/2026, by Sen. Steve Stadelman

SYNOPSIS AS INTRODUCED:

815 ILCS 505/2MMMM new

Amends the Consumer Fraud and Deceptive Business Practices Act. Provides that a social media company shall make available to account holders a 24-hour toll-free telephone number through which an account holder may contact a live customer service representative of the social media company to report fraudulent activity on an account holder's social media account, including, but not limited to, unauthorized access. Provides that a social media company shall include the telephone number and an explanation of the purpose of the telephone number in any email notification concerning account security sent to an account holder and post the telephone number and explanation in a prominent location on the homepage or help page of the social media platform. Provides that a violation of the provision constitutes an unlawful practice within the meaning of the Act.

A BILL FOR

AN ACT concerning business.

Be it enacted by the People of the State of Illinois, represented in the General Assembly:

Section 5. The Consumer Fraud and Deceptive Business Practices Act is amended by adding Section 2MMMM as follows:

(815 ILCS 505/2MMMM new)

Sec. 2MMMM. Social media; report fraudulent activity.

(a) As used in this Section:

"Account holder" means a resident of this State who has a social media account on a social media platform.

"Social media account" means a profile created by a person on a social media platform that contains personal information, including name, phone number, email, or other identifying information. "Social media account" includes a profile created by a person that only contains pictures or videos that the person owns and shares.

"Social media company" means a person, business, or other legal entity and its agents, assignees, or representatives that provides or operates a social media platform with at least 5,000,000 users.

"Social media platform" means a public or semi-public Internet-based service or application with users in this State, that:

(1) allows users to construct a public or semi-public social media account for the purposes of using the platform, populate a list of other users with whom the user shares a social connection through the platform, and post content viewable by other users of the platform; and

(2) is designed to connect users within the platform to facilitate social interactions, except that a service or application that provides email or direct messaging services shall not be considered a social media platform solely based on the existence of that functionality.

"Social media platform" does not include an Internet-based service or application for which interactions between users are solely related to the provision of direct messages, commercial and financial transactions, peer-to-peer payments, consumer engagement around products, product reviews, sellers, services, events, or places, or any combination thereof.

(b) A social media company shall make available to account holders a 24-hour toll-free telephone number through which an account holder may contact a live customer service representative of the social media company to report fraudulent activity on an account holder's social media account, including, but not limited to, unauthorized access.

(c) A social media company shall include the telephone number made available in accordance with subsection (b) and an explanation of the purpose of the telephone number in any email notification concerning account security sent to an account holder and post the telephone number and explanation in a prominent location on the homepage or help page of the social media platform.

(d) A violation of this Section constitutes an unlawful practice within the meaning of this Act.