Illinois is set to implement the Public Official Safety and Privacy Act (Public Act 104-0443) on January 1, 2026.

The law establishes protections for public officials by restricting the public disclosure of their personal information, including home addresses, phone numbers, and children’s identities, and criminalizing the malicious release of such data, a practice known as “doxing.”

The act requires private entities to remove officials’ personal information from the internet within 72 hours of a written request, and government agencies within five business days.

The Public Official Safety and Privacy Act gives public officials—including judges, state’s attorneys, and election commissioners—the power to curate their digital footprint.

Under the new statute:

• The Right to Be Forgotten: Officials can submit a written request to any person, business, or association to remove their personal information (home address, personal email, children’s identities) from public displays on the internet.
• Strict Timelines: Upon receiving a request, private entities (such as data aggregators and search engines) have 72 hours to remove the information. Government agencies have five business days.
• Criminal Penalties: Knowingly posting an official’s personal information with the intent to pose an imminent threat is now a Class 3 felony if the act results in bodily injury or death.

Beyond internet privacy, the act updates the permissible uses of political resources. Acknowledging that a home address is often the first target for bad actors, the law allows public officials to use campaign funds to pay for personal security systems, cameras, and physical barriers at their residences.

Additionally, the act modifies the Illinois Vehicle Code and Identification Card Act, permitting officials to use their business address rather than their home address on driver’s licenses and vehicle registrations.

Critics of such measures often cite transparency concerns, arguing that the public has a right to know where their representatives live to ensure they reside in their districts. The Act attempts to thread this needle by keeping the protections largely responsive rather than automatic; officials must affirmatively request the redaction of their data.