DRAFT

104TH GENERAL ASSEMBLY
State of Illinois

2025 and 2026
Bill number: TBD

SYNOPSIS AS INTRODUCED:

This bill establishes a state-administered online age verification system called RAVE (Responsible Age Verification for Entry). The system allows Illinois residents to verify their age securely and privately using a unique Age Verification Number (AVN) issued by the Illinois Secretary of State. Participating websites receive only a binary “green light” (user is of age) or “red light” (user is underage) response. RAVE protects minors from accessing harmful content while safeguarding residents’ personally identifiable information.

Key Features:

• State-managed, privacy-first system using existing ID records.

• Binary age verification response for websites; no personal information transmitted.

• Optional PIN/password for returning users.

• Required first option for covered Illinois websites, with flexibility for alternative verification methods.

• Civil penalties for noncompliant websites enforced by the Attorney General.

PROPOSED RAVE ACT

Illinois General Assembly

104th Session, 2025 and 2026

AN ACT concerning civil law

To create a Responsible Age Verification for Entry system for Illinois residents to safely and privately verify their age online.

Be it enacted by the People of the State of Illinois, represented in the General Assembly

Section 1. Short Title.

This Act may be cited as the Responsible Age Verification for Entry Act or the RAVE Act.

Section 2. Legislative Findings and Purpose.

(a) The General Assembly finds and declares the following:

1. Protecting minors from accessing material deemed harmful to children is a compelling state interest.

2. Private third-party verification vendors and large technology corporations frequently mishandle sensitive personal data, exposing Illinois residents to data breaches, identity theft, and privacy erosion.

3. Current practices requiring individuals to submit scans of driver’s licenses or other personal documents to private websites or vendors pose serious privacy and security risks.

4. Data breaches, unauthorized disclosures, and commercial exploitation of personal information by private entities have eroded public confidence in their ability to responsibly handle sensitive data.

5. The Illinois Secretary of State, through the administration of driver’s licenses and State identification cards, maintains authoritative and accurate records of the age and identity of Illinois residents.

6. There is an urgent need for a state-administered, privacy-first, online age verification system.

7. The State has an interest in ensuring that age verification is accomplished in a secure, efficient, and minimally intrusive manner, without unnecessary disclosure of personal information to private entities.

(b) Purpose of the Act:

1. Establish a secure, State-administered system for online age verification, known as RAVE.

2. Allow verification using only a non-identifiable Age Verification Number (AVN) and optional PIN/password.

3. Provide Illinois residents with a safe, privacy-protective way to access age-restricted online content.

4. Protect minors from harmful content while safeguarding personal privacy.

5. Serve as a model for secure age verification systems nationwide.

Section 3. Definitions.

1. “RAVE” – Responsible Age Verification for Entry system established under this Act.

2. “Age Verification Number (AVN)” – A unique, non-identifiable code issued by the Illinois Secretary of State for age verification.

3. “PIN or Password” – Optional secret code chosen by a resident to secure repeated use of an AVN.

4. “Covered Website” – Any website, platform, or online service that restricts access based on age under State or federal law.

5. “Verification Response” – Binary outcome of a RAVE verification:

   • Green Light: User is of legal age.

   • Red Light: User is underage.

6. “Secretary” – The Illinois Secretary of State.

Section 4. Establishment of the RAVE System.

(a) The Illinois Secretary of State shall establish, operate, and maintain RAVE.

(b) RAVE shall:

1. Issue unique AVNs to Illinois residents.

2. Allow optional PIN/password creation for returning use.

3. Respond to website verification requests with only “green light” or “red light.”

4. Not disclose personal information to websites or third-party vendors.

5. Maintain cybersecurity and data protection standards consistent with industry best practices.

Section 5. Use by Covered Websites.

(a) Covered websites must offer RAVE as the first method for age verification for Illinois residents.

(b) A website may provide alternative verification methods, but RAVE must always be available and accessible.

(c) Websites may not store or attempt to reverse-engineer AVNs or associate them with personal information.

Section 6. Privacy and Security.

(a) AVNs, PINs, passwords, and verification logs shall not be shared, sold, or disclosed to private entities.

(b) Data retention shall be limited to the minimum necessary to maintain system integrity.

(c) Verification logs shall record only the binary outcome and no personal identifying information.

Section 7. Enforcement and Penalties.

(a) The Attorney General may investigate and enforce compliance.

(b) Civil penalties for noncompliance may not exceed $10,000 per violation.

(c) Each day of noncompliance constitutes a separate violation.

Section 8. Rulemaking Authority.

The Illinois Secretary of State may adopt rules necessary to implement RAVE, including:

• Procedures for issuing AVNs

• Technical standards for verification requests

• Security requirements for participating websites

Section 9. Severability.

If any provision or application of this Act is found invalid, it does not affect other provisions that can operate independently.

Section 10. Effective Date.

This Act takes effect January 1, 2026. (tentative)

Bill Bill Summary & Talking Points

Government Age Verification for Entry (GAVE) Act
Plain-Language Overview for Legislators and the Public

Bill Bill Summary & Talking Points