Illinois actually has some of the strongest privacy legislation in the country. I got a $350 check from Facebook for running facial recognition on my photo without permission, and Google owes me a similar amount when it's class action gets approved.

Check out the Illinois BIPA, it's the reason tech companies are trying to get federal privacy legislation that preempts state law.