Index
Consumer ProtectionIllinois, USA

Illinois Biometric Information Privacy Act (BIPA)

Summary

Illinois has the strictest biometric privacy law in the US. Companies cannot collect your fingerprints, face scans, or voiceprints without your explicit written consent.

Rights & Rules

  • 01.
    A company MUST inform you in writing that biometric data is being collected or stored.
  • 02.
    The company MUST state the specific purpose and length of time the data will be kept.
  • 03.
    You MUST provide a written release (consent) before they can collect the data.
  • 04.
    Companies are strictly prohibited from selling, leasing, trading, or otherwise profiting from your biometric information.

Penalties

  • 01.
    You can sue a company directly for violating BIPA.
  • 02.
    You can win $1,000 for each negligent violation, or $5,000 for each intentional/reckless violation, plus attorney's fees.

Verified Citations

Illinois Compiled Statutes 740 ILCS 14/

Source
"No private entity may collect, capture, purchase, receive through trade, or otherwise obtain a person's or a customer's biometric identifier or biometric information, unless it first... receives a written release executed by the subject of the biometric identifier..."