BIPA

Written notice and consent before collecting biometrics, a public retention schedule, and a private right of action that has produced some of the largest privacy settlements in the US.

At a glance

Who it applies to

Private entities that collect, capture or use biometric identifiers or information of Illinois residents.

Who enforces it

Courts (private right of action)

When

In effect since 3 October 2008. Amended in August 2024 to limit damages to one recovery per person rather than per scan.

A practical guide to this law, with scenarios and flashcards, is being written. The summary above is the reference entry.

Recent developments

Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.

Sources

Primary sources are being added to this entry.

Dates and status are from the association's inventory and are being checked against primary sources. This page explains the law for practitioners; it is not legal advice.