UNITED STATES – Companies that operate in Illinois should take notice of the flurry of litigation that has arisen under the Illinois Biometric Information Privacy Act (āBIPAā), 740 ILCS 14/1, et seq.Ā The State of Illinois promulgated the BIPA in 2008 amid the publicās growing concerns relating to companiesā collection of biometric data for business and security purposes.Ā The General Assembly cited āfinger-scan technologies at grocery stores, gas stations, and school cafeteriasā as an example of the biometric data that it intended to regulate.Ā 740 ILCS 14/5(b).Ā Under the BIPA, among other requirements, a company must inform the person whose biometric data is being collected that it is collecting their data and specific details relating to its data collection and preservation.Ā 740 ILCS 14/15(b).Ā Companies must also receive a āwritten releaseā from the person before collecting any biometric data.Ā Id.
Significantly, the BIPA provides a private right of action for any person aggrieved by a BIPA violation, and allows a claimant to recover liquidated damages of $1,000 for each negligent violation, and $5,000 for each intentional or reckless violation (or actual damages, whichever is greater).Ā 740 ILCS 14/20.Ā The BIPA also expressly provides that the prevailing party in a BIPA action may recover its reasonable attorneysā fees and costs.Ā Id.