[cs_content][cs_element_section _id=”1″ ][cs_element_layout_row _id=”2″ ][cs_element_layout_column _id=”3″ ][cs_element_headline _id=”4″ ][cs_content_seo]Illinois Biometric Information Privacy Act (BIPA)nnHelp create a product you and your clients will lovenn[/cs_content_seo][cs_element_headline _id=”5″ ][cs_content_seo]What is the Illinois Biometric Information Privacy Act?nn[/cs_content_seo][cs_element_text _id=”6″ ][cs_content_seo]The Illinois Biometric Information Privacy Act (BIPA) is a law that imposes requirements on businesses that collect or otherwise obtain biometric information, including fingerprints, retina scans, and facial geometric scans. Most often, employers seek to collect this information through biometric time clocks to keep track of employees’ hours. The law allows private individuals to bring suit and recover damages for violations.nn[/cs_content_seo][/cs_element_layout_column][/cs_element_layout_row][/cs_element_section][cs_element_section _id=”7″ ][cs_element_layout_row _id=”8″ ][cs_element_layout_column _id=”9″ ][cs_element_headline _id=”10″ ][cs_content_seo]What Businesses Are Subject to BIPA?nnHelp create a product you and your clients will lovenn[/cs_content_seo][/cs_element_layout_column][cs_element_layout_column _id=”11″ ][cs_element_text _id=”12″ ][cs_content_seo]BIPA covers all private sector employers with employees in the state of Illinois that want to collect biometric information. However, this act does not apply to financial institutions subject to the Gramm-Leach-Bliley Act. Further, this act does not apply to contractors, subcontractors or agents of state or municipal government agencies.nn[/cs_content_seo][/cs_element_layout_column][/cs_element_layout_row][/cs_element_section][cs_element_section _id=”13″ ][cs_element_layout_row _id=”14″ ][cs_element_layout_column _id=”15″ ][cs_element_headline _id=”16″ ][cs_content_seo]What Does BIPA Require of Covered Businesses?nn[/cs_content_seo][/cs_element_layout_column][/cs_element_layout_row][cs_element_layout_row _id=”17″ ][cs_element_layout_column _id=”18″ ][x_feature_list style=”font-size: 16px;”][x_feature_box text_color=”#3E3E3C” graphic=”icon” graphic_size=”30px” graphic_shape=”circle” graphic_color=”#fff” graphic_bg_color=”#6270c6″ align_h=”left” align_v=”top” side_graphic_spacing=”20px” max_width=”none” child=”true” connector_width=”0px” connector_style=”dashed” connector_color=”#272727″ graphic_icon=”check” style=”margin-bottom: -25px;”]Develop and disclose their policies for usage and retention of biometric information. Such policy must inform the subject of the specific purpose and length of term for which a biometric identifier or biometric information is being collected, stored, and used. [/x_feature_box][x_feature_box text_color=”#3E3E3C” graphic=”icon” graphic_size=”30px” graphic_shape=”circle” graphic_color=”#fff” graphic_bg_color=”#6270c6″ align_h=”left” align_v=”top” side_graphic_spacing=”20px” max_width=”none” child=”true” connector_width=”0px” connector_style=”dashed” connector_color=”#272727″ graphic_icon=”check” style=”margin-bottom: -25px;”]Request and receive written consent from individuals before obtaining their biometric data. [/x_feature_box][x_feature_box text_color=”#3E3E3C” graphic=”icon” graphic_size=”30px” graphic_shape=”circle” graphic_color=”#fff” graphic_bg_color=”#6270c6″ align_h=”left” align_v=”top” side_graphic_spacing=”20px” max_width=”none” child=”true” connector_width=”0px” connector_style=”dashed” connector_color=”#272727″ graphic_icon=”check” style=”margin-bottom: -25px;”]A private entity in possession of biometric information must not disclose or disseminate a person’s biometric information unless:
- The subject of biometric information consents to the disclosure
- The disclosure completes a financial transaction requested or authorized by the subject of biometric information
- The disclosure is required by state or federal law or municipal ordinance
- The disclosure is required by law enforcement
[/x_feature_box][/x_feature_list][x_feature_list style=”font-size: 16px;”][x_feature_box text_color=”#3E3E3C” graphic=”icon” graphic_size=”30px” graphic_shape=”circle” graphic_color=”#fff” graphic_bg_color=”#6270c6″ align_h=”left” align_v=”top” side_graphic_spacing=”20px” max_width=”none” child=”true” connector_width=”0px” connector_style=”dashed” connector_color=”#272727″ graphic_icon=”check” style=”margin-bottom: -25px;”]A private entity in possession of biometric information is prohibited from selling, leasing, trading, or otherwise profiting from a person’s biometric information. [/x_feature_box][x_feature_box text_color=”#3E3E3C” graphic=”icon” graphic_size=”30px” graphic_shape=”circle” graphic_color=”#fff” graphic_bg_color=”#6270c6″ align_h=”left” align_v=”top” side_graphic_spacing=”20px” max_width=”none” child=”true” connector_width=”0px” connector_style=”dashed” connector_color=”#272727″ graphic_icon=”check” style=”margin-bottom: -25px;”]Maintain safeguards to protect biometric information in an entity’s possession; ensure that protective measures for biometric information are the same or more protective than the manner in which the entity protects other confidential and sensitive information [/x_feature_box][/x_feature_list][/cs_element_layout_column][/cs_element_layout_row][/cs_element_section][cs_element_section _id=”26″ ][cs_element_layout_row _id=”27″ ][cs_element_layout_column _id=”28″ ][cs_element_headline _id=”29″ ][cs_content_seo]Who Enforces BIPA and What Are the Penalties for Non-Compliance?nn[/cs_content_seo][cs_element_text _id=”30″ ][cs_content_seo]Any person that is aggrieved by a violation of BIPA has the right of action in a State circuit court or the right to file a supplemental claim in a federal district court against an offending party. The courts decide the outcome. For negligent violations, individuals can recover the greater of $1,000 or their actual losses. For reckless violations, the baseline award increases to $5,000 per violation.
According to the Texas Bar Journal, since July 2017, more than 25 cases have been filed in state and federal courts in Illinois against video game companies, food product manufacturers, gas stations, and even restaurant chains (Wow Bao was sued over its use of facial scans to verify customer orders at self-service kiosks). And as more employers start to use timekeeping systems and security protocols that use biometric identifiers (such as fingerprints or facial scans), the employee/employer relationship will become a burgeoning legal battleground.nn[/cs_content_seo][/cs_element_layout_column][/cs_element_layout_row][/cs_element_section][cs_element_section _id=”31″ ][cs_element_layout_row _id=”32″ ][cs_element_layout_column _id=”33″ ][cs_element_global_block _id=”34″ ][/cs_element_layout_column][/cs_element_layout_row][/cs_element_section][/cs_content]
