Biometric Information Privacy Act (BIPA)
The Biometric Information Privacy Act (BIPA) is one of the strongest privacy laws in the country, and it gives individuals real power when companies mishandle biometric data. At Net Law Advocates, we represent employees, consumers, and everyday people whose fingerprints, facial scans, voiceprints, or other biometric identifiers were collected or stored without the legal requirements BIPA demands.
Biometric information is unique. It cannot be changed the way a password or account number can. When companies ignore the law and use biometric systems without proper notice, written consent, or lawful retention procedures, they place people at long-term risk. We focus on holding these companies accountable, explaining your rights clearly, and seeking compensation for the harm you experienced.
Understanding BIPA And Your Rights
BIPA is an Illinois statute created to protect individuals from improper collection and misuse of biometric identifiers. The law applies to fingerprints, facial geometry scans, hand geometry, retinal scans, voiceprints, and other biometric markers used for identification.
Under BIPA, companies must meet strict requirements before collecting or storing this information. These requirements include written notice, written consent, a publicly available retention and deletion policy, and limits on sharing or selling biometric data. BIPA also requires companies to safeguard biometric information in the same way they protect highly sensitive confidential data.
If a company fails to follow these rules, individuals may seek statutory damages even without financial losses. This allows employees and consumers to take action the moment their biometric rights are violated.
Common BIPA Violations We See
Many BIPA violations occur in workplaces and consumer settings where biometric tools are used for convenience or security. The most frequent violations include:
- Collecting fingerprints for timekeeping without written consent
- Storing facial scans for identity verification without proper notice
- Using voice recognition technology without informing individuals
- Sharing biometric data with third-party vendors without permission
- Failing to publish a retention and destruction policy
- Retaining biometric data longer than allowed under the law
- Storing biometric information without proper protections
Even when companies claim no harm occurred, the law gives individuals the right to pursue statutory damages for these violations.
Employees And Biometric Timekeeping Systems
Across Illinois, many employers use fingerprint scanners or hand geometry systems for clocking in and out. These systems often trigger BIPA claims because:
- Employees were never given written notice
- Employers failed to obtain written consent
- Third-party vendors accessed or stored the data
- Companies did not disclose how long the data would be kept
- No lawful retention policy was provided
We represent workers in manufacturing plants, retail stores, restaurants, warehouses, healthcare facilities, and other businesses that rely on biometric timekeeping devices. Employers are responsible for following the law, and many do not.
Consumers And Biometric Tracking
Businesses increasingly use facial recognition tools, voiceprint systems, and biometric identity verification for customer access, security, or marketing. This includes:
- Retail stores using facial recognition
- Apps requiring facial scans for account verification
- Gyms and fitness centers using fingerprint entry
- Financial apps and services using voice analysis
- Nightlife venues using facial scanners for admission
When companies do not comply with consent and notice requirements, consumers have the right to pursue damages.
What Individuals May Recover In A BIPA Case
BIPA allows individuals to recover statutory damages without proving financial loss. Depending on the violation, a person may seek:
- $1,000 per negligent violation
- $5,000 per reckless or intentional violation
- Compensation for emotional distress
- Relief for privacy invasion
- Court-ordered changes to a company’s biometric practices
Because biometric data is permanent, the law recognizes the seriousness of mishandling this information.
How We Handle BIPA Claims
Our attorneys review your experience, examine how the company collected your biometric data, and determine whether legal requirements were met. This includes analyzing consent forms, vendor contracts, retention policies, and disclosures.
We represent individuals in both individual BIPA claims and large-scale actions involving hundreds or thousands of affected employees or consumers. Our focus is to protect your rights and pursue the compensation the law provides.
BIPA Claim Frequently Asked Questions
What Exactly Does BIPA Require Companies To Do Before Collecting Biometric Data?
Companies must give written notice explaining the purpose of collecting biometric data and how long they will store it. They must obtain written consent, publish a retention and destruction schedule, and protect the data with reasonable safeguards. If these steps are not followed, individuals may take legal action.
Can I Bring A BIPA Claim Even If I Was Not Financially Harmed?
Yes. BIPA does not require proof of financial loss. The violation of your biometric rights itself is enough to support a claim. The law was designed to prevent misuse before harm occurs, which means individuals can pursue statutory damages as soon as their data is collected unlawfully.
What Types Of Employers Commonly Violate BIPA?
Many BIPA cases involve employers who use fingerprint time clocks, hand scanners, or biometric entry systems. Industries frequently involved include manufacturing, retail, logistics, healthcare, restaurants, food service, and warehousing. Any employer using biometric tools must comply fully with the law.
Are Facial Recognition Tools Covered Under BIPA?
Yes. Facial geometry scans used for identity verification, entry systems, customer tracking, or security purposes fall under BIPA. Companies must obtain proper consent before collecting or storing this data.
How Do I Know If My Fingerprint Or Facial Scan Was Collected Without My Permission?
If you were required to scan your fingerprint, use a hand scanner, or complete a facial scan without receiving written notice or signing a consent form, there is a strong likelihood your rights were violated. We review employment documents, digital records, and company policies to confirm violations.
Can A Company Share Biometric Data With A Vendor?
Only with proper consent. Many companies outsource biometric storage to third-party vendors. If the company allowed access without written consent, that may be a BIPA violation. Individuals have the right to take legal action when their data is shared improperly.
How Long Do I Have To File A BIPA Claim?
Most BIPA claims must be filed within a defined time period, but the exact timeline depends on the nature of the violation. It is important to act quickly so we can review evidence, confirm violations, and protect your rights before time runs out.
What Compensation May Be Available In A BIPA Case?
Individuals may receive statutory damages of $1,000 for each negligent violation and $5,000 for each reckless or intentional violation. Compensation for emotional distress or privacy invasion may also be available. The law is designed to ensure meaningful relief for individuals whose biometric data was mishandled.
Does BIPA Apply To Out-Of-State Companies Operating In Illinois?
Yes. Any company doing business in Illinois or collecting biometric data from Illinois residents must comply with BIPA. Many companies are unaware of this requirement, which leads to frequent violations involving both employers and consumer-facing businesses.
How Can A Lawyer Help With A BIPA Case?
We review how your biometric data was collected, determine whether legal requirements were followed, gather evidence, and pursue compensation on your behalf. Many BIPA cases involve large groups of affected individuals, and we handle both individual and multi-plaintiff claims to ensure your rights are protected.
Contact Net Law Advocates For A Free, Confidential Consultation
If your fingerprint, facial scan, voiceprint, or other biometric information was collected without proper consent, we are ready to help. Please fill out our secure web form to schedule a free, confidential consultation. Our attorneys represent individuals nationwide and will review your situation carefully to determine how we may assist you.