Biometric Privacy Rulings Expose Illinois Employers To Additional Damages

February 27, 2023

 

What's New

Two recent rulings interpreting the controversial Biometric Information Privacy Act (BIPA) raise the stakes for Illinois employers that use biometric information.

BIPA forbids employers to collect, capture, purchase, or obtain a person’s biometric information unless they first inform the person in writing what the information will be used for and how long it will be stored and obtain a written release from the person. Biometric data includes fingerprints, retina scans, voiceprints, and other biometric identifiers.

In Cothron v. White Castle System, the Illinois Supreme Court held February 17 that BIPA claims and their related penalties accrue each time — not only the first time — that an employer unlawfully collects or discloses biometric information. In Tims v. Black Horse Carriers, the state’s high court concluded February 2 that all BIPA claims carry a five-year statute of limitations.

What It Means

These holdings are likely to make BIPA lawsuits easier to file and increase the damage awards against Illinois employers that use biometrics. It is unclear whether the state legislature will remedy the situation.

What You Should Do

CWC members can read more here and can explore related state standards resources on our website.





RELATED CONTENT


Subscribe to CWC's Updates and Events

CLICK TO SIGN UP




See more

Resources

Our library of sources helping you understand and manage your workplace requirements and risks.

Data Center

Metrics and dashboards guiding you to make statistics and research-driven decisions.

Events

Learn and network at events focused on compliance policy, practice, and strategy.

Diversance Connect

Helping members find and connect with thousands of outreach and recruitment sources.




© 2026 Center for Workplace Compliance (CWC), Washington, DC 20005. All rights reserved

Terms of Service      Privacy Policy      Cookie Policy      Antitrust Policy