Destroy biometric identifiers in a timely manner.Obtain consent from individuals if the company intends to collect or disclose their personal biometric identifiers.These include a requirement that companies:
The BIPA requires companies doing business in Illinois to comply with a number of requirements pertaining to the collection and storage of biometric information. Because of this damages provision, the BIPA has spawned several class action lawsuits. The Act prescribes $1,000 per violation, and $5,000 per violation if the violation is intentional or reckless.
While Texas and Washington are the only other states that implemented similar biometric protections, BIPA is the most stringent. Notably, the Act does not apply to government entities. state of Illinois, in an effort to regulate the collection, use, and handling of biometric identifiers and information by private entities. The Biometric Information Privacy Act is a law set forth on Octoin the U.S.
