Biometric Information Privacy Act (BIPA) Litigation Tracker
This litigation tracker is intended to track cases filed under Illinois’ Biometric Information Privacy Act. It contains brief case summaries, relevant secondary sources, the context (workplace, social media, etc.), what kind of biometric data/information is alleged to have been collected, trial and/or appellate court results, and other relevant details.
Key Takeaways:
Almost all BIPA lawsuits are class actions that allege that defendant(s) collected plaintiffs' biometric data (1) without informing individuals that their biometric information is being collected or stored, (2) without informing individuals for how long and for what purposes their biometric information is collected, (3) without receiving written releases from the individuals whose biometric data is collected, and (4) without provided a publicly available written policy establishing a retention schedule and guidelines for destruction of biometric information.
Over 100 out of a total of 182 lawsuits involved allegations by employees against their employers, mostly for collecting employees' fingerprints for timekeeping purposes.
51 out of a total of 182 lawsuits alleged BIPA violations due to the collection, disclosure, and/or dissemination of individuals’ facial geometry or facial biometric information. 35 of these 51 cases were against smartphone applications (e.g. TikTok, Snapchat, OKCupid), photo services (e.g. Amazon Photos, Google Photos), and various tech products, (e.g. Ring, Clearview) that scanned users’ faces to profit and/or to improve facial recognition software.
Other BIPA violations involve remote proctoring services; identity verification for customers, application users, and employees; and companies that contribute and disclose biometric data to Clearview for their facial recognition database.
Targets of BIPA litigation have often turned to their insurers for help in defending and resolving these cases. Though general liability insurers seek court approval for denial of coverage, alleged disclosure of a person's biometric information in violation of Section 15(d) of BIPA is a potentially covered publication that violated a person's privacy rights (see W. Bend Mut. Ins. Co. v. Krishna Schaumburg Tan, Inc.)
Important cases:
Rosenbach v. Six Flags Entertainment Corp
clarifying the expansive scope of BIPABIPA “codified that individuals possess a right to privacy in and control over their biometric identifiers and biometric information.”
violations are not “merely ‘technical’ in nature” because “an individual’s unique biometric identifiers . . . cannot be changed if compromised or misused.”
“an individual need not allege some actual injury or adverse effect, beyond violation of his or her rights under the Act, in order to qualify as an ‘aggrieved’ person and be entitled to seek liquidated damages”
Patel v. Facebook
article-III standingThe violation of BIPA’s notice and consent provisions amounts to a concrete injury-in-fact (not merely a procedural violation) sufficient to confer Article II standing to plaintiffs.
W. Bend Mut. Ins. Co. v. Krishna Schaumburg Tan, Inc.
broadening insurance liabilityCommercial general liability insurance for personal injury potentially covers BIPA lawsuits
Trial Court Holding | Details re trial court holding | Appellate court holding | Holding on remand |
---|---|---|---|
2: Joint stipulation of voluntary dismissal with prejudice (no settlement) | |||
35: Defendant’s motion to dismiss granted (no settlement) | 5: W/ prejudice | 2: Reversed & remanded | 2: Pending |
1: Remanded to be dismissed w/o prejudice | 1: Dismissed w/o prejudice | ||
1: Dismissed due to plaintiff’s motion for voluntary dismissal | |||
27: W/o prejudice | 3: Affirmed | ||
2: Vacated & Remanded | 1: Pending 1: Dismissed w/o prejudice | ||
2: Appeal dismissed | |||
3: Unknown | |||
10: Plaintiff’s notice of voluntary dismissal (no settlement) | 1: W/ prejudice | ||
9: W/o prejudice | |||
3: For defendant | 1: Affirmed | ||
2: Insurance indemnification suit (where plaintiff is insurer) | 1: Affirmed 1: Pending | ||
7: For plaintiff | 2: Affirmed | ||
4: Insurance indemnification suit (where plaintiff is insurer) | 1: Appeal dismissed | ||
1: Defendant’s motion to compel arbitration denied | 1: Affirmed | ||
10: Remanded to state court | 1: Reversed & remanded | Plaintiff’s notice of voluntary dismissal with prejudice | |
2: Affirmed | |||
1: Appeal dismissed | |||
23: Settled | Examples: Williams v. Personalizationmall.com: ~$518 per class member Meegan v. NFI Indus., Inc: ~$570 per class member In re TikTok: ~$163 per Illinois class member In re Facebook: ~ $345 per class member Davis v. Heartland Employment Servs.: ~$500 per class member | ||
86: Pending in trial court | |||
4: Details unknown |
Details on settlements:
$4.5 million in for 4,000 class members in Williams v. Personalizationmall.com
Judge calls Pret A Manger’s $677,000 settlement offer for nearly 800 class members “in line with, if not superior to, other BIPA settlements.” This would be about $518 per class member.
$6.75 million for 950,000 class members in Miracle-Pond v. Shutterfly, Inc.
Judge calls NFI Industries’ $3.5 million settlement offer a fair and reasonable result for the workers. This would be about $570 per class member in Meegan v. NFI Industries, Inc.
Judge grants preliminary approval of $9.9 million settlement offer in Marsh v. CSL Plasma Inc.
$92 million for over a million class members in In re TikTok. Roughly 1 million national class members will get about $27, and about 177,000 Illinois class members will get approximately $163.
$650 million for $1.6 million class members in In re Facebook. About $345 per class member.
$5.4 million for 11,000 class members in Davis v. Heartland Employment Services. About $500 per class member.
DISCLAIMER: All case descriptions are based on allegations by the parties. STOP makes no warrantees of the accuracy of any such facts, and all should be read as allegations.