January 28, 2023

Volume XIII, Number 28

Advertisement

January 27, 2023

Subscribe to Latest Legal News and Analysis

January 26, 2023

Subscribe to Latest Legal News and Analysis

January 25, 2023

Subscribe to Latest Legal News and Analysis

Illinois Appellate Court Holds Data Retention Policies Required When Collecting Biometric Data

On November 30, 2022, the Second District Appellate Court of Illinois reversed and remanded a grant of summary judgement in favor of defendant, J&M Plating, Inc., for alleged violation of the Illinois Biometric Information Privacy Act (“BIPA”). In Mora v. J&M Plating, Inc., the plaintiff claimed that J&M Plating had violated BIPA by collecting workers’ fingerprints without a proper data retention and destruction policy for biometric information.

The court reversed the grant of summary judgment finding that the lower court misinterpreted the relevant sections of BIPA. The court reasoned that the legislative intent behind Section 15(a) of BIPA supports companies implementing written data retention and destruction policies before collecting or processing biometric data. The court reinforced its holding by reasoning that, under Section 15(b), companies are required to obtain individual’s informed consent before collecting biometric information. Finally, the court disagreed with the lower court’s assertion that the plaintiff suffered no harm, and therefore had no case, by relying on precedent to reason that actual harm is not required under BIPA.

Copyright © 2023, Hunton Andrews Kurth LLP. All Rights Reserved.National Law Review, Volume XII, Number 342
Advertisement
Advertisement
Advertisement

About this Author

In today’s digital economy, companies face unprecedented challenges in managing privacy and cybersecurity risks associated with the collection, use and disclosure of personal information about their customers and employees. The complex framework of global legal requirements impacting the collection, use and disclosure of personal information makes it imperative that modern businesses have a sophisticated understanding of the issues if they want to effectively compete in today’s economy.

Hunton Andrews Kurth LLP’s privacy and cybersecurity practice helps companies manage data and...

212 309 1223 direct
Advertisement
Advertisement
Advertisement