Nixon Peabody LLP

  • People
  • Capabilities
  • Insights
  • About

Trending Topics

    • People
    • Capabilities
    • Insights
    • About
    • Locations
    • Events
    • Careers
    • Alumni

    Practices

    View All

    • Affordable Housing
    • Community Development Finance
    • Corporate & Finance
    • Cybersecurity & Privacy
    • Environmental
    • Franchising & Distribution
    • Government Investigations & White Collar Defense
    • Healthcare
    • Intellectual Property
    • International Services
    • Labor & Employment
    • Litigation
    • Private Wealth & Advisory
    • Project Finance
    • Public Finance
    • Real Estate
    • Regulatory & Government Relations

    Industries

    View All

    • Cannabis
    • Consumer
    • Energy
    • Entertainment
    • Financial Services
    • Healthcare
    • Higher Education
    • Infrastructure
    • Manufacturing
    • Non Profit
    • Real Estate
    • Technology

    Value-Added Services

    View All

    • Alternative Fee Arrangements

      Developing innovative pricing structures and alternative fee agreement models that deliver additional value for our clients.

    • Continuing Education

      Advancing professional knowledge and offering credits for attorneys, staff and other professionals.

    • Crisis Advisory

      Helping clients respond correctly when a crisis occurs.

    • DEI Strategic Services

      Providing our clients with legal, strategic, and practical advice to make transformational changes in their organizations.

    • eDiscovery

      Leveraging law and technology to deliver sound solutions.

    • Global Services

      Delivering seamless service through partnerships across the globe.

    • Innovation

      Leveraging leading-edge technology to guide change and create seamless, collaborative experiences for clients and attorneys.

    • IPED

      Industry-leading conferences focused on affordable housing, tax credits, and more.

    • Legal Project Management

      Providing actionable information to support strategic decision-making.

    • Legally Green

      Teaming with clients to advance sustainable projects, mitigate the effects of climate change, and protect our planet.

    • Nixon Peabody Trust Company

      Offering a range of investment management and fiduciary services.

    • NP Capital Connector

      Bringing together companies and investors for tomorrow’s new deals.

    • NP Second Opinion

      Offering fresh insights on cases that are delayed, over budget, or off-target from the desired resolution.

    • NP Trial

      Courtroom-ready lawyers who can resolve disputes early on clients’ terms or prevail at trial before a judge or jury.

    • Social Impact

      Creating positive impact in our communities through increasing equity, access, and opportunity.

    1. Home
    2. Insights
    3. Alerts
    4. Illinois Supreme Court decision allows for biometric privacy claims to proceed without a showing of actual harmAlerts

    Alert / Privacy Law Alert

    Illinois Supreme Court decision allows for biometric privacy claims to proceed without a showing of actual harm

    Jan 26, 2019

    Share

    By Richard Tilghman IV, John Ruskusky and Brian Alcala

    The Illinois Biometric Information Privacy Act is considered the strictest biometric privacy law in the country. Today, the Illinois Supreme Court issued a much-anticipated decision regarding the requirements for seeking relief under the Act. The court held that violators can be liable for statutory damages even in the absence of actual harm. This alert discusses what your company needs to know.

    DOWNLOAD

    PDF: Illinois BIPA ruling

    In 2008, Illinois enacted what is widely considered the strictest legislation in the country for protecting biometric data, such as fingerprints, eye scans and facial scans. The Illinois Biometric Information Privacy Act (“BIPA” or “the Act”) requires disclosure and written consent for any entity that collects or stores biometric information as defined in the Act. Any person “aggrieved by” a violation of BIPA can sue for statutory damages of at least $1000 per negligent violation or $5000 per intentional violation, as well as injunctive relief, attorneys’ fees, expert witness fees and other litigation expenses.

    BIPA has been used by the plaintiffs’ class action bar to target over 150 companies involved in the collection or storage of biometric data.[1] In December 2017, the Second District of the Illinois Appellate Court provided a major setback for the plaintiffs’ bar when it ruled that BIPA’s requirement that a plaintiff be “aggrieved by” a violation of the Act necessitated more than a mere statutory violation. Rosenbach v. Six Flags Entertainment Corp., 2017 IL App (2d) 170317 (Ill. App. Ct. 2017). The Rosenbach case was brought by the mother of a 14-year-old who had provided an electronic scan of his thumb as a way to gain repeat entry to the Six Flags Great America amusement park in Gurnee, Illinois. Rosenbach alleged that neither she nor her son had received the disclosures required by the Act, and had not given written consent to the collection of his biometric information. The Illinois Appellate Court held that the violation of the Act’s disclosure and consent requirement was insufficient to create a cause of action under the Act, and that some “injury or adverse effect” to the plaintiff was required.

    In September 2018, the First District of the Illinois Appellate Court reached a contrary conclusion in Sekura v. Krishna Schaumburg Tan, Inc., 2018 IL App (1st) 180175 (Ill. App. Ct. 2018). In Sekura, the court ruled that: (1) a statutory violation alone was sufficient to give rise to a claim under the Act; (2) a disclosure of biometric information to an out-of-state third-party created sufficient injury to give rise to a claim under the Act; and (3) the plaintiff’s alleged “mental anguish” at having her biometric information collected was an additional injury that supported her status as an “aggrieved” party.

    Before Sekura was decided, the Illinois Supreme Court had granted review of the Second District’s decision in Rosenbach, setting the stage for Illinois’s highest court to decide the viability of one of the key defenses against the flood of Illinois class actions being filed under the Act.

    On January 25, 2019, the Illinois Supreme Court issued its decision in Rosenbach. In a blow to businesses that use biometric information in Illinois, the court ruled that no actual damage beyond a statutory violation was required to bring suit under the Act, characterizing Six Flags’ arguments to the contrary as “meritless.” The court cited to dictionary definitions and long-standing Illinois cases holding that the violation of any legal right is sufficient to confer “aggrieved” status. It also took issue with the Second District’s characterization of a statutory violation as merely “technical” in nature, emphasizing that a statutory violation creates a “real and significant” harm. Requiring additional harm, according to the court, would be “completely antithetical to the Act’s preventative and deterrent purposes.”

    To date, the overwhelming majority of cases filed under the Act have been brought by plaintiffs alleging that their employer had collected an electronic fingerprint for timekeeping purposes without consent. In the wake of the Illinois Supreme Court’s decision, we expect a flood of new cases to be filed alleging similar theories. While employers who use fingerprint scans for timekeeping purposes have been the most frequent target of the plaintiffs’ bar, any company that collects biometric information should consult with counsel to determine whether the Act applies and, if it does, ensure that steps are taken to comply. As the court noted, compliance “should not be difficult,” and avoids the risk of being subject to the harsh penalties imposed by the Act.

    The good news is that BIPA sets forth what a company can do to limit its exposure. These steps include having a written policy that complies with the Act and signed written consent from the person whose biometric information is collected. Nixon Peabody has assisted clients to update their disclosures and policies to ensure compliance with BIPA.


    1. See our prior coverage of these cases: “Using fingerprints for timekeeping purposes in Illinois — what you need to know about the Illinois Biometric Information Privacy Act,” available here, and “Second Circuit issues a leading decision on Article III standing requirements for claims filed under the Illinois Biometric Information Privacy Act,” available here.
      [Back to reference]

    Locations

    Chicago

    Practices

    Cybersecurity & PrivacyBiometric Information Privacy Act (BIPA)Labor, Employment, and BenefitsClass Actions & Aggregate LitigationComplex Disputes

    Insights And Happenings

    • Article

      Illinois Appellate Court holds that BIPA claims by union members are preempted by LMRA

      Feb 23, 2022
    • Alert

      Illinois Appellate Court rules that BIPA claims accrue at each collection of biometric information

      Dec 17, 2021
    • Alert

      Illinois Supreme Court rules that insurer is required to defend claim under Biometric Information Privacy Act (“BIPA”)

      May 26, 2021
    The foregoing has been prepared for the general information of clients and friends of the firm. It is not meant to provide legal advice with respect to any specific matter and should not be acted upon without professional counsel. If you have any questions or require any further information regarding these or other related matters, please contact your regular Nixon Peabody LLP representative. This material may be considered advertising under certain rules of professional conduct.

    Subscribe to stay informed of the latest legal news, alerts, and business trends.Subscribe

    • People
    • Capabilities
    • Insights
    • About
    • Locations
    • Events
    • Careers
    • Alumni
    • © 2023 Nixon Peabody. All rights reserved
    • Privacy Policy
    • Terms of Use
    • Statement of Client Rights
    • Supplier Diversity Program
    • Nixon Peabody International LLC
    • PAL