E Point Perfect
Law \ Legal

Illinois Appellate Court Holds Data Retention Policies Required When Collecting Biometric Data


On November 30, 2022, the Second District Appellate Court of Illinois reversed and remanded a grant of summary judgement in favor of defendant, J&M Plating, Inc., for alleged violation of the Illinois Biometric Information Privacy Act (“BIPA”). In Mora v. J&M Plating, Inc., the plaintiff claimed that J&M Plating had violated BIPA by collecting workers’ fingerprints without a proper data retention and destruction policy for biometric information.

The court reversed the grant of summary judgement finding that the lower court misinterpreted the relevant sections of BIPA. The court reasoned that the legislative intent behind Section 15(a) of BIPA supports companies implementing written data retention and destruction policies before collecting or processing biometric data. The court reinforced its holding by reasoning that, under Section 15(b), companies are required to obtain individual’s informed consent before collecting biometric information. Finally, the court disagreed with the lower court’s assertion that the plaintiff suffered no harm, and therefore had no case, by relying on precedent to reason that actual harm is not required under BIPA.


Source link

Related posts

ESMA consults on manual on post-trade transparency

Monthly Wrap Up (November 11, 2022): Noteworthy Trade Secret and Restrictive Covenant Cases, Developments and Posts

CFPB Warns Failure to Safeguard Consumer Data May Be Unfair Act or Practice

CMS Proposes Amending Identified Overpayment Rules to Align with FCA Knowledge Standard

REGISTER TODAY! Abbott & Kindermann’s 22nd Annual Land Use, Environmental, and Real Estate Law Update

Google Geofence Data Identified 5,723 Devices Near January 6th US Capitol Attack: Data Privacy Trends