All legislation
Enacted·legislation

Illinois Biometric Information Privacy Act (BIPA)

IllinoisEnacted Oct 3, 2008

Requires informed written consent before collecting biometric data (fingerprints, face scans, retina scans). Provides private right of action with statutory damages of $1,000–5,000 per violation. Led to landmark settlements against Facebook ($650M), Google ($100M+), Clearview AI ($52M+), and TikTok ($92M). One of the most consequential privacy laws in US history.

Privacy & SurveillanceAlgorithmic Discrimination
View full text