The Illinois Supreme Court recently issued another decision interpreting the Biometric Information Privacy Act (“BIPA”) to expand potential liability for businesses. The court held in Cothron v. White Castle that each time a business collects or discloses an individual’s biometric data without first obtaining BIPA-compliant consent (for example, each time an employee clocks in and out of work using a fingerprint timekeeping system), a separate claim accrues under BIPA. My colleagues and I have written a report about the court’s decision.
