BIPA Alert: Seventh Circuit Ruling Applies BIPA Amendments Retroactively, Ending “Per Scan” Exposure for Companies Operating in Illinois

In a major positive development for employers facing biometric privacy litigation under the Illinois’ Biometric Information Protection Act (BIPA), the Seventh Circuit Court of Appeals unanimously held that the 2024 legislative amendments to BIPA’s damages provisions apply retroactively to pending cases. This decision dramatically curtails potential billion-dollar exposure for Illinois employers and represents the definitive end of so-called “per-scan” damages.

As we previously discussed, the Illinois Supreme Court’s 2023 ruling in Latrina Cothron v. White Castle System Inc. created an untenable outcome for Illinois employers in holding that BIPA violations accrued each time an employer collected an individual’s biometric information without complying with BIPA’s notice and consent requirements. Cothron meant that employers could incur damages (ranging from $1,500 to $5,000) every time they collected employees’ biometric information without adequate notice and consent. For example, if an employee working five days per week used unlawfully collected biometric data to scan in and out four times per day (i.e., to start/end the shift and to take a lunch break), their employer could be liable for damages ranging from $1,500,000 to $5,000,000 per employee per year.

Following the Cothron ruling, the Illinois General Assembly passed, and Governor J.B. Pritzker signed, amendments to BIPA in August 2024 that eliminated these “per-scan” damages and replaced them with “per-person” damages, such that repeated non-compliant collections of the same person’s biometric information via the same method only amounted to a single BIPA violation.

The Seventh Circuit has now unanimously held that the 2024 BIPA amendments apply retroactively to any pending litigation filed before the amendments’ enactment. This decision may signal the proverbial “death knell” for smaller, individual BIPA claims, as the Seventh Circuit emphasized both the discretionary nature of BIPA damages as well as the potential impact on subject matter jurisdiction for pending cases that may no longer satisfy the amount-in-controversy threshold of $75,000. Although the Seventh Circuit’s decision does not eliminate employer exposure under BIPA, it provides more predictability for employers navigating ongoing litigation and settlement negotiations and further deflates the once-ballooning exposure for employers under BIPA.

With the rise of biometric-related technologies in employment, including some artificial intelligence systems, Illinois employers that currently use or are planning to use these tools to collect employee biometric information should immediately draft and implement a BIPA-compliant notice and consent policy. Though the BIPA threat may be diminished, it has not been altogether eliminated, so BIPA compliance remains a must.

Disclaimer

This blog is made available by Foley & Lardner LLP (“Foley” or “the Firm”) for informational purposes only. It is not meant to convey the Firm’s legal position on behalf of any client, nor is it intended to convey specific legal advice. Any opinions expressed in this article do not necessarily reflect the views of Foley & Lardner LLP, its partners, or its clients. Accordingly, do not act upon this information without seeking counsel from a licensed attorney. This blog is not intended to create, and receipt of it does not constitute, an attorney-client relationship. Communicating with Foley through this website by email, blog post, or otherwise, does not create an attorney-client relationship for any legal matter. Therefore, any communication or material you transmit to Foley through this blog, whether by email, blog post or any other manner, will not be treated as confidential or proprietary. The information on this blog is published “AS IS” and is not guaranteed to be complete, accurate, and or up-to-date. Foley makes no representations or warranties of any kind, express or implied, as to the operation or content of the site. Foley expressly disclaims all other guarantees, warranties, conditions and representations of any kind, either express or implied, whether arising under any statute, law, commercial use or otherwise, including implied warranties of merchantability, fitness for a particular purpose, title and non-infringement. In no event shall Foley or any of its partners, officers, employees, agents or affiliates be liable, directly or indirectly, under any theory of law (contract, tort, negligence or otherwise), to you or anyone else, for any claims, losses or damages, direct, indirect special, incidental, punitive or consequential, resulting from or occasioned by the creation, use of or reliance on this site (including information and other content) or any third party websites or the information, resources or material accessed through any such websites. In some jurisdictions, the contents of this blog may be considered Attorney Advertising. If applicable, please note that prior results do not guarantee a similar outcome. Photographs are for dramatization purposes only and may include models. Likenesses do not necessarily imply current client, partnership or employee status.