IL_BIPA_BIOMETRIC_001

rules/regulations/us/il_bipa_biometric.yaml

Citation

740 ILCS 14/15(a): A private entity in possession of biometric identifiers or biometric information must develop a written policy, made available to the public, establishing a retention schedule and guidelines for permanently destroying biometric identifiers and biometric information when the initial purpose for collecting or obtaining such identifiers or information has been satisfied or within 3 years of the individual's last interaction with the private entity, whichever occurs first. 740 ILCS 14/15(b): No private entity may collect, capture, purchase, receive through trade, or otherwise obtain a person's or a customer's biometric identifier or biometric information, unless it first: (1) informs the subject or the subject's legally authorized representative in writing that a biometric identifier or biometric information is being collected or stored; (2) informs the subject or the subject's legally authorized representative in writing of the specific purpose and length of term for which a biometric identifier or biometric information is being collected, stored, and used; and (3) receives a written release executed by the subject of the biometric identifier or biometric information or the subject's legally authorized representative. 740 ILCS 14/15(c): No private entity in possession of a biometric identifier or biometric information may sell, lease, trade, or otherwise profit from a person's or a customer's biometric identifier or biometric information.

Condition

Prohibits private entities from collecting, capturing, or otherwise obtaining biometric identifiers or biometric information without first obtaining informed written consent. Requires written retention and destruction policies. Illinois Biometric Information Privacy Act (BIPA), 740 ILCS 14/15.

Condition type

regex, semantic

Status in the file

approved