ComplyRoom US REGULATORY TRACKERGet deadline alerts
Dated research · 63 rules · 20 states · Data cutoff

Biometric Information Privacy Act (BIPA)

Enacted in force

Jurisdiction
Illinois [source]
Applies to
Private entities collecting or possessing covered biometric identifiers or biometric information; statutory exclusions apply. [source]
Penalty
Private action: negligent violations $1,000 or actual damages, whichever is greater; intentional or reckless violations $5,000 or actual damages, whichever is greater; fees and other relief. Current §20 limits repeated same-method collection and same-recipient disclosure to a single violation per person. [source]
Detail review
Accepted record facts reviewed
Nov 13, 2026

Fields requiring verification

  • enforcement date: Unverified — No distinct enforcement-start date was established. Primary source

In plain English

  • Private entities collecting or possessing covered biometric identifiers or biometric information; statutory exclusions apply. Primary source
  • Publish and follow a retention/destruction policy: purpose satisfied or three years after the last interaction, whichever comes first. Primary source
  • Before collection, give written notice of collection, purpose and retention term, and obtain a written release. Primary source
  • Do not sell or profit from biometric information; apply the statutory disclosure and protective-storage restrictions. Primary source

Dates and phased obligations

2008-10-03; current §20 amendment effective 2024-08-02 Primary source

· operative
2008-10-03; current §20 amendment effective 2024-08-02 Primary source

P.A.103-769 amended the damages/single-violation provisions effective 2024-08-02; do not multiply a repeat scan into a separate liquidated-damages claim automatically. Source and qualifications

Questions from this record

Who does 740 ILCS 14 cover?

Private entities collecting or possessing covered biometric identifiers or biometric information; statutory exclusions apply. Primary source

What is the law’s status?

Enacted / in force Primary source

What date does this record track?

2008-10-03; current §20 amendment effective 2024-08-02 Primary source

Has this record been verified?

This record’s accepted facts were last reviewed on 2026-11-13; unsupported comparison fields remain Unverified. Primary source

Primary sources

Verification history

  • — Facts and dates reconciled from the accepted T1 report. Source
  • — Accepted T1 report content changed. Source

Not legal advice. This page restates the linked record and does not determine whether a particular business is covered. Methodology and verification limits.

Compare the tracked rulesDates, coverage, and sources in one quarterly file.
View the matrix