
Illinois Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Illinois BIPA (740 ILCS 14) requires written consent before collecting fingerprints, face scans, or other biometrics. Violations carry $1,000-$5,000 in damages per violation.
Loading...
Browse our full library of legal guides, state law breakdowns, and practical legal information.
11269 articles
Browse by Category →
Illinois BIPA (740 ILCS 14) requires written consent before collecting fingerprints, face scans, or other biometrics. Violations carry $1,000-$5,000 in damages per violation.

North Carolina requires breach notification without unreasonable delay. Violations are UDTP offenses with treble damages and a private right of action under N.C. Gen. Stat. 75-65.

New York requires data breach notification within 30 days under the SHIELD Act. Learn who must be notified, safeguard requirements, and penalties up to $250K.

DC protects biometric data through its breach notification law (DC Code 28-3851). Learn what triggers notification, penalties, and how DC compares to states with stronger biometric laws.

Washington requires data breach notification within 30 days and has one of the broadest PI definitions in the U.S. Learn reporting rules, AG notification, and private right of action.

West Virginia requires data breach notification without unreasonable delay. Learn its narrow PI definition, no AG reporting requirement, encryption safe harbor, and $150K penalty cap.

Wisconsin requires data breach notification within 45 days. Learn its PI definition covering biometric data and DNA, no AG reporting requirement, and $10,000 per violation penalty.

New Hampshire requires data breach notification as quickly as possible under RSA 359-C:20. Learn about AG pre-notification, the $5,000 substitute notice threshold, CRA reporting, and penalties.

Missouri data breach notification law (Mo. Rev. Stat. 407.1500) requires prompt notice to affected residents. Learn timelines, penalties up to $150K, and AG enforcement rules.

Ohio has no biometric privacy law. Learn how the Ohio Data Protection Act safe harbor, breach notification rules, and insurance regulations affect biometric data.

Missouri has no biometric privacy law and excludes biometric data from breach notification rules. Learn current protections, pending legislation, and employer obligations.

California protects biometric data as sensitive personal information under the CCPA/CPRA. Learn about consumer rights, breach rules, employer duties, and CPPA enforcement.