Illinois Security Camera Laws: BIPA, Audio Rules, and Placement (2026)

Security cameras are everywhere in Illinois, from retail stores and office buildings to residential doorbell cameras and parking lot systems. The legal framework governing these cameras involves multiple overlapping statutes. The eavesdropping law under 720 ILCS 5/14-2 controls audio capture. The Biometric Information Privacy Act (740 ILCS 14) regulates cameras with facial recognition capabilities. The voyeurism statute under 720 ILCS 5/26-4 prohibits cameras in private areas. Together, these laws create one of the most comprehensive security camera regulatory frameworks in the country.

Video-Only vs. Audio-Enabled Security Cameras

The Critical Distinction

The single most important legal question for security camera compliance in Illinois is whether the camera records audio.

Video-only cameras in public or commercial settings are generally legal without special consent requirements. Standard security cameras that record silent footage of retail floors, parking lots, lobbies, and other non-private areas operate within the law.

Audio-enabled cameras that capture conversations trigger the eavesdropping statute under 720 ILCS 5/14-2. If the camera records audio of a private conversation without consent from all parties, the operator faces Class 4 felony charges carrying 1 to 3 years in prison and up to $25,000 in fines.

Practical Implications

Many modern security cameras come with built-in microphones and audio recording enabled by default. Camera operators in Illinois should:

• Disable audio recording on security cameras unless all-party consent is obtained
• If audio recording is desired, post clear signage notifying all persons that audio and video recording is in progress
• Understand that signage alone may not satisfy the consent requirement for truly private conversations
• Consult legal counsel before enabling audio on any security camera system

BIPA Requirements for Security Cameras

When BIPA Applies

The Biometric Information Privacy Act (740 ILCS 14) applies to security cameras that process biometric identifiers. A camera system triggers BIPA when it:

• Uses facial recognition technology to identify or verify individuals
• Captures and analyzes facial geometry (the mathematical mapping of facial features)
• Creates biometric templates from recorded images
• Stores or transmits biometric data for identification purposes

A standard security camera that simply records and stores video footage without biometric processing does not trigger BIPA. The line is drawn at whether the system processes biometric identifiers as defined in BIPA Section 10.

BIPA Compliance Checklist for Camera Operators

If your security camera system uses facial recognition or other biometric processing, you must:

1. Provide written notice to every individual before their biometric data is collected
2. Disclose the specific purpose for which the biometric data is being collected
3. Disclose the retention period for the biometric data
4. Obtain a written release from each individual authorizing the collection
5. Develop and publish a written policy establishing a retention schedule and destruction guidelines
6. Never sell, trade, or profit from biometric data
7. Store biometric data using a reasonable standard of care within the industry

BIPA Penalties for Camera Operators

Non-compliance carries significant financial exposure:

• $1,000 per violation for negligent failures to comply
• $5,000 per violation for intentional or reckless violations
• Reasonable attorney fees and litigation costs
• Injunctive relief

Each individual whose biometric data is collected without proper consent represents a separate violation. For a retail store with thousands of daily visitors whose facial geometry is scanned by a facial recognition system, the aggregate liability can be enormous.

Notable BIPA Security Camera Cases

• Clearview AI (2025): $51.75 million settlement for collecting facial biometrics without BIPA-compliant consent
• Facebook (2021): $650 million settlement for facial recognition tag suggestions that captured facial geometry
• BNSF Railway (2022): $228 million jury verdict for biometric data collection from truck drivers without consent

These cases demonstrate that BIPA enforcement carries real financial consequences. Businesses deploying facial recognition security cameras in Illinois must take BIPA compliance seriously.

Residential Security Camera Rules

Homeowner Cameras

Illinois homeowners may install security cameras on their own property. General rules include:

• Exterior cameras pointing at your own property (driveway, front door, backyard) are legal
• Interior cameras in common areas (living room, kitchen, entryway) are permitted for security
• No cameras in bathrooms, bedrooms used by guests, or other areas where visitors expect bodily privacy
• Audio recording requires consent from all parties if the camera captures private conversations
• Camera angles should not capture areas where neighbors have a reasonable expectation of privacy (such as through a neighbor's bedroom window)

Neighbor Disputes Over Security Cameras

Security camera disputes between neighbors are common in Illinois. Key principles:

• You generally have the right to record activity visible from your own property
• Cameras should not be positioned to peer into a neighbor's private areas (windows, enclosed backyards)
• Audio recording directed at a neighbor's private conversations could violate the eavesdropping statute
• Local municipal ordinances may impose additional restrictions on camera placement and angles
• Harassment through targeted camera placement may give rise to civil claims

Video Doorbell Cameras

Doorbell cameras like Ring and Nest are popular in Illinois. Legal considerations include:

• Recording the area immediately around your front door is generally legal
• Audio recording of conversations at the door may trigger the eavesdropping statute if conversations are private
• Facial recognition features on smart doorbells trigger BIPA
• Footage shared with law enforcement must comply with applicable privacy rules
• Ring's "Neighbors" and similar community features involve sharing footage, which raises additional privacy considerations

Commercial and Business Security Cameras

Retail Stores

Illinois retailers may use security cameras for loss prevention and safety. Requirements:

• Cameras are permitted on sales floors, at entrances and exits, in parking lots, and in stockrooms
• No cameras in fitting rooms, changing rooms, or restrooms
• If cameras capture audio, eavesdropping law compliance is required
• Facial recognition systems require BIPA compliance for every customer scanned
• Employees should receive notice of video monitoring

Office Buildings

Commercial office buildings may install cameras in common areas:

• Lobbies, hallways, elevators, and parking garages are appropriate camera locations
• Private offices and conference rooms may have cameras, but audio recording of private conversations requires consent
• Restrooms and changing areas are prohibited camera locations
• Tenant leases should address camera placement and monitoring practices
• BIPA compliance is required for biometric access control systems

Restaurants and Bars

Food service establishments may use cameras for security and operational purposes:

• Cameras in dining areas, bars, kitchens, and entryways are generally permitted
• Restroom cameras are always prohibited
• Audio recording of patron conversations may violate the eavesdropping statute
• Cameras should not capture credit card numbers, PINs, or other sensitive financial information at payment terminals

Government and Public Surveillance

Municipal Camera Networks

Illinois municipalities operate surveillance camera networks in public areas. The Chicago Police Department, for example, operates one of the largest municipal camera networks in the country with thousands of cameras across the city.

Public surveillance cameras operated by government entities are subject to different rules than private cameras:

• Government cameras in public spaces are generally lawful
• The Illinois Freedom of Information Act (5 ILCS 140) governs public access to government surveillance footage
• BIPA's consent requirements apply only to "private entities," so government agencies are exempt from BIPA
• However, government use of facial recognition technology faces growing legislative scrutiny

Drone Surveillance

The Freedom from Drone Surveillance Act (725 ILCS 167) restricts law enforcement use of surveillance drones in Illinois. Under this law:

• Law enforcement agencies generally need a warrant to use drones for surveillance
• Exceptions exist for terrorist threats, imminent danger to life, crime scene documentation, and search and rescue
• Evidence obtained through warrantless drone surveillance may be suppressed in court
• The Act does not restrict civilian drone use, though federal FAA regulations and state privacy laws still apply

Data Storage and Security Requirements

Retention Policies

Illinois does not have a general statute mandating specific retention periods for security camera footage. However:

• BIPA requires a publicly available written policy establishing a retention schedule for biometric data
• BIPA data must be destroyed when the initial purpose is fulfilled or within 3 years of the individual's last interaction, whichever comes first
• Footage that becomes evidence in a legal matter must be preserved
• Industry best practices suggest retaining general surveillance footage for 30 to 90 days

Data Security

Camera operators should implement reasonable security measures to protect recorded footage:

• Encrypt stored footage
• Limit access to authorized personnel
• Use secure network connections for cloud-connected cameras
• Regularly update camera firmware and software to patch security vulnerabilities
• Maintain access logs showing who viewed footage and when

Data Breach Notification

The Illinois Personal Information Protection Act (815 ILCS 530) requires notification of Illinois residents when a data breach compromises their personal information. If security camera footage or biometric data is compromised in a breach, the camera operator must notify affected individuals.

More Illinois Recording Laws

Audio Recording | Video Recording | Voyeurism & Hidden Cameras | Workplace Recording | Recording Police | Phone Call Recording | Security Cameras | Recording in Public | Landlord-Tenant | Dashcam Laws | Schools | Medical Recording

Back to Illinois Recording Laws