Illinois Biometric Information Privacy Act, private right of action and liquidated damages (740 ILCS 14/20(a))
Each person whose biometric data was mishandled can sue for at least $1,000 per violation, or $5,000 if intentional or reckless, plus attorneys' fees (since August 2, 2024, repeated collection from the same person by the same method counts as one violation). That makes a biometric dataset a class-action risk for both seller and buyer.
Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text
In the source's own words
“(a) Any person aggrieved by a violation of this Act shall have a right of action in a State circuit court or as a supplemental claim in federal district court against an offending party. A prevailing party may recover for each violation: (1) against a private entity that negligently violates a provision of this Act, liquidated damages of $1,000 or actual damages, whichever is greater; (2) against a private entity that intentionally or recklessly violates a provision of this Act, liquidated damages of $5,000 or actual damages, whichever is greater;”
Where it was read
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide