{"id":1182993,"date":"2023-03-06T15:10:07","date_gmt":"2023-03-06T20:10:07","guid":{"rendered":"https:\/\/bugaluu.com\/news\/illinois-torched-business-and-common-sense-with-its-biometric-privacy-law\/1182993\/"},"modified":"2023-03-06T15:10:07","modified_gmt":"2023-03-06T20:10:07","slug":"illinois-torched-business-and-common-sense-with-its-biometric-privacy-law","status":"publish","type":"post","link":"https:\/\/bugaluu.com\/news\/illinois-torched-business-and-common-sense-with-its-biometric-privacy-law\/1182993\/","title":{"rendered":"Illinois Torched Business And Common Sense With Its Biometric Privacy Law"},"content":{"rendered":"<div class=\"ftpimagefix\" style=\"float:left\"><a target=\"_blank\" href=\"https:\/\/www.zerohedge.com\/economics\/illinois-torched-business-and-common-sense-its-biometric-privacy-law\" rel=\"noopener\"><img decoding=\"async\" width=\"100\" data-entity-type=\"file\" data-entity-uuid=\"fbfbcb4d-de10-47f4-8124-ad78130f2b7f\" class=\"inline-images image-style-inline-images\" src=\"https:\/\/assets.zerohedge.com\/s3fs-public\/styles\/inline_image_mobile\/public\/inline-images\/white-castle-water-tower-6.jpg?itok=sk8gtvZV\" alt=\"\"><\/a><\/div>\n<p><span class=\"field field--name-title field--type-string field--label-hidden\">Illinois Torched Business And Common Sense With Its Biometric Privacy Law<\/span><\/p>\n<div class=\"clearfix text-formatted field field--name-body field--type-text-with-summary field--label-hidden field__item\">\n<p><em>By Mark Glennon of <a target=\"_blank\" href=\"https:\/\/wirepoints.org\/illinois-torched-business-and-common-sense-with-its-biometric-privacy-law-wirepoints\/\" rel=\"noopener\">Wirepoints<\/a><\/em><\/p>\n<p>How sadly ironic that White Castle became the latest victim of the Illinois General Assembly\u2019s malfeasance. Its stores are modeled after the Chicago Water Tower, which survived the Chicago Fire and stands as a monument to the spirit of tenacity and resilience that once prevailed to rebuild the city.<\/p>\n<\/p>\n<p>Today, Mrs. O\u2019Leary\u2019s cow is the state\u2019s own government. It set off what the law firm Mayer Brown rightly <a target=\"_blank\" href=\"https:\/\/www.mayerbrown.com\/en\/perspectives-events\/publications\/2023\/02\/illinois-supreme-courts-most-recent-bipa-decision-exponentially-increases-potential-exposure-for-businesses\" rel=\"noopener\">calls<\/a> a \u201csix-alarm fire for businesses with customers or employees in Illinois.\u201d<\/p>\n<p>BIPA, the <a target=\"_blank\" href=\"https:\/\/www.ilga.gov\/legislation\/ilcs\/ilcs3.asp?ActID=3004&amp;ChapterID=57\" rel=\"noopener\">Biometric Information Privacy Act,<\/a> arises from a legitimate concern, as most laws do.<strong> In this case, it\u2019s privacy of personal biometric information such as fingerprints, DNA and distinctive elements of things like face and retina features.<\/strong> Some of that data is used widely in the business world for things like time management, security, wellness programs and worker safety. The law requires informed consent prior to collecting the data, mandates protection and retention guidelines and bans profiting from selling the data.<\/p>\n<p><strong>That\u2019s fine, but the problem is that the law imposes penalties wildly out of proportion to the seriousness of noncompliance or amount of harm done by a violation.<\/strong><\/p>\n<p>It can be a death penalty for violators. And the law allows anybody affected to sue for those fines.<\/p>\n<p>That\u2019s a firebomb recipe for personal injury lawyers. Nearly 2,000 lawsuits alleging violations of BIPA have been filed since 2017, \u201cyielding a series of massive settlements and judgments,\u201d as <a target=\"_blank\" href=\"https:\/\/www.reuters.com\/legal\/white-castle-could-face-multibillion-dollar-judgment-illinois-privacy-lawsuit-2023-02-17\/\" rel=\"noopener\">Reuters reported<\/a>. Defendants have included Facebook, which paid $650 million to settle a BIPA class action and BNSF Railway Co, which a jury ordered to pay $228 million to truck drivers. Anybody thinking about suing enjoys a very generous five-year statute of limitations.<\/p>\n<p><strong>Then came last week\u2019s <a target=\"_blank\" href=\"https:\/\/ilcourtsaudio.blob.core.windows.net\/antilles-resources\/resources\/e304b011-82d9-4832-9cae-d8205749a2ec\/Cothron%20v.%20White%20Castle%20System,%20Inc.,%202023%20IL%20128004.pdf\" rel=\"noopener\">decision<\/a> on White Castle from the Illinois Supreme Court, pouring accelerant on the fire.<\/strong><\/p>\n<p>Separate BIPA violations occurred <em>every time<\/em> an employee used White Castle\u2019s system that required its employees to scan their fingerprints to access their pay stubs and computers, the court ruled. And BIPA authorizes statutory damages of $1,000 for \u201ceach violation\u201d of the statute, or $5,000 if the violation is intentional or reckless.<\/p>\n<p><strong>The top court\u2019s decision therefore could mean a $17 billion liability for White Castle since some 9,500 current and past employees had used the system for years<\/strong>, as a dissenting opinion says, citing White Castle\u2019s estimate. The court\u2019s decision \u201ccould easily lead to annihilative liability for businesses,\u201d\u00a0says the dissent.<\/p>\n<p>That\u2019s what makes the decision terrifying for many other businesses that use biometrics. Every instance of use could mean a penalty of $1,000 or $5,000.<\/p>\n<p><strong>The decision \u201cleaves the plaintiffs\u2019 bar with an all-you-can-eat biometric caf\u00e9,\u201d <\/strong>wrote the law firm <a target=\"_blank\" href=\"https:\/\/www.winston.com\/en\/class-action-insider\/illinois-supreme-court-decision-in-white-castle-leaves-plaintiffs-bar-with-all-you-can-eat-biometric-buffet.html#!\/closed_state\" rel=\"noopener\">Winston &amp; Strawn<\/a> in its newsletter.<\/p>\n<p>A liability that big would destroy White Castle many times over. It\u2019s <a target=\"_blank\" href=\"https:\/\/www.cnbc.com\/2019\/11\/19\/why-white-castle-is-losing-to-mcdonalds-and-burger-king.html\" rel=\"noopener\">not that big a company<\/a> compared to many publicly owned food chains and is privately owned.<\/p>\n<p>Sorry, said the majority of the court said in their opinion, the plain language of the statute required that result. If this needs to be fixed it\u2019s up to the General Assembly. \u201cUltimately,\u201d the majority opinion says, \u201cwe continue to believe that policy-based concerns about potentially excessive damage awards under the Act are best addressed by the legislature.\u201d<\/p>\n<p>That\u2019s the real takeaway \u2013 the General Assembly should have fixed this long ago. The liabilities being imposed under BIPA have been burning out of control for several years, and the ruling making each instance subject to a penalty has long been feared, having percolated up through the courts for several years. Bills to fix it have languished.<\/p>\n<p>The dissent argued that only one violation should be recognized for any employee for the first time fingerprints are collected, and that the law must have been intended that way.<\/p>\n<p>Right or wrong, that\u2019s now water under the bridge. The top court has ruled. Only the General Assembly can fix the statute.<\/p>\n<p>One next potential victim of BIPA may be the cannabis industry, an increasingly important revenue force for the state, <a target=\"_blank\" href=\"https:\/\/www.dentons.com\/en\/insights\/articles\/2022\/december\/15\/why-bipa-litigation-could-be-a-death-knell-to-cannabis-cos\" rel=\"noopener\">according to lawyers<\/a> at Dentons U.S. \u201cBIPA damages could be a death knell to cannabis operators,\u201d they wrote, explaining,<\/p>\n<blockquote>\n<p><em>The <\/em><em>cannabis industry has placed a strong emphasis on security for grow facilities and dispensaries. These enhanced security measures are a must to protect employees handling largely cash transactions and customers purchasing a heavily regulated product. \u00a0But, in taking these reasonable security measures, the cannabis industry has opened itself up to litigation surrounding BIPA\u2019s stringent requirements. <\/em><\/p>\n<\/blockquote>\n<p>The majority opinion in White Castle\u2019s case says, <em><strong>\u201cWe respectfully suggest that the legislature review these policy concerns and make clear its intent regarding the assessment of damages under the Act.\u201d<\/strong><\/em><\/p>\n<p>That\u2019s being too nice. Nobody should be \u201crespectfully suggesting\u201d anything to legislature about this. They should have fixed BIPA long ago. Fix it now.<\/p>\n<p><strong>In the meantime, any business touching Illinoisans in any way that uses biometrics should follow the advice of many lawyers:<\/strong> At least mitigate your exposure by immediately reviewing policies and practices related to biometric information to ensure BIPA compliance, including biometric use for employee timekeeping.<\/p>\n<\/div>\n<p>      <span class=\"field field--name-uid field--type-entity-reference field--label-hidden\"><a target=\"_blank\" title=\"View user profile.\" href=\"https:\/\/cms.zerohedge.com\/users\/tyler-durden\" lang=\"\" class=\"username\" xml:lang=\"\" rel=\"noopener\">Tyler Durden<\/a><\/span><br \/>\n<span class=\"field field--name-created field--type-created field--label-hidden\">Mon, 03\/06\/2023 &#8211; 19:00<\/span><\/p>\n<p>From:<a href=\"https:\/\/www.zerohedge.com\/economics\/illinois-torched-business-and-common-sense-its-biometric-privacy-law\" target=\"_blank\" title=\"Illinois Torched Business And Common Sense With Its Biometric Privacy Law\" rel=\"noopener\">Zerohedge<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Illinois Torched Business And Common Sense With Its Biometric Privacy Law By Mark Glennon of Wirepoints How sadly ironic that White Castle became the latest&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1182993","post","type-post","status-publish","format-standard","hentry","category-news","wpcat-1-id"],"_links":{"self":[{"href":"https:\/\/bugaluu.com\/news\/wp-json\/wp\/v2\/posts\/1182993","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bugaluu.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bugaluu.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bugaluu.com\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bugaluu.com\/news\/wp-json\/wp\/v2\/comments?post=1182993"}],"version-history":[{"count":0,"href":"https:\/\/bugaluu.com\/news\/wp-json\/wp\/v2\/posts\/1182993\/revisions"}],"wp:attachment":[{"href":"https:\/\/bugaluu.com\/news\/wp-json\/wp\/v2\/media?parent=1182993"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bugaluu.com\/news\/wp-json\/wp\/v2\/categories?post=1182993"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bugaluu.com\/news\/wp-json\/wp\/v2\/tags?post=1182993"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}