What is the Illinois Biometric Information Privacy Act (BIPA)? | UpGuard

This report summarizes the Illinois Biometric Information Privacy Act (BIPA), explaining its scope, definitions of biometric identifiers, consumer rights (notice and written consent), exemptions, required data protection practices (retention/destruction policies, prohibition on profiting, restrictions on sharing), enforcement via a private right of action with statutory damages and fees, and notable case law (e.g., BNSF and White Castle) that clarified vendor liability and repeated-collection violations; it concludes with practical compliance recommendations and references to UpGuard vendor- and breach-risk management tools.