Biometric Information Privacy Act (BIPA)
740 ILCS 14
- Applies to
- Private entities that collect fingerprints, face geometry, hand scans, retina or iris scans, or voiceprints, including finger-scan time clocks.
- What it asks
- A written, public retention and destruction policy; destruction when the purpose is met or within three years of the person’s last interaction, whichever comes first; and a written release from each person before collection. A 2024 amendment confirmed an electronic signature can serve as that release.
- What the software does
- Signed releases captured and filed by employee, a retention schedule that counts from the end of employment, and an audit trail showing when each record was destroyed.