Fact · Voice privacy and security
Under BIPA, before a business collects a biometric identifier, it must obtain written consent from the data subject or their legal representative.
Checked against its source on October 17, 2026
In the source's own words
“obtain written consent from the data subject or his or her legal representative”
Illinois Supreme Court says infringement of rights under Biometric Act is sufficient for a claim, even absent additional harm, Hogan Lovells, Hogan Lovells, 2019, Summary of the Act (list of requirements).
Open the original- What it measures
- This is the duty that makes speaker identification risky for a company in Illinois. A consent box in a general terms page is usually not written consent for this purpose, though courts decide that case by case.
- What it does not show
- A law firm's summary of the statute, which is quoted in the source. The statute text is the primary authority, and we could not open it from our tools.