Rule 13 of 33

Illinois BIPA (biometric clocks)

Do I need consent for a fingerprint time clock in Illinois?

Yes, in writing and before first scan. Illinois BIPA requires written consent, a published retention and destruction schedule, and a ban on selling the data. It carries a private right of action with statutory damages per violation, which is why fingerprint time clocks have produced enormous settlements.

What the rule requires

$1,000-$5,000 per violation, private right of action.

Who it catches

Any employer using fingerprint/facial time clocks with Illinois staff. Speedway: $12.1M.

What this looks like in practice. You use a fingerprint time-clock and have Illinois staff, but never got written consent first. Each scan can count as its own violation - White Castle settled for $9.4M, Speedway for $12.1M.

How to check whether you comply

The checkDo you use biometric time clocks with any Illinois-based staff? If yes: written release before collection, published retention schedule, no third-party sharing.

Read it yourself

We would rather you checked us than took our word for it. This links to the law as published, not to our summary of it.

Primary source 740 ILCS 14 ↗ Real case White Castle $9.4M; Speedway $12.1M; up to $5,000 per scan ↗

Questions people ask

Do I need consent for a fingerprint time clock in Illinois?

Yes, in writing and before first scan. Illinois BIPA requires written consent, a published retention and destruction schedule, and a ban on selling the data. It carries a private right of action with statutory damages per violation, which is why fingerprint time clocks have produced enormous settlements.

Who does Illinois BIPA (biometric clocks) apply to?

Any employer using fingerprint/facial time clocks with Illinois staff. Speedway: $12.1M.

How do I check whether we comply with Illinois BIPA (biometric clocks)?

Do you use biometric time clocks with any Illinois-based staff? If yes: written release before collection, published retention schedule, no third-party sharing. You can also run our free website check, which tests 25 technical items in about twenty seconds, or book a review if this rule needs a documented answer.

Other rules that catch the same businesses

Rule 14NYC Local Law 144 (AI hiring audits) Rule 15CCPA/CPRA + 19 other state privacy laws Rule 16Manitoba accessibility standards Rule 17Nova Scotia Built Environment Standard All of themThe full 33-rule table, searchable

Find out which of the 33 apply to you

The fine risk check asks a few questions about your business and tells you which rules catch you, with the deadlines. Nothing you tick leaves your browser.

Check my fine risk

This page summarises a legal obligation in plain language so you can work out whether it applies to you. It is not legal advice, and the primary source linked above governs. Last reviewed 2026-10-03.