Fingerprints, Face Scans and Biometric Data
740 ILCS 14/15 — written notice and a written release before a business collects them
No private business may collect, capture, buy or otherwise obtain a person's biometric identifier or information unless it first does these three things. A business that holds biometric data also publishes a written policy for permanently destroying it when its purpose is satisfied, or within 3 years of the person's last interaction with the business, whichever comes first.
Who handles this in Illinois: legal aid programs, lawyer referral and the state offices, listed in the Illinois directory.
- Informs the person in writing that a biometric identifier or biometric information is being collected or stored.
- Informs them in writing of the specific purpose and how long it will be collected, stored and used.
- Receives a written release from the person.
Sources for this section (1)
- 740 ILCS 14/15 — Retention; collection; disclosure; destruction
Legal information, not legal advice. Verified as of October 2026. Applying it to a particular situation is the work of a licensed Illinois attorney.