Biometric data includes fingerprints, facial geometry, iris scans, voiceprints, and gait patterns. Unlike passwords, biometrics cannot be changed if stolen. Illinois's Biometric Information Privacy Act (BIPA) requires companies to get written consent before collecting biometric data and has generated billions in settlements against companies like Facebook and Google.
Biometric data is permanent. Unlike a password, you can't change your fingerprints or face geometry. When governments or companies collect and store biometric data — at airports, border crossings, workplaces, or protests — a breach or misuse can follow individuals forever. State laws like Illinois's BIPA give people the right to sue over unauthorized collection.
People assume biometric data collection requires a warrant. It generally doesn't — courts have allowed warrantless facial recognition and fingerprint collection in many public contexts, and federal law has no comprehensive biometric privacy statute. Your rights depend almost entirely on which state you're in.
Biometric data is permanent. Unlike a password, you can't change your fingerprints or face geometry. When governments or companies collect and store biometric data — at airports, border crossings, workplaces, or protests — a breach or misuse can follow individuals forever. State laws like Illinois's BIPA give people the right to sue over unauthorized collection.
People assume biometric data collection requires a warrant. It generally doesn't — courts have allowed warrantless facial recognition and fingerprint collection in many public contexts, and federal law has no comprehensive biometric privacy statute. Your rights depend almost entirely on which state you're in.