The Matrix

In concluding that the 5-year limitation period applies to all claims under BIPA, the Court reasoned that: (i) applying one limitations period rather than two would further the goal of “certainty, predictability, and uniformity”; (ii) applying a one-year period would thwart legislative intent to address “the fears of and risks to the public surrounding the disclosure of highly sensitive biometric information,” and (iii) “the full ramifications of the harms associated with biometric technology is unknown, and absent the Act’s protections, it is unclear when or if an individual would discover evidence” thus limiting claims to one-year would prejudice those BIPA was intended to protect.

We anticipate that BIPA litigation may increase as a result of the decision, opening the door to claims that were previously considered stale. Furthermore, many BIPA cases were stayed in anticipation of this ruling, which we now expect to move forward once again.  In light of this ruling, businesses and employers should take steps to ensure they are in compliance with BIPA requirements, such as reviewing their existing biometric data practices, implementing new policies and procedures, and providing training to their employees on the requirements of BIPA.

The important question as to when the five-year period begins to accrue is the subject of another critical BIPA lawsuit pending before the Illinois Supreme Court in Cothron v. White Castle Systems, Inc., Docket No. 128004, which is expected to be issued in the near term.