BIPA
CIPP/US glossary · Last reviewed: · By Victor Humenhuk (CIPP/US certified)
BIPA - Illinois Biometric Information Privacy Act; requires employers to notify employees of biometric practices and obtain informed consent, and includes a private right of action driving class actions.
In the CIPP/US body of knowledge, BIPA comes up under Chapter 12: Workplace Privacy; Chapter 5: Federal and State Regulators and Enforcement of Privacy Law; Chapter 7: State Data Breach Notification, Data Security, and Data Destruction Laws.
BIPA in context
- Illinois's ==BIPA (2008)== requires notice and consent for biometrics and has a ==private right of action==; California's ==Age-Appropriate Design Code Act (2022)== protects users ==under 18==. (Additional State Protections: Torts, BIPA, and the AADC Act)
- Three state biometric laws reach employer data: ==Illinois BIPA== (notice, consent, and a private right of action), plus ==Texas and Washington== (no private right of action). (Biometric, Video, and Mail Monitoring; Union Activity)
- The ==Illinois Biometric Information Privacy Act (BIPA)== (==2008==, amended 2024) was the first U.S. (State Biometric and Facial Recognition Laws)
Where BIPA is covered in the CIPP/US study notes
- Additional State Protections: Torts, BIPA, and the AADC Act
- Biometric, Video, and Mail Monitoring; Union Activity
- State Biometric and Facial Recognition Laws
Related terms
- Privacy torts
- Age-Appropriate Design Code Act
- CUBI
- Per-Scan vs Per-Individual Damages
Test yourself on BIPA
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/US practice questions, or read the full CIPP/US study guide - every study note is free.