Cothron v. White Castle — Illinois Supreme Court Per-Scan BIPA Damages Accrual
IL · Cothron v. White Castle Sys., Inc., 2023 IL 128004
The Illinois Supreme Court held in February 2023 that BIPA claims accrue each time a biometric identifier is captured or disclosed — so a fingerprint scan to clock in twice a day for years generates thousands of separate violations per worker. The ruling forced the Illinois legislature to amend BIPA in 2024 to cap per-method accrual (P.A. 103-0769).
Technical detail
Cothron v. White Castle System, Inc., 2023 IL 128004 (Ill. Feb. 17, 2023). Holding: BIPA § 15(b) and (d) violations accrue each time biometric data is collected or disclosed, not only at the first instance. Damages: $1,000 negligent / $5,000 intentional per violation. Aug. 2, 2024: P.A. 103-0769 amended BIPA to limit recovery to a single accrual per person per collection method going forward.
Who is protected: Illinois workers and consumers subject to repeated biometric scans
Who must comply: Illinois employers and private entities using biometric authentication
Key facts
| Jurisdiction | IL |
|---|---|
| Level | State |
| Status | In effect |
| Protection strength | Moderate protection |
| Effective date | 2023-02-17 |
| Citation | Cothron v. White Castle Sys., Inc., 2023 IL 128004 |
| Topics | biometric data · consumer data privacy · AI hiring and employment |
| Last verified | 2026-06-17 |
| Official source | Cothron v. White Castle — Illinois Supreme Court opinion ↗ |
More AI rules in IL
- IL DOI AI Bulletin · In effect
- IL EO 2024-01 · In effect
- IL AI Video Interview Act (2019, first-in-nation) · In effect
- IL BIPA (2008, first-in-nation biometric law) · In effect
- IL Digital Voice/Likeness Act · In effect
- IL WOPR (AI therapy ban) · In effect
Related biometric data rules elsewhere
- COPPA + 2025 Rule (childrens data) · In effect
- BIPA · In effect
- TRAIGA · In effect
- My Health My Data Act · In effect
- SF Facial Recognition Ban · In effect
- Boston Face Surveillance Ban · In effect
See something wrong or out of date? Submit a correction — every entry must carry a verifiable official source.