Robyn Mills has filed a class action complaint against Great Lakes Infotronics, Inc., doing business as Infotronics, Inc., alleging violations of the Illinois Biometric Information Privacy Act (BIPA). The complaint was filed on May 20, 2024, in the United States District Court for the Northern District of Illinois.
The lawsuit claims that Infotronics collected, stored, and used biometric identifiers and information from Mills and other similarly situated individuals without obtaining informed written consent or providing a publicly available retention schedule. According to the complaint, these actions are in direct violation of BIPA’s requirements. Mills was employed by a third party at Chicago Ridge Skilled Nursing Facility from March 2023 to March 2024 and was required to scan her fingerprints using Infotronics' biometric devices for timekeeping purposes. She alleges that she never consented to this collection or storage of her biometric data.
The Illinois Legislature enacted BIPA due to concerns over the security of individuals’ biometrics, recognizing that unlike social security numbers which can be changed if compromised, biometric identifiers are biologically unique and permanent. Once compromised, an individual is at heightened risk for identity theft with no recourse. The law mandates that private entities must inform individuals in writing about the collection and storage of their biometrics, specify the purpose and duration for which they will be used, obtain written consent, and publish retention schedules for destroying such data.
Mills asserts that Infotronics failed to comply with these provisions by not providing any notice or obtaining written consent before collecting her fingerprints. Additionally, she claims that Infotronics did not have publicly available policies regarding data retention or destruction. During her employment period, Mills scanned her fingerprint hundreds of times on Infotronics’ devices without being informed about how long this data would be stored or its specific use.
The plaintiff seeks declaratory relief along with injunctive relief requiring Infotronics to comply with BIPA’s mandates. Furthermore, she is asking for statutory damages amounting to $5,000 per intentional or reckless violation and $1,000 per negligent violation. The lawsuit also demands reasonable attorney’s fees and costs.
Representing Robyn Mills is Jordan Richards from Jordan Richards PLLC based in Fort Lauderdale, Florida. The case has been assigned Case ID: 1:24-cv-04131.