Unique Illinois privacy law leads to $550M Facebook deal

The lawsuit — one of more than 400 filed against tech companies big and small in the past five years, by one law firm’s count — alleges that Facebook broke Illinois’ strict biometric privacy law that allows people to sue companies that fail to get consent before harvesting consumers’ data, including through facial and fingerprint scanning.

Posted: Feb 10, 2020 1:44 PM
Updated: Feb 12, 2020 10:02 AM

CHICAGO (AP) — Adam Pezen, Carlo Licata and Nimesh Patel are among millions of people who have been tagged in Facebook photos at some point in the past decade, sometimes at the suggestion of an automated tagging feature powered by facial recognition technology.

It was their Illinois addresses, though, that put the trio’s names atop a lawsuit that Facebook recently agreed to settle for $550 million, which could lead to payouts of a couple hundred dollars to several million Illinois users of the social networking site.

The lawsuit — one of more than 400 filed against tech companies big and small in the past five years, by one law firm’s count — alleges that Facebook broke Illinois’ strict biometric privacy law that allows people to sue companies that fail to get consent before harvesting consumers’ data, including through facial and fingerprint scanning. Privacy advocates hail the law as the nation’s strongest form of protection in the commercial use of such data, and it has survived ongoing efforts by the tech industry and other businesses to weaken it.

Attorneys who focus on privacy law predict that the Facebook settlement — if approved by a federal judge — will trigger a new round of lawsuits and make the targets of existing ones more likely to settle. Illinois’ legal landscape also could shape debates over privacy protection in other states and in Congress, particularly about whether individuals should have the right to sue over violations.

“We’re going to see a lot of constituents saying, ‘Why not me?’” said Jay Edelson, a Chicago attorney whose firm first sued Facebook for allegedly breaking Illinois’ law. “This settlement, it’s going to really make the point that having laws on the books is the difference between people getting to go to court and getting real relief, and otherwise just getting trampled by these tech companies.”

Although the buying and selling of consumer data has become a multi-billion-dollar industry, Illinois’ law — the Biometric Information Privacy Act — predates even Facebook’s iconic “like” feature and was a reaction to a single company’s flop.

Pay By Touch, a startup that teamed with grocery stores to offer fingerprint-based payments, had gone bankrupt and was expected to auction off its assets, including its database of users’ information. Worried about where that user data would wind up, Illinois lawmakers quickly passed a law in 2008 requiring companies to get consent before collecting biometric information and to create a policy specifying how that information will be retained and when it will be destroyed.

It also gave Illinois residents the right to sue for $1,000 over negligent violations and $5,000 for intentional violations.

For years, “literally nothing happened,” said John Fitzgerald, a Chicago attorney and author of a book on the law that is due out this year. He couldn’t find any record of a case filed before 2015.

Edelson’s firm and others that focus on class-action suits were first, accusing Facebook of failing to meet Illinois’ standard in multiple lawsuits filed in 2015. The three Illinois men fronting the class-action suit against Facebook said they were never told that the site’s photo tagging system used facial recognition technology to analyze photos then create and store “face templates.”

A federal judge later grouped the cases together as a class-action on behalf of Illinois Facebook users who were among the stored face templates as of June 7, 2011.

Facebook only changed the technology last year. The tag suggestion tool was replaced a broader facial recognition setting, which is turned off by default.

The Illinois law is the basis for two recent suits filed against Clearview AI, a facial recognition company that harvests images by scraping social media sites and other places and then sells access to its database to law enforcement agencies.

Facebook, Twitter, Venmo and YouTube have all demanded that Clearview stop harvesting their users’ images following investigative reports by The New York Times and Buzzfeed.

Although there are Illinois lawsuits against other major tech companies, including Google, Snapchat and Shutterfly, the vast majority of the cases are filed on behalf of employees who were directed to use fingerprint scanning systems to track their work hours and who accuse employers or the systems’ creators of failing to get their prior consent.

Illinois is one of three states that have laws governing the use of biometric data. But the other two, Texas and Washington, don’t permit individual lawsuits, instead delegating enforcement to their attorneys general.

The state’s Chamber of Commerce and tech industry groups have backed amendments to gut Illinois’ allowance of individual lawsuits or exempt time-keeping systems.

Illinois’ law puts “litigation over innovation,” said Tyler Diers, the Illinois and Midwest executive director of the industry group TechNet, whose members include Apple, Facebook and Google.

“This case exemplifies why consumer privacy law should empower state regulators to enforce rather than line the pockets of class action attorneys,” Diers said in a statement.

Facing Illinois’ law, some companies opt out of the state. Sony, for instance, refuses to sell its “aibo” robot dog to Illinois residents and says the device’s ability to behave differently toward individual people depends on facial recognition technology.

Backers of the law argue that it’s not difficult to comply — simply tell consumers you plan to use biometric data and get their consent.

State Rep. Ann Williams, a Chicago Democrat, said the ability to sue is critical for consumers facing global companies that make billions of dollars per year.

“If the penalty’s only a fine, that’s the cost of doing business for them,” Williams said. “A settlement like (the Facebook case), we’re talking about real money that will go to consumers.”

Attorneys who defend smaller companies, though, argue that the law should be narrowed to permit the use of fingerprint scanners to track employees’ hours.

“Small and medium-size businesses really do not have the resources to defend these cases or pay some big settlement,” said Mary Smigielski, a partner at Lewis Brisbois Bisgaard & Smith and a co-leader of the firm’s group focused on Illinois’ biometric law.

The Facebook case wound through courtrooms in Illinois and California for nearly five years before last month’s announcement of a settlement, days after the U.S. Supreme Court declined to hear arguments.

Edelson said he hopes that the $550 million deal, which lawyers on the case described as a record amount for a privacy claim, will put pressure on attorneys to refuse credit monitoring or negligible cash payouts that are more typical in agreements to resolve data privacy suits.

People eligible for the settlement will be contacted directly and don’t need to take any action until then, attorneys on the case said.

___

Follow Kathleen Foody on Twitter: https://twitter.com/katiefoody

Terre Haute
Cloudy
72° wxIcon
Hi: 88° Lo: 64°
Feels Like: 72°
Robinson
Cloudy
70° wxIcon
Hi: 86° Lo: 65°
Feels Like: 70°
Indianapolis
Mostly Cloudy
71° wxIcon
Hi: 89° Lo: 66°
Feels Like: 71°
Rockville
Cloudy
69° wxIcon
Hi: 89° Lo: 64°
Feels Like: 69°
Casey
Cloudy
71° wxIcon
Hi: 85° Lo: 66°
Feels Like: 71°
Brazil
Cloudy
72° wxIcon
Hi: 88° Lo: 65°
Feels Like: 72°
Marshall
Cloudy
72° wxIcon
Hi: 87° Lo: 63°
Feels Like: 72°
Mostly cloudy, scattered showers and storms.
WTHI Planner
WTHI Temps
WTHI Radar

Latest Video

Image

Local Woman's Back to School Drive

Image

Walk to End Alzheimer's

Image

Sunday Evening: Scattered showers and storms.

Image

Sunday: Increasing clouds, hot. High: 90°

Image

Saturday Evening Forecast

Image

Saturday: Mostly sunny, unseasonably warm. High: 89°

Image

Casey-Westfield

Image

Parke Heritage football

Image

Sullivan football

Image

Robinson football

WTHI Events

 

Illinois Coronavirus Cases

(Widget updates once daily at 7 p.m. CT)

Cases: 1590342

Reported Deaths: 26979
CountyCasesDeaths
Cook60937610925
DuPage1031521352
Will865801083
Lake764741056
Kane65399842
Winnebago38682543
Madison37731569
St. Clair34758561
McHenry32773313
Peoria25738361
Champaign25601182
Sangamon24263266
McLean21611205
Tazewell19559326
Rock Island17631342
Kankakee16523233
Kendall15274105
LaSalle14349275
Macon14248233
Vermilion12908182
Adams12589147
DeKalb11542127
Williamson11206156
Whiteside7813176
Boone756681
Jackson756683
Coles7175112
Ogle705385
Grundy693181
Clinton676498
Franklin669694
Knox6528163
Marion6454135
Macoupin636597
Henry610272
Jefferson5981131
Effingham588980
Livingston564394
Woodford549791
Stephenson540089
Randolph522996
Monroe503299
Christian481980
Morgan479995
Fulton479069
Logan473573
Montgomery462876
Lee454956
Bureau423087
Perry411171
Saline399263
Iroquois391171
Fayette387756
McDonough352155
Jersey319753
Douglas303336
Shelby300343
Crawford298930
Lawrence294631
Union293846
Wayne267957
White261530
Richland256852
Hancock253434
Pike252256
Cass247728
Clark244138
Bond242224
Clay233347
Ford233056
Edgar229844
Carroll223937
Warren220456
Moultrie209331
Johnson208922
Washington204927
Jo Daviess203525
Greene199339
Mason196251
Wabash196115
Massac195144
De Witt192730
Piatt188814
Mercer187035
Cumberland174123
Menard155812
Jasper149518
Marshall133721
Hamilton127221
Brown10138
Pulaski97311
Schuyler9608
Edwards94815
Stark76027
Gallatin7285
Scott6895
Alexander66411
Calhoun6382
Henderson63114
Hardin55713
Putnam5414
Pope4725
Unassigned1582432
Out of IL80

Indiana Coronavirus Cases

(Widget updates once daily at 8 p.m. ET)

Cases: 926604

Reported Deaths: 15083
CountyCasesDeaths
Marion1262201958
Lake626901087
Allen52772747
Hamilton43283445
St. Joseph41475584
Elkhart33129488
Vanderburgh29927439
Tippecanoe26589247
Johnson23267415
Hendricks21902340
Porter21473341
Clark17150224
Madison17065379
Vigo15815273
Monroe14298190
LaPorte14108237
Delaware13771219
Howard13635262
Kosciusko11232134
Hancock10637160
Warrick10523176
Bartholomew10341167
Floyd10200202
Wayne9690218
Grant8939196
Morgan8734158
Boone8299109
Dubois7596123
Henry7469128
Dearborn745187
Noble7294101
Marshall7237128
Cass7097117
Lawrence6862150
Shelby6457107
Jackson643981
Gibson6036106
Harrison595585
Huntington591891
Montgomery5706102
DeKalb563591
Knox537599
Miami531983
Clinton527164
Putnam525367
Whitley516251
Steuben486367
Wabash477492
Jasper471961
Jefferson461991
Ripley444175
Adams439365
Daviess4064106
Scott394963
White386257
Clay382356
Greene380189
Wells379683
Decatur379595
Fayette367176
Posey354941
Jennings346356
Washington325847
LaGrange315774
Spencer313034
Fountain309753
Randolph305487
Sullivan299447
Owen279161
Starke272761
Orange272659
Fulton268851
Jay250634
Perry247451
Carroll241127
Franklin233637
Vermillion229750
Rush228930
Parke215220
Tipton206754
Pike202538
Blackford165634
Pulaski158751
Crawford142818
Newton140742
Benton139816
Brown132646
Martin126916
Switzerland123510
Warren113416
Union93511
Ohio77211
Unassigned0468