Recently the U.S. Court of Appeals for the Seventh Circuit issued a much-anticipated decision in Cothron v. White Castle, concerning whether claims asserted under Sections 15(b) and 15(d) of the Illinois Biometric Information Protection Act (“BIPA”) accrue only once upon the initial collection or disclosure of biometric information or whether a new claim accrues each time biometric information is collected or disclosed. In lieu of answering the question, however, the Seventh Circuit punted the question to the Illinois Supreme Court at the plaintiff’s request.
The plaintiff, a manager at a White Castle restaurant, alleged that the restaurant chain introduced a system that required employees to scan their fingerprints to access pay stubs and work computers. The plaintiff alleged that each scan is sent to a third-party vendor that authenticates it and gives the employee access to the restaurant’s computer system. The plaintiff alleged that based on its use of that system, White Castle violated Sections 15(b) and 15(d) of the BIPA.
Under Section 15(b), a private entity may not “collect, capture, purchase, receive through trade, or otherwise obtain” a person’s biometric data without first providing notice to and receiving consent from the person. Under Section 15(d), a private entity may not “disclose, redisclose, or otherwise disseminate” biometric data without consent of the owner of the biometric data. The plaintiff brought suit not only individually but on behalf of a class of other White Castle employees.
White Castle defended against the lawsuit by seeking judgment on the pleadings. In support of its motion, the company argued that the claims were untimely since they accrued in 2008 when the plaintiff’s first fingerprint scan occurred after the BIPA came into effect. The plaintiff responded that every unauthorized collection or disclosure of biometric data constituted a separate violation of the statute, meaning a new claim accrued with each fingerprint scan. This meant, the plaintiff argued, that each scan started the clock on its own limitations period. The distinction is no small issue as the BIPA allows a successful plaintiff to recover the greater of actual damages or statutory damages of $1,000 for each negligent violation and $5,000 for each reckless or willful violation. The District Court ultimately denied White Castle’s motion but thought the issue important enough to warrant an interlocutory appeal. Continue reading ›