US: White Castle Case Highlights Balance Between Biometric Technology and Privacy

In June, an Illinois court ruled that a former employee’s suit against the White Castle restaurant chain, alleging violations of the 2008 Illinois Biometric Information Privacy Act, could proceed. The employee alleges the company required her to use a fingerprint scan to access a computer at the workplace without obtaining a release from the employee for doing so and that the company failed to disclose how the data would be used or shared. According to allegations in the case, the company deployed a biometric scanning system in 2007, prior to the passing of the BIPA law, but it was not until 2018, more than 10 years after the law was passed, that the company provided a consent form and posted data use information. The case serves as a strong example of the hidden compliance and privacy risks that can arise when regulations impacting already-deployed technology and processes are enacted.

Takeaway: The use of biometrics in the workplace will continue to raise questions about privacy. Employers should work with their internal teams to assess where information is being collected, how it is being processed, and who has access to that data. Monitoring the regulatory landscape is crucial for staying ahead of new rulings as they occur.

US: White Castle Case Highlights Balance Between Biometric Technology and Privacy

COVID-19

North America

EMEA

APAC