BIPA settlements: why Illinois residents get paid more

What BIPA is (and why it's unique)

The Illinois Biometric Information Privacy Act (740 ILCS 14), passed in 2008, regulates "biometric identifiers": retina or iris scans, fingerprints, voiceprints, and scans of hand or face geometry. Before a private company collects one it must tell you in writing what it's collecting and why, get a written release, publish a retention and destruction schedule, and never sell the data. What makes BIPA different from every other state biometric law is Section 20: a private right of action letting any "aggrieved" person sue for $1,000 per negligent violation or $5,000 per intentional or reckless violation (or actual damages if higher), plus attorneys' fees.

Three court decisions turned that into a settlement machine. Rosenbach v. Six Flags (2019) held you don't need to show any actual harm — the violation itself is the injury. Tims v. Black Horse Carriers (2023) set a five-year statute of limitations. And Cothron v. White Castle (2023) held that a violation accrues on every scan, which produced potentially ruinous damage estimates; the legislature responded with SB 2979, signed August 2, 2024, which makes repeated collection of the same biometric from the same person by the same method a single violation. Texas and Washington also have biometric statutes, but only their attorneys general can enforce them — which is why the consumer checks come from Illinois.

Why Illinois residents get paid more

A company facing BIPA exposure usually settles a class that covers Illinois users only, or a nationwide class (under weaker federal and state laws) with an Illinois subclass that receives several shares for every one share paid elsewhere. Two real distributions show how big the gap gets:

• TikTok, $92M (approved 2022): the Illinois subclass received six shares for every one share paid to nationwide claimants. Final payments were $167.04 for Illinois residents and $27.84 for everyone else.
• Facebook, $650M (approved 2021): Illinois-only class over face-tagging templates; about 1.4 million valid claims produced $397 payments.

The reason is leverage. A nationwide user's claim might be worth a few dollars under a video-privacy or consumer-protection theory; an Illinois user's claim carried a statutory floor of $1,000 before the 2024 amendment. Plaintiffs' lawyers price the subclass accordingly, and courts approve the split because it tracks the strength of each group's legal claim. The same pattern — a modest nationwide payment plus a larger Illinois tier — is what to expect in any current social-media privacy settlement.

Who qualifies for a BIPA settlement

Class definitions in BIPA cases turn on three facts, all of which you attest to rather than prove:

• Illinois residency during the class period. Usually "resided in Illinois" for some minimum stretch (Facebook required six months) at the time you used the product. Moving away later doesn't disqualify you; moving in after the period does.
• Use of the feature that allegedly scanned you. Face filters or effects, photo tagging suggestions, a fingerprint or face time clock at work, a voice assistant. Some classes cover anyone who appeared in a photo uploaded by a user — you didn't need an account.
• No prior written consent that meets BIPA's requirements. In practice the defendant's own consent screen is the issue in the case, so you won't be asked about this.

Minors qualify through a parent or guardian, and nationwide classes typically include everyone else at a smaller share. The general eligibility checklist — class period, geography, opt-out status — is in who is eligible for a class action settlement, and the claim itself is one of the simplest you'll file: there is no receipt for a face scan, so these are no-proof settlements signed under penalty of perjury.

Open biometric and privacy settlements you can file now

Three examples currently in the Owed settlements directory, with the terms their pages list:

• Instagram biometric settlement — $68.5M fund, no proof, ends Oct 14, 2026.
• TikTok privacy settlement — $92M fund, $1–$100,000 depending on tier and claims volume, no proof, ends Nov 2, 2026.
• Fitbit health data settlement — $8.6M, $12–$32+, no proof, ends Sep 8, 2026 (a health-data privacy case rather than a pure BIPA case, but it follows the same attestation model).

Filing takes about three minutes:

1. Confirm the class period and residency rule on the settlement page or long-form notice.
2. Locate your claim or notice ID if you were emailed one; most biometric settlements let you file without it.
3. Enter your details and the account(s) you used — username or email tied to the app.
4. Attest that you were an Illinois resident (for the subclass) and used the feature during the period; this is signed under penalty of perjury, so be accurate.
5. Choose digital payment (PayPal, Venmo, prepaid card) to avoid a lost check, and save the confirmation.

How much BIPA settlements pay (and why it isn't $1,000)

The statute says $1,000 per violation; the checks say $167 or $397. The gap is the price of certainty: defendants settle for a fraction of maximum exposure, and the court approves it because class members get paid now rather than after years of appeals. From the fund, attorneys' fees (typically 25–35%), administration and service awards come off the top — the real math behind small settlement checks — and the rest is divided by the number of valid claims. That last number is the swing factor: TikTok's court filings estimated $0.96 per nationwide claimant and $5.75 per Illinois claimant if everyone filed, and the actual checks were about 29 times higher because most people didn't. A "$1–$100,000" range on a settlement page reflects that uncertainty, plus tiers for people with documented harm. Expect roughly $30–$400 for an Illinois claimant in a large social-media case and $10–$50 in the nationwide tier; smaller classes can pay more per person. The formula is worked through in how much no-proof settlements actually pay.

BIPA at work: fingerprint and face time clocks

By volume, most BIPA lawsuits are employment cases: warehouses, hospitals, restaurants and retailers that used finger, hand or face scanners to clock workers in without the required notice and release. These classes are small — hundreds to a few thousand employees — so per-person payments are often $300–$1,500, far above consumer cases. You'll usually get a mailed notice from class counsel at your last known address; if you used a biometric clock at an Illinois job in the last five years and moved, it's worth searching the employer's name plus "BIPA settlement" and updating your address with the administrator. Verify anything that arrives with how to spot class action settlement scams — real notices never ask for a fee or a Social Security number up front.

If you're not in Illinois

You can still be paid, just less. Nationwide classes in TikTok-style settlements pay a single share to non-Illinois users; California's privacy law gives statutory damages only for certain data breaches, not for biometric collection; and Texas, Washington and New York City rely on regulators or limited ordinances. Watch for cases brought under wiretap, video-privacy and consumer-protection laws, which increasingly sit alongside BIPA counts, and check the directory periodically or let Owed match you automatically and file the no-proof claims for free. Payment typically arrives 6–12 months after the deadline.

Not legal advice: this guide summarizes public settlement terms and Illinois law in general terms; eligibility and amounts are decided by the administrator and the court.

Glossary

Biometric identifier

Under BIPA: a retina or iris scan, fingerprint, voiceprint, or scan of hand or face geometry.

BIPA

The Illinois Biometric Information Privacy Act (740 ILCS 14, 2008), which requires notice, written consent and a retention policy before collecting biometrics.

Statutory damages

A fixed amount a law lets you recover per violation without proving actual loss — $1,000 (negligent) or $5,000 (intentional/reckless) under BIPA.

Illinois subclass

A group within a nationwide settlement class, limited to Illinois residents, that receives a larger share because of BIPA's stronger claims.

Private right of action

The right of an individual (not just a regulator) to sue for a violation — the feature that sets BIPA apart from Texas and Washington's biometric laws.

Attestation

A sworn statement on the claim form (under penalty of perjury) that you meet the class definition, used in place of documents in no-proof settlements.

FAQ