Illinois AI Regulations
While BIPA was written before the current GenAI boom, it has become the most dangerous piece of legislation for AI companies operating in the US. BIPA regulates the collection, storage, and use of biometric identifiers (facial geometry, fingerprints, voiceprints). Unlike many other laws, BIPA allows for a "private right of action," meaning individuals can sue companies directly without having to prove actual damages.
In-Depth Analysis
As AI systems increasingly integrate facial recognition for security or voice-cloning for accessibility, BIPA has become a primary vehicle for class-action lawsuits. Any AI system that "analyzes" a face or a voice is likely collecting biometric data under the Illinois definition.
For healthcare providers, the risk is extreme. Using AI for patient identification via facial recognition or analyzing voice patterns for diagnostic purposes in Illinois requires an explicit, written "opt-in" consent from the patient before the data is collected.
Practical Implications for SMBs & Healthcare
If your AI product processes biometric data from Illinois residents, you are in a high-risk zone. "Implicit consent" (e.g., a banner that says "by using this site you agree") is insufficient under BIPA.
Key Provisions
AI Video Interview Act
Employers using AI to analyze video interviews must notify applicants, explain how the AI works, obtain consent, and limit sharing of videos. Employers with few applicants must comply with additional requirements.
Biometric Information Privacy Act (BIPA)
Organizations collecting biometric data (including facial geometry used by AI) must obtain informed written consent, publish retention policies, and face a private right of action for violations.
Proposed Comprehensive AI Regulation
The Illinois legislature is considering broader AI accountability bills that would extend impact assessment and transparency requirements to healthcare, lending, and public benefits.
Bills & Statutes
Artificial Intelligence Video Interview Act
Effective January 1, 2020; amended 2024
Biometric Information Privacy Act
Effective 2008; active enforcement
Applicability & Enforcement
Who It Applies To
Employers using AI in video interviews or collecting biometric data from Illinois residents. Proposed legislation would cover a broader range of AI deployers.
Enforcement
BIPA: Private right of action (individual lawsuits and class actions). AI Video Interview Act: Illinois Department of Labor.
Penalties
BIPA: $1,000 per negligent violation, $5,000 per intentional/reckless violation (per individual, per scan). AI Video Interview Act: civil penalties assessed by the Department of Labor.
Recommended Compliance Actions
Steps organizations should consider to prepare for and comply with Illinois's AI regulations.
- 1
Biometric Audit: Identify every instance where AI is used to analyze faces, voices, or fingerprints.
- 2
Written Consent Flow: Implement a mandatory, standalone "click-to-agree" consent form for biometric collection.
- 3
Deletion Schedule: Establish and document a public retention schedule for when biometric data will be permanently deleted.
Related TrustEdge Services
As of May 22, 2026. We are not lawyers and this is not legal advice. It is the responsibility of consumers of this data that they verify the applicability and current ratified statutes and legal precedence with a qualified attorney licensed in the state or country they are researching.
Need Help with AI Compliance?
Our team helps organizations build compliance-first AI systems that meet current and emerging regulatory requirements.