BIPA-VIOLATION; EXEMPTIONS

Amends the Biometric Information Privacy Act. Defines "security purpose". Changes the definition of "written release" to include electronic consent and electronic release. Provides that the Attorney General and State's Attorneys have the sole authority to enforce the Act. Provides that an action may be brought to enforce the Act only if a violation of the Act causes actual harm. Provides that an employer is exempt under the Act if the employer collects, captures, obtains, or otherwise uses biometric identifiers and biometric information for: (1) keeping record of an employee's work hours; (2) a security purpose; (3) facility access; or (4) use by the human resource department or human resource employees of the employer. Provides that an employer is exempt under the Act if the employer retains the biometric identifier or information no longer than is reasonably necessary to satisfy a security purpose.