Illinois Trial Court Grants Class Certification In BIPA Class Action

By Alex W. Karasik, Gerald L. Maatman, Jr. and Jennifer A. Riley

TakeawaysIn Palacios v. H&M Hennes & Mauritz, LP, Case No. 18-CH-16030 (Cir. Ct. Cook County, Ill. Mar. 16, 2023), a state trial court in Illinois granted Plaintiff’s motion for class certification in an Illinois Biometric Information Privacy Act (the “BIPA”) class action. Given the limited jurisprudence in BIPA class action certification rulings, this decision is an important read for corporate counsel, as the ruling likely will be used as a roadmap by the plaintiffs’ bar to support their efforts to certify such classes.

Case Background

Plaintiff alleged that Defendant required him and other employees to scan their fingerprints into a biometric time clock system to record the time they worked, and unlawfully collected, possessed, and transferred their biometric information without consent and without a proper retention and destruction schedule.  Plaintiff sought to certify a class of all hourly employees who enrolled in or used Defendant’s timekeeping system while working for Defendant between August 9, 2014, and October 15, 2019.

In terms of the four factors to certify the class – numerosity, adequacy of representation, commonality, and appropriateness – Defendant did not challenge the numerosity factor. However, Defendant challenged the motion for class certification regarding the other three factors.

The Court’s Decision

The Court granted Plaintiff’s motion for class certification. First, the Court held that the named Plaintiff was an adequate class representative. Defendant argued that, based on Plaintiff’s deposition testimony, he was, “uninformed and disinterested in the facts, the litigation, and his role as class representative.” The Court rejected this argument, holding that, “while [Plaintiff] may not understand legal jargon . . . he understands the basic facts . . . understands he is making a legal claim for violation privacy rights on behalf of a class of other employees [and] has been in regular communication with his counsel and participated in discovery.” Accordingly, the Court found that Plaintiff would adequately represent the putative class.

Second, the Court held that the commonality factor was met. Defendant contended that Plaintiff was at odds with the rest of the class since he alleged that he suffered emotional distress damages. The Court rejected this argument, holding that Plaintiff testified that he was harmed through a breach of his biometric information privacy rights and was pursuing the same claims on behalf of class members. Accordingly, the Court held that common questions predominated over questions affecting individual class members.

Finally, the Court explained that, “a class action must be an appropriate method for the fair and efficient adjudication of the controversy.” Id. (citations and quotations omitted). The Court opined that many individuals incurred relatively small liquidated damages and their likely recovery was probably too small to justify a separate action. However, collectively, the Court could adjudicate the putative class’s claims, as it noted, “This is what class actions were designed to achieve.”  Id.  Accordingly, the Court held that a class action was the appropriate method for the fair and efficient adjudication of the controversy.

Implications For Employers

While employers are likely still recovering from the sting of adverse Illinois Supreme Court BIPA class action rulings from early 2023, this decision marks another victory for the plaintiff’s bar. Defendants in BIPA class actions who are facing motions for class certification would be wise to avoid duplicating the arguments made here. In light of the shrinking number of potential BIPA defenses and skyrocketing damages, employers must begin exploring alternative defense strategies to combat these bet-the-company cases.

Introducing The Duane Morris Wage & Hour Class And Collective Action Review – 2023

By Gerald L. Maatman, Jr., Jennifer A. Riley, and Gregory Tsonis

Duane Morris Takeaways: Complex wage & hour litigation has long been a focus of the plaintiffs’ class action bar. The relatively low standard by which plaintiffs can achieve conditional certification under the Fair Labor Standards Act (FLSA), often paired with state law wage & hour class claims, offers a potent combination by which plaintiffs can pursue myriad employment claims. To that end, the class action team at Duane Morris is pleased to present the inaugural edition of the Wage & Hour Class And Collective Action Review – 2023. This new publication analyzes the key wage & hour-related rulings and developments in 2022 and the significant legal decisions and trends impacting wage & hour class and collective action litigation for 2023. We hope that companies and employers will benefit from this resource and assist them with their compliance with these evolving laws and standards.

Click here to download a copy of the Wage & Hour Class And Collective Action Review – 2023 eBook.

Stay tuned for more wage & hour class and collective action analysis coming soon on our weekly podcast, the Class Action Weekly Wire.

The EEOC’s 2022 Annual Performance Report Touts $513.7 Million In Worker Recoveries

By Alex W. Karasik, Gerald L. Maatman, Jr. and Jennifer A. Riley

Duane Morris Takeaways: On March 13, 2023, the EEOC published its fiscal year 2022 Annual Performance Report (FY 2022 APR), highlighting the Commission’s recovery of $513.7 million in monetary relief for more than 38,000 victims of employment discrimination, including nearly $40 million as a direct result of litigation resolutions.

This annual publication from the EEOC is noteworthy for employers in terms of recognizing the EEOC’s reach, understanding financial exposure for workplace discrimination claims, and identifying areas where the EEOC may focus its litigation efforts in the coming year. It is a must read for corporate counsel, HR professional, and business leaders.

FY 2022 Statistical Highlights

The EEOC’s recovery of $513.7 million in monetary relief represents a solid increase from the $485 million in monetary relief that it secured in FY 2021. More noteworthy is that the Commission secured monetary relief on behalf of 38,000 alleged victims in FY 2022, which is more than double the amount from FY 2021, when monetary relief was recovered on behalf of 15,000 alleged victims. This suggests that more complainants are being made whole through the EEOC’s litigation and alternative dispute resolution efforts.

Approximately $342 million was recovered for more than 33,298 victims of employment discrimination in the private sector and state and local government workplaces through mediation, conciliation, and settlements. Furthermore, $39.7 million was recovered for 1,461 individuals as a direct result of litigation resolutions. Notably, the EEOC indicated it successfully resolved 44% of its conciliations, and among those successes, 43.1% involved one or more Strategic Enforcement Plan priority areas. The EEOC also conducted 6,578 successful mediations, resulting in $170.4 million in benefits for charging parties.

In terms of charge intake, the EEOC reported 73,485 new discrimination charges, an increase of nearly 20% compared to fiscal year 2021. This statistic suggest workers are increasingly more apt to turn to the Commission to resolve workplace discrimination disputes.

Finally, the EEOC filed 91 lawsuits in FY 2022 on behalf of 53 individuals, including 25 non-systemic suits with multiple victims, and 13 systemic suits involving multiple victims or discriminatory policies. Approximately half of the EEOC’s newly filed lawsuits raised one or more the EEOC’s Strategic Enforcement Plan priorities.

Strategic Priorities

Addressing systemic discrimination has long been a top priority for the EEOC. In FY 2022, the EEOC resolved over 300 systemic investigations on the merits, obtaining more than $29.7 million in monetary benefits. The EEOC also resolved 10 systemic lawsuits, obtaining over $28 million in relief for nearly 1,300 individuals and significant equitable relief. To ensure the systemic lawsuit cupboard was not left bare, the EEOC filed 13 new systemic lawsuits.

Advancing racial justice was another strategic priority for the EEOC in FY 2022. The FY 2022 APR notes that the EEOC resolved 18 lawsuits alleging race or national origin discrimination, for approximately $4.6 million in relief, benefiting 298 individuals.  In addition, nine of the new 13 systemic lawsuits include claims of race or national origin discrimination. The EEOC also conducted 468 race and color outreach events, which reached 52,675 attendees. This includes 143 racial justice events reaching 9,064 attendees.

Finally, in recent years the EEOC has indicated that the use of artificial intelligence (“AI”) and algorithmic fairness in employment decisions is a strategic priority. In addition to providing AI training to systemic enforcement teams in the EEOC’s field offices, the EEOC hosted 24 AI and algorithmic fairness outreach events for 1,192 attendees. The EEOC’s efforts culminated with one lawsuit filing in this area. Finally, the EEOC prepared two ADA-related guidance publications relative to the use of artificial intelligence.

Other Notable Developments

Beyond touting its monetary successes, the FY 2022 APR also highlights the EEOC’s efforts in the community. The EEOC conducted 3,302 outreach and training events, providing more than 225,906 individuals nationwide with information about employment discrimination and their rights and responsibilities in the workplace. Among these outreach programs were 399 events for small businesses, which were attend by approximately 18,878 individuals. Finally, 369 outreach events concerned the intersection of COVID-19 and employment discrimination laws. These COVID-19 programs had 26,041 attendees.

The EEOC also expanded its digital footprint, as the EEOC’s website had 10.8 million users. This marks a 3% increase over fiscal year 2021. There were 16 million user sessions, a 4.4% increase over fiscal year 2021. The EEOC had over 29 million page views, a 4.4% increase over fiscal year 2021, and there was a 3% increase in mobile traffic on the website. This data suggests that potential charging parties and other various constituents are more actively engaging with the Commission through its online platforms.

Takeaways For Employers

While the 2020 global pandemic may have slowed down the workforce developments and relatedly the EEOC for a few years, the FY 2022 APR suggests the EEOC is back to investigating and litigating employment discrimination claims in full gear. Employers should be mindful of these data points in terms of implementing and enforcing policies against employment discrimination.

We anticipate that the EEOC will continue to aggressively pursue its strategic priority areas, such as systemic discrimination, racial justice, artificial intelligence, and its underlying goal of providing access to justice for underrepresented groups of workers. We will continue to track EEOC litigation developments throughout the year.

Introducing The Duane Morris Privacy Class Action Review – 2023

By Gerald L. Maatman, Jr., Jennifer A. Riley, and Alex W. Karasik

Duane Morris Takeaways: The last year saw a virtual explosion in privacy class action litigation. As a result, compliance with privacy laws in the myriad of ways that companies interact with employees, customers, and third parties is a corporate imperative. To that end, the class action team at Duane Morris is pleased to present the inaugural edition of the Privacy Class Action Review – 2023. This new publication analyzes the key privacy-related rulings and developments in 2022 and the significant legal decisions and trends impacting privacy class action litigation for 2023. We hope that companies and employers will benefit from this resource in their compliance with these evolving laws and standards.

Click here to download a copy of the Privacy Class Action Review – 2023 eBook.

Co-Editor of the Review Jerry Maatman provided insights on our new publication earlier this week to the Wall Street Journal in its article on privacy class action litigation, which can be found here: Biometric-Privacy Rulings in Illinois Expand Potential Liability for Tech Firms – WSJ

Duane Morris partners Jerry Maatman, Jennifer Riley, and Alex Karasik also recently recorded the first edition of “The Class Action Weekly Wire,” our new podcast series, in which contributors to our Duane Morris Class Action Review discuss the significant rulings and legislation in various areas of law. To add context to our new publication, last Friday’s edition discussed recent developments in privacy class action litigation. Click here to watch and listen to the podcast!

DMCAR Trend # 10 – PAGA Actions Suffered Their First Setback, Work-Arounds Continued To Percolate

By Gerald L. Maatman, Jr. and Jennifer A. Riley

Duane Morris Takeaway: In 2022, actions under the California Private Attorneys General Act (PAGA), Cal. Lab. Code, §§ 2698, et seq., saw their first setback as the U.S. Supreme Court’s decision in Viking River Cruises, Inc. v. Moriana, et al., 142 S.Ct. 1906 (2022), created a workaround to arbitration programs that require individual proceedings.

The PAGA created a scheme to “deputize” private citizens – “aggrieved employees” – to sue their employers for violations of the California Labor Code on behalf of their co- workers as well as the State. If successful, aggrieved employees receive 25% of any recovered civil penalties and pass the other 75% to the California Labor and Workforce Development Agency (LWDA). The PAGA authorizes the attorneys who pursue the action to collect their attorney’s fees and costs in addition to the civil penalties. As a result, PAGA claims have exploded over the past two decades.

The Explosion Of PAGA Notices

According to data maintained by the California Department of Industrial Relations, the number of PAGA notices filed with the LWDA has increased exponentially over the past two decades. The number grew from 11 notices in 2006 to 1,743 in 2011, to 5,208 in 2016, and to 6,502 in 2021. From 2013 to 2014, employers saw the largest single year increase, from 1,605 notices in 2013 to 4,532 notices in 2014, an increase of 182%. Over the five-year period from 2017 to 2021, the number of notices grew from 4,985 in 2017, to 6,502 in 2021, an increase of 30%.

The following chart illustrates this trend.

The increase is a likely reaction to the growth of workplace arbitration, fueled by the availability of fee-shifting.

The PAGA As A Work-Around To Arbitration

Although the proliferation of mandatory arbitration programs started as early as 1991 when the U.S. Supreme Court issued Gilmer, et al. v. Interstate/Johnson Lane Corp., 500 U.S. 20 (1991), the movement did not gain steam until 2011, when the U.S. Supreme Court issued its ruling in AT&T Mobility LLC v. Concepcion, et al., 563 U.S. 333 (2011), and held that the FAA preempts state rules that stand “as an obstacle to the accomplishment of the FAA’s objectives,” and it did not peak until 2018 with the U.S. Supreme Court’s decision in Epic Systems Corp. v. Lewis, et al., 138 S.Ct. 1612 (2018), wherein the last hurdle to enforcement of class and collective action waivers was eliminated.

As the adoption of arbitration programs gained popularity as a mechanism to contract around class and collective actions, the plaintiffs’ class action bar identified work-arounds. The California Supreme Court’s cemented the PAGA as the frontrunner for generated labor-related claims with its 2014 decision in Iskanian, et al. v. CLS Transportation Los Angeles, 59 Cal.4th 348 (Cal. 2014), which seemingly immunized the PAGA from arbitration programs. In Iskanian, the California Supreme Court held that “where an employment agreement compels the waiver of representative claims under the PAGA, it is contrary to public policy and unenforceable as a matter of state law.” Id. at 384. Whereas the California Supreme Court acknowledged Concepcion, it nevertheless reasoned that the rule against PAGA representative action waivers did not frustrate the FAA’s objectives because, whereas the FAA aims to ensure an efficient forum for the resolution of private disputes, a PAGA action “is a dispute between an employer and the state Labor and Workforce Development Agency.” Id.

The ruling likely fueled the filing of PAGA notices in 2014 and thereafter, as it cleared the PAGA as a mechanism by which to maintain a representative action unhindered by agreements to arbitrate on an individual basis. The PAGA workaround suffered its first significant set-back in 2022 with the U.S. Supreme Court’s highly anticipated decision in Viking River Cruises, Inc. v. Moriana, et al., 142 S.Ct. 1906 (2022), which addressed the arbitrability of PAGA claims.

The Dagger Of Viking River

In Viking River, the U.S. Supreme Court drove a dagger through the heart of this work- around by continuing its trend of enforcing the FAA over state efforts to avoid or flat-out prohibit arbitration. See, e.g., Cal. Lab. Code § 229 (“Actions to enforce the provisions of this article for the collection of due and unpaid wages claimed by an individual may be maintained without regard to the existence of any private agreement to arbitrate.”). The U.S. Supreme Court confirmed that, whether judicial or legislative in nature, where the FAA is in play, it preempts efforts to enforce those rules.

In Viking River, the U.S. Supreme Court found a conflict between the FAA and PAGA’s procedural structure. It recognized that the statute contains a “built-in mechanism of claim joinder,” which permits “aggrieved employees” to use the Labor Code violations they personally suffered as a basis to join to the action any claims that could have been raised by the State in an enforcement proceeding. Id. at 1923. It held that, to the extent that Iskanian precludes division of PAGA actions into individual and non-individual claims, and thereby “prohibits parties from contracting around this joinder device,” the FAA preempts such rule. Id.

Importantly, however, after finding that Viking should have been able to compel arbitration of plaintiff’s individual claim, the U.S. Supreme Court addressed “what the lower courts should have done with Moriana’s non-individual claims.” Id. at 1925. It ruled that, once an individual claim has been committed to a separate proceeding, the employee is no different from a member of the general public, and the PAGA provides no mechanism for such person to maintain suit. As a result, the correct course was to dismiss the remaining claims. Id.

As a result, the U.S. Supreme Court eviscerated perhaps the most popular work-around to workplace arbitration, dealing a significant blow to the plaintiffs’ bar and its ability to pursue claims on a representative basis.

What’s Next?

In her concurrence, Justice Sotomayor expressly opened the door to two potential solutions to the majority opinion. She suggested that, in its analysis of the parties’ contentions, the Supreme Court detailed “several important limitations on the pre-emptive effect of the [FAA],” meaning that “California is not powerless to address its sovereign concern that it cannot adequately enforce its Labor Code without assistance from private attorneys general.” Id. at 1925. First, she suggested that, if the majority was incorrect in its understanding that the plaintiff lacked “statutory standing” under the PAGA to litigate her “non-individual” claims separately, “California courts, in an appropriate case, will have the last word.” Second, alternatively, Justice Sotomayor opined that “the California Legislature is free to modify the scope of statutory standing under the PAGA within state and federal constitutional limits.” Id. at 1925-26.

Although the California State Legislature has not taken action, on July 20, 2022, the California Supreme Court granted review in Adolph, et al. v. Uber Technologies, Inc., No. G059860, on the question as to whether an aggrieved employee, who agreed to arbitrate claims under the PAGA that are “premised on Labor Code violations actually sustained by” the aggrieved employee, maintains standing to pursue “PAGA claims arising out of events involving other employees” in court or in any other forum agreed by the parties. The California Supreme Court is likely to issue a decision on these questions in 2023.

In the meantime, despite the U.S. Supreme Court’s ruling in Viking River, many plaintiff’s attorneys have requested, and many California courts have granted, stays of representative claims, rather than dismissals, likely in order to preserve tolling in the event that the California Supreme Court fashions a rule that permits them to proceed with representative claims.

DMCAR Trend # 9 – Corporate Defendants Aggressively Asserted Defenses Based On Personal Jurisdiction

By Gerald L. Maatman, Jr. and Jennifer A. Riley

 Duane Morris Takeaway: In 2022, corporate defendants aggressively asserted defenses based on personal jurisdiction to fracture collective actions in particular. In Bristol-Myers Squibb Co. v. Superior Court of California, San Francisco County, 137 S. Ct. 1773 (2017), the U.S. Supreme Court held that each plaintiff in a mass action must demonstrate a basis for the court to exercise personal jurisdiction over the defendant for purposes of adjudicating his or her claims, even if those claims are similar to the claims of other plaintiffs.

Federal circuits, however, have disagreed on the impact of the Supreme Court’s ruling in the collective action and class action context. Such a decision has the potential to curtail the forums in which the plaintiffs’ bar may file class and collective actions against a corporate defendant and, in particular, could limit the forums where a plaintiff could bring a nationwide action to those where a court may exercise general personal jurisdiction over the defendant (i.e., typically only the state where the company is organized and the state where it maintains its principle place of business).

Given the potential of the defense to fracture nationwide suits, multiple defendants raised personal jurisdiction in 2022, and the number of federal circuits holding that Bristol-Myers applies to collective actions grew to three (the Third, Sixth, and Eighth Circuits), with one circuit holding otherwise (the First Circuit).

In Fischer, et al. v. Federal Express Corp., 42 F.4th 366 (3d Cir. 2022), the Third Circuit joined the Sixth and Eighth Circuits in concluding that Bristol-Myers requires a court to find personal jurisdiction over the claims of opt-in plaintiffs in an FLSA collective action. The plaintiff, a Pennsylvania resident, brought suit against FedEx in the U.S. District Court for the Eastern District of Pennsylvania alleging that FedEx misclassified her and other security specialists as exempt from the overtime requirements of the FLSA. Two non-resident FedEx employees, who worked for FedEx in their home states, filed notices of consent to join the action. The district court held that it lacked specific personal jurisdiction over FedEx with respect to their claims, and they filed a petition for interlocutory appeal. The Third Circuit granted the petition to resolve whether, in an FLSA collective action, where the district court lacks general personal jurisdiction over the defendant, all opt-in plaintiffs must demonstrate that the district court may exercise specific personal jurisdiction over the defendant to resolve their claims.

The Third Circuit recognized that the Sixth and Eighth Circuits had answered in the affirmative, holding that the claims of FLSA opt-in plaintiffs must arise out of or relate to the defendant’s minimum contacts with the forum state, Id. at 370 (citing Canaday, et al. v. Anthem Cos., 9 F.4th 392 (6th Cir. 2021), and Vallone, et al. v. CJS Solutions Group, LLC, 9 F.4th 861 (8th Cir. 2021)), whereas the First Circuit had answered in the negative, holding that only the named plaintiffs must show that their claims arise out of or relate to the defendant’s minimum contacts with the forum state. Id. (citing Waters, et al. v. Day & Zimmermann NPS, Inc., 23 F.4th 84 (1st Cir. 2022)).

The Third Circuit agreed with the former, holding that, like the out-of-state plaintiffs in Bristol-Myers, the opt-in plaintiffs in FLSA collective actions must satisfy the personal jurisdiction requirements of the Fourteenth Amendment to join the suit by demonstrating general personal jurisdiction or specific personal jurisdiction. As to the former, the opt- ins could not establish general personal jurisdiction over FedEx because the company was incorporated in Delaware and had a principal place of business in Tennessee. As to the latter, the opt-ins could not establish specific jurisdiction because they lived and worked in New York and Maryland, respectively, and based their claims entirely on their treatment by FedEx in their home states. Id. at 383.

During 2022, the parties in three of these cased filed petitions for review by the U.S. Supreme Court, and requested that it address the question of personal jurisdiction in the context of collective actions. To date, the Supreme Court has denied two of the petitions, with the  petition outstanding. Thus, it is unlikely that the Supreme Court will resolve this issue in 2023, and corporate defendants can expect that personal jurisdiction will remain a powerful defense for facing collective actions outside of their home states.

Illinois Supreme Court Holds Each Fingerprint Scan Is A Separate BIPA Violation – Thereby Creating The Potential For Increased Damages In Privacy Class Actions

By Gerald L. Maatman, Jr., Alex W. Karasik, Tyler Z. Zmick, and Jennifer A. Riley

Duane Morris Takeaways:  In the latest ruling in Illinois in the biometric privacy class action space, the Illinois Supreme Court decided today in Cothron v. White Castle, 2023 IL 128004 (Ill. Feb. 17, 2023), that a separate claim for damages accrues under the Biometric Information Privacy Act (“BIPA”) each time a private entity scans or transmits an individual’s biometric identifier or information, in violation of section 15(b) or 15(d).

This ruling could exponentially increase monetary damages in class actions brought under the BIPA, especially in the employment context, where employees scan in and out of work multiple times per day for several hundred days per year.

Case Background

Plaintiff alleged that after she started working at White Castle in 2004, the company required her to use a fingerprint-based system to access the workplace computer she used in her position as a manager.  Plaintiff sued White Castle several years later in 2018, alleging that the company violated Sections 15(b) and 15(d) of the BIPA in connection with the fingerprint-based system by (i) collecting her biometric data without providing her with the requisite notice and obtaining her written consent, and (ii) disclosing her biometric data without consent.

After removing the complaint to the U.S. District Court for the Northern District of Illinois, White Castle moved for judgment on the pleadings on the basis that Plaintiff’s claims were untimely.  Specifically, White Castle argued that Plaintiff’s BIPA claims accrued in 2008 (when her first fingerprint scan occurred after the BIPA took effect), yet she did not file her complaint until 2018.  The District Court rejected White Castle’s one-time-only theory of claim accrual, holding that the lawsuit was timely because each separate unauthorized fingerprint scan constituted an independent violation of the statute, meaning Plaintiff’s BIPA claims were timely because her last fingerprint scan occurred within five years of the filing of her complaint.  Because the issue presented a close call, however, the District Court permitted White Castle to file an interlocutory appeal with the Seventh Circuit regarding whether Section 15(b) and 15(d) claims accrue each time a private entity scans a person’s biometric identifier and each time a private entity transmits a scan to a third party, respectively, or only upon the first scan and first transmission.

The U.S. Court of Appeals for the Seventh Circuit accepted the interlocutory appeal. Id. ¶ 9. After determining that Plaintiff had standing to bring her action in federal court under Article III of the U.S. Constitution, the Seventh Circuit addressed the parties’ respective arguments on the accrual of a claim under the Act.  Id.  Ultimately, the Seventh Circuit found the parties’ competing interpretations of claim accrual reasonable under Illinois law, and it agreed with Plaintiff that “the novelty and uncertainty of the claim-accrual question” warranted certification of the question to the Illinois Supreme Court.  Id. at 1165-66.  The Seventh Circuit “observed that the answer to the claim-accrual question would determine the outcome of the parties’ dispute, this court could potentially side with either party on the question, the question was likely to recur, and it involved a unique Illinois statute regularly applied by federal courts.”  Id..

The Illinois Supreme Court’s Decision

In a 4-3 split ruling, the Illinois Supreme Court held today that that a separate claim accrues under the BIPA each time a private entity scans or transmits an individual’s biometric identifier or information, in violation of section 15(b) or 15(d).  First, the Illinois Supreme Court analyzed the certified question with respect to Section 15(b), which provides that no private entity “may collect, capture, purchase, receive through trade, or otherwise obtain” a person’s biometric data unless it first provides notice and receives written consent.  740 ILCS 14/15(b).  Relying on the plain language of the statute and the fact that the actions of “collecting” and “capturing” biometric data can occur more than once, the Supreme Court agreed with Plaintiff’s interpretation – namely, that Section 15(b) “applies to every instance when a private entity collects biometric information without prior consent.”  Id. ¶¶ 19, 23.  As interpreted in the context of the facts of the case, the Supreme Court further observed that White Castle obtains an employee’s fingerprint, stores it in its database, and then compares the fingerprint taken during subsequent scans to verify the identity of the employee.  In the Supreme Court’s words, White Castle “fails to explain how such a system could work without collecting or capturing the fingerprint every time the employee needs to access his or her computer or pay stub.”  Id. ¶ 23.  Accordingly,  consistent with the District Court’s decision in Cothron and the Illinois Appellate Court’s conclusion in Watson, 2021 IL App (1st) 210279, ¶ 46, the Illinois Supreme Court held that an entity violates Section 15(b) the first time it collects biometric data without having provided the requisite notice and obtaining consent, in addition to “each subsequent scan or collection.”  Id. ¶ 24.

Next, closely tracking its analysis of Section 15(b), the Supreme Court similarly held that BIPA Section 15(d) – which prohibits the disclosure, redisclosure, or dissemination of biometric data without consent – “applies to every transmission to a third party.”  Id. ¶ 28. Like the verbs “collect” and “capture” in Section 15(b), the acts of disclosing and redisclosing biometric data occur upon the initial disclosure in addition to any subsequent disclosure or redisclosure of the data.  See id. ¶ 29 (“A fingerprint scan system requires a person to expose his or her fingerprint to the system so that the print may be compared with the stored copy, and this happens each time a person uses the system.”).

The majority opinion also rejected White Castle’s remaining “nontextual” arguments supporting its single-accrual interpretation.  White Castle argued that a BIPA claim accrued only upon the initial collection or disclosure of a person’s biometric data because an individual loses the right to control his or her biometric data as soon as the data is collected and/or disclosed.  In rejecting the argument, the Supreme Court again relied on the statute’s plain language, stating: “[n]o such limitation appears in the statute.  We cannot rewrite a statute to create new elements or limitations not included by the legislature.”  Id. ¶ 39.

Next, the Supreme Court turned to White Castle’s argument that in light of the BIPA’s liquidated damages provision, interpreting the statute to mean an entity violates Sections 15(b) and 15(d) every time it collects or discloses biometric data means “a party may recover for “each violation,” allowing multiple or repeated accruals of claims by one individual could potentially result in punitive and “astronomical” damage awards that would constitute “annihilative liability” not contemplated by the legislature and possibly be unconstitutional.”  Id. ¶ 41.  For example, White Castle estimated that if Plaintiff was successful and allowed to bring her claims on behalf of as many as 9,500 current and former White Castle employees, classwide damages in her action may exceed $17 billion.  Once again, the Supreme Court rejected White Castle’s argument because the statutory language is clear and supports plaintiff’s position.  See id. ¶ 40 (“As the district court observed, this court has repeatedly held that, where statutory language is clear, it must be given effect, “ ‘even though the consequences may be harsh, unjust, absurd or unwise.’ ” (Emphasis omitted.) Cothron, 477 F. Supp. 3d at 734 (quoting Peterson v. Wallach, 198 Ill. 2d 439, 447 (2002)).”).

Importantly, however, the Supreme Court acknowledged that trial courts could exercise their discretion to reduce the amount of statutory damages that plaintiffs can recover. Id. ¶ 42.  In closing, the Supreme Court reiterated the position that White Castle’s “policy-based concerns about potentially excessive damage awards under the Act are best addressed by the legislature,” and it “suggest[ed] that the legislature review these policy concerns and make clear its intent regarding the assessment of damages under the Act.”  Id. ¶ 43.  Accordingly, the Illinois Supreme Court concluded that the plain language of section 15(b) and 15(d) shows that a claim accrues under the BIPA with every scan or transmission of biometric identifiers or biometric information without prior informed consent.

The Dissent

Notably, three Illinois Supreme Court Justices, inclusive Chief Justice Theis, joined the Dissenting Opinion.  Of note, the Dissent opined that two significant consequences militate against the majority’s construction.  Id. ¶ 60.  First, under the majority’s rule, plaintiffs would be incentivized to delay bringing their claims as long as possible, since “If every scan is a separate, actionable violation, qualifying for an award of liquidated damages, then it is in a plaintiff’s interest to delay bringing suit as long as possible to keep racking up damages.”  Id.  Second, the Dissent noted that, “the majority’s construction of the Act could easily lead to annihilative liability for businesses.”  Id. at ¶ 61.

In sum, the Dissent commented that, “Imposing punitive, crippling liability on businesses could not have been a goal of the Act, nor did the legislature intend to impose damages wildly exceeding any remotely reasonable estimate of harm.  Id. ¶ 63.  To this point, the Dissent opined that, “nothing in the Act indicating that the legislature intended to impose cumbersome requirements or punitive, crippling liability on corporations for multiple authentication scans of the same biometric identifier. The legislature’s intent was to ensure the safe use of biometric information, not to discourage its use altogether.”

Implications For Employers

Following the Illinois Supreme Court’s similar pro-plaintiff ruling in Tims v. Black Horse Carriers, 2023 IL 127801 (Ill. Feb. 2, 2023), which applied a five-year statute of limitations to the BIPA instead of a one-year statute of limitations, the well is beginning to dry for businesses in terms of potential BIPA class action defenses. While employers can still explore novel exemptions, such as information captured from a patient in a health care setting, most companies caught in the crosshairs of BIPA class actions will be facing monumental amounts of potential damages.

Businesses confronted with BIPA class actions may need to explore alternative potential defenses, such as the constitutionality of the overbearing damages thresholds.  Companies will also likely push for legislative changes.  Nonetheless, given the bleak outlook of the law as it stands, it is imperative for businesses to immediately ensure they are compliant with the BIPA.

© 2009- Duane Morris LLP. Duane Morris is a registered service mark of Duane Morris LLP.

The opinions expressed on this blog are those of the author and are not to be construed as legal advice.

Proudly powered by WordPress