Biometric Time Clocks and Illinois BIPA: Read This Before the First Scan

Biometric clock-in sells itself on one promise: no more buddy punching. In Illinois it also brings a privacy statute that lets every affected worker sue. The decision is not which scanner is most accurate. It is whether you are ready to run the consent process before day one.

This page is our reading of the statute, not legal advice. The Illinois General Assembly site refused our connection when we rechecked on October 27, 2026; the statutory points below rely on the Act as published there and checked on August 5, 2026, with the 2024 amendment.

What BIPA requires before the first scan

The Biometric Information Privacy Act (740 ILCS 14) applies to private employers that collect a biometric identifier, such as a fingerprint, a hand scan or a scan of face geometry. Before collecting one, the employer must:

1. Inform the worker in writing that a biometric identifier is being collected or stored.
2. State in writing the purpose and how long it will be collected, stored and used.
3. Get a written release signed by the worker; in employment, an electronic signature counts.

And as a standing duty, it must publish a written retention schedule and destroy the data when the purpose is satisfied or within three years of the worker's last interaction, whichever comes first.

Why the stakes are high

BIPA gives each affected person a private right of action: $1,000 per negligent violation and $5,000 per intentional or reckless one, plus attorneys' fees. A 2024 amendment (Public Act 103-0769) counts repeated collection from the same person by the same method as a single violation. That limits per-worker damages for repeated scans; it does not make a 200-person rollout without releases cheap.

Illinois is not alone. Washington, for example, bars enrolling a biometric identifier in a database for a commercial purpose without notice, consent or a way to prevent later commercial use. Check your own state before assuming that no Illinois worker means no issue.

Photo verification is not the same thing

BIPA's definition of a biometric identifier excludes photographs. A time clock that takes a picture at punch-in for a manager to look at is a different tool from one that measures face geometry to match the worker automatically. The difference is in how the product processes the image, so read the vendor's documentation, not the marketing label.

Our pick

Skip face templates and use photo verification. For most employers the buddy-punching problem is solved well enough by a photo at punch-in that a supervisor can review, plus GPS or a fixed kiosk. Workyard (crews) and Clockify (everyone else) are where we would start, after confirming in writing that their photos are not converted into a face template.

Who should use true biometric clock-in: a site with a real buddy-punching problem, an HR team able to run written notice, releases and a published retention schedule before launch, and a vendor contract that says where templates are stored and when they are destroyed. Timeero's kiosk facial recognition is the option on our list built for that.

For location tracking rules, see GPS time tracking and employee notice.