That pertains to collecting biometric info, not end users of facial recognition services. From your link:

> The BIPA requires companies doing business in Illinois to comply with a number of requirements pertaining to the collection and storage of biometric information. These include a requirement that companies:

> Obtain consent from individuals if the company intends to collect or disclose their personal biometric identifiers.

> Destroy biometric identifiers in a timely manner.

> Securely store biometric identifiers.[6]

> A key area of focus is that an entity must use a "reasonable standard of care"[7] in managing biometric information and identifiers.

▲ free_bip 4 hours ago | parent [-]

If you actually read the full text of the law, it states:

" "Biometric identifier” means a retina or iris scan, fingerprint, voiceprint, or scan of hand or face geometry. Biometric identifiers do not include writing samples, written signatures, photographs, human biological samples, [...] "

So if it's just pictures of faces, then it's okay. If, however, at any point in the pipeline the actual facial geometry is calculated or stored, that might be a violation.

▲ bensyverson 3 hours ago | parent [-]

Exactly. They've done it in the past, and it cost them $650M. It's unclear whether that was enough of a deterrent to change their behavior. [0]

  [0]: https://www.rgrdlaw.com/cases-in-re-facebook-biometric-info-privacy-litig.html

	▲	jplusequalt an hour ago \| parent [-]
		$650M to Meta is a drop in the bucket.