BIPA Cases: 7th Circuit Rules Change to Illinois Law’s Damages Provision Retroactively Limits Defendant Exposure

Why It Matters

By limiting exposure, the ruling reshapes financial risk for companies facing BIPA suits and may shift many cases out of federal court, altering litigation strategy across the industry.

Key Takeaways

• Seventh Circuit applies 2024 BIPA amendment retroactively to pending cases.
• Per‑scan statutory damages limited to a single award per biometric identifier.
• Potential exposure drops from millions to a single statutory recovery per plaintiff.
• Federal jurisdiction may be lost where damages no longer meet amount‑in‑controversy.
• Defendants should reassess strategy and possible remand to state court.

Pulse Analysis

Illinois’s Biometric Information Privacy Act has been a flashpoint for corporate liability since the Supreme Court’s 2023 Cothron decision, which allowed plaintiffs to claim damages for each individual scan or disclosure. That interpretation sparked a wave of litigation, with companies fearing exposure that could run into the billions. The high‑stakes environment prompted lawmakers to amend Section 20 in 2024, capping damages to a single award per biometric identifier, aiming to balance privacy protection with economic feasibility.

The Seventh Circuit’s recent opinion in Clay v. Union Pacific clarifies that the amendment is procedural, not substantive, and therefore applies retroactively to cases already filed. By focusing on the remedy rather than the underlying liability, the court aligned the amendment with Illinois’s retroactivity doctrine, effectively nullifying per‑scan damage calculations for pending lawsuits. This legal nuance underscores how statutory language and procedural classifications can dramatically shift the financial calculus for defendants, even after a case is underway.

Practically, the ruling slashes potential payouts from multi‑million figures to a single statutory sum, often a few thousand dollars. It also threatens federal jurisdiction in cases that previously satisfied the $75,000 amount‑in‑controversy threshold solely through projected per‑scan damages. Companies now must revisit litigation strategies, consider early settlements, or prepare for possible remand to state courts. The decision signals to businesses that proactive compliance and swift legal response are essential to mitigate exposure under evolving biometric privacy regimes.