Skip to content

Insurance Company Settles BIPA Claim for $4 Million

Donwload the Alert Now!

Why This Privacy Law is Important:

The Illinois Biometric Information Protection Act (BIPA) has been in effect since 2008, but enforcement was relatively rare until 2015. Since then, a variety of enforcement actions have taken place, with the most recent being this $4 million settlement of a class action lawsuit filed against Lemonade, a New York City-based insurance company that offered insurance to Illinois residents.


 

Overview:

In May 2022, Lemonade Insurance Company reached a $4 million settlement to end a lawsuit that claimed the company collected, stored, analyzed and used the biometric data of thousands of its customers without authorization or consent. The plaintiffs in the case were policyholders with the company, which offers renters’, homeowners’, car, pet, and term life insurance to clients. Lemonade is a tech-based disruptor in the insurance industry, and as a registered public benefit corporation, its mission is to “transform insurance from a necessary evil into a social good.”
Biometric data, which documents unique personal characteristics, such as fingerprints, voiceprints, retinal images, or facial geometry, can be used to validate an individual’s identity. Lemonade tweeted about how it used biometric data, in this case, facial recognition technology, to detect potential fraud. However, the company’s data privacy statement stated that it would not collect, require, sell, or share users’ biometric data.
 

Who it Applies to:

The class action suit covered Lemonade policyholders who unwittingly provided their biometric data in the course of submitting video explanations of their insurance claims as required by the company between 2019 and 2021. Lemonade did not obtain written consent or make required disclosures relating to their use of biometric information derived from the videos. 
Multiple lawsuits fall into this class action settlement. In addition to BIPA violations in Illinois, plaintiffs claimed Lemonade violated New York, California, and other state laws governing biometric data.

 

Download the Privacy Alert to the right to get the full text and expert analysis!