This is true, but that law (BIPA) applies to private entities. i.e., government orgs and contractors are exempt. Regardless, this new legislation is good. I would like to see the complete inclusion of government organizations into needing to acquire consent.