Hacker News new | ask | show | jobs
by Manuel_D 7 days ago
That pertains to collecting biometric info, not end users of facial recognition services. From your link:

> The BIPA requires companies doing business in Illinois to comply with a number of requirements pertaining to the collection and storage of biometric information. These include a requirement that companies:

> Obtain consent from individuals if the company intends to collect or disclose their personal biometric identifiers.

> Destroy biometric identifiers in a timely manner.

> Securely store biometric identifiers.[6]

> A key area of focus is that an entity must use a "reasonable standard of care"[7] in managing biometric information and identifiers.

1 comments

If you actually read the full text of the law, it states:

" "Biometric identifier” means a retina or iris scan, fingerprint, voiceprint, or scan of hand or face geometry. Biometric identifiers do not include writing samples, written signatures, photographs, human biological samples, [...] "

So if it's just pictures of faces, then it's okay. If, however, at any point in the pipeline the actual facial geometry is calculated or stored, that might be a violation.

Exactly. They've done it in the past, and it cost them $650M. It's unclear whether that was enough of a deterrent to change their behavior. [0]

  [0]: https://www.rgrdlaw.com/cases-in-re-facebook-biometric-info-privacy-litig.html
$650M to Meta is a drop in the bucket.
When people violate the law, we incarcerate them, i.e. restrict their movement. Corporate stock should be incarcerated (i.e. movement restricted i.e. can not be sold/traded) when corporations break the law.
Since people cannot work from prison, corporations should be equivalent: they may not conduct any business. But since people in prison are still responsible for things like rent, corporations should keep paying rent and salary too. Not sure if it's possible to get a friend corporation to do that for you though…