Court To Decide If Insurance Covers Biometric Data Claims in BIPA Dispute

The Illinois Biometric Information Privacy Act (BIPA), has become increasingly popular with the plaintiffs’ bar. BIPA provides a private right of action to recover potentially astronomical damages for inadvertent use or disclosure of biometric data like fingerprints, face scans, or voiceprints by businesses. Fortunately, there may be some help from your insurance policy.

Insurance Policies May Cover BIPA-related Claims

Insurance policies that may cover BIPA lawsuits include commercial general liability (CGL), employment practices liability (EPL), and cyber insurance policies.

CGL policies provide defense and indemnity coverage for “personal and advertising injury” which in many cases is expressly defined to include BIPA-related violations.  EPL policies cover employment practices claims and often include coverage of claims for employment-related invasions of privacy, which may extend to cover BIPA claims. Cyber insurance policies frequently cover liability arising out of technology-related wrongful acts. Because there is a wide variation in the terms of cyber-insurance coverage, these policies need to be reviewed carefully. In some cases, the unlawful collection of confidential information can be excluded from cyber insurance policies.

In one recent case, a restaurant franchise company, Francesca Midwest Holdings, was sued by its employees for collecting fingerprint data to record their work hours without disclosing how and why those fingerprints were collected and stored, in violation of BIPA.  Fracesca sought coverage for the lawsuit under a CGL policy issued by Cincinnati Insurance Co.  Cincinnati denied the claim and then filed a declaratory judgment action against Francesca asking the court to declare that the policy provides no coverage for the BIPA claims.  Although the policy in that case does not expressly exclude coverage for BIPA claims, the insurer contends that such claims do not fall within the policy’s “personal or advertising injury” coverage, and also argues that the claim is excluded under an employment-related conduct exclusion and an exclusion for recording confidential information.  The case remains pending in the U.S. District Court for the Northern District of Illinois.  Citizens Insurance Co. v. Francesca’s Midwest Holdings, Inc., (Case No. 1:21-cv-02249).

How to Determine Your Protection

Policyholders should review their coverage and prior to securing a policy, seek advice as to what exactly their existing policy covers.

Ransomware Update

In related news, the May 6th ransomware attack against Colonial Pipeline Co. will likely increase costs for cyber liability insurance across the board and cause insurers to narrow the types of incidents covered. You can read our previous blog about cyber insurance and ransomware attacks here.

[View source.]

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Kelley Drye & Warren LLP | Attorney Advertising

Written by:

Kelley Drye & Warren LLP
Contact
more
less

Kelley Drye & Warren LLP on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide

This website uses cookies to improve user experience, track anonymous site usage, store authorization tokens and permit sharing on social media networks. By continuing to browse this website you accept the use of cookies. Click here to read more about how we use cookies.