The Illinois Biometric Information Privacy Act (2008) prohibits the collection of consumers' fingerprints, iris scans, voice and facial data without permission. Penalties for violations included liquidated damages of $1,000 for each violation, or actual damages if greater, plus attorneys fees. Proof of specific harm is not required because there is no real recourse once the biometric data is compromised. The purpose of the act is to prevent irretrievable harm from happening. Sekura v. Krishna Schaumburg Tan, inc ( Ill. App. 1st dist. 2018).