> The BIPA requires companies doing business in Illinois to comply with a number of requirements pertaining to the collection and storage of biometric information. These include a requirement that companies:
> Obtain consent from individuals if the company intends to collect or disclose their personal biometric identifiers.
> Destroy biometric identifiers in a timely manner.
> Securely store biometric identifiers.[6]
> A key area of focus is that an entity must use a "reasonable standard of care"[7] in managing biometric information and identifiers.