Whole Foods Settles BIPA Voiceprint Class Action
Time 1 Minute Read
Categories: Class Action

On January 3, 2023, an Illinois state court entered a preliminary approval order for a settlement of nearly $300,000 in a class action lawsuit against Whole Foods for claims that the company violated the Illinois Biometric Information Privacy Act (“BIPA”). The plaintiffs alleged that Whole Foods unlawfully collected voiceprints from employees who worked at the company’s distribution centers.

In the case in the Circuit Court of Cook County, Illinois, Chancery Division, the plaintiffs alleged that, by requiring them to use headsets that collected and used their voiceprints without providing them with a written policy regarding use and retention of their biometric identifiers and obtaining their consent, the company violated BIPA. The plaintiffs further alleged that these violations continuously and repeatedly exposed the company’s workers to privacy risks, such as hackers obtaining and using their personal information to steal their identity and commit identify theft.

An attorney for the plaintiffs is quoted as saying “To my knowledge, this is the first ever BIPA settlement involving allegations of voice biometrics.” Several lawsuits have been filed alleging BIPA violations relating to the use of these headsets.

You May Also Be Interested In

Time 2 Minute Read

On April 1, 2026, the U.S. Court of Appeals for the Seventh Circuit held that the 2024 amendment to Illinois’ Biometric Information Privacy Act, limiting damages, applies retroactively to pending cases.

Time 3 Minute Read

On March 20, 2026, Oklahoma Governor Kevin Stitt signed SB 546 into law, enacting the Oklahoma Consumer Data Privacy Act, which will take effect on January 1, 2027.

Time 2 Minute Read

On March 23, 2026, the UK Information Commissioner's Office released new guidance clarifying the use of the new recognized legitimate interest lawful basis for processing personal information under UK data protection law.

Time 1 Minute Read

The California Consumer Privacy Act continues to drive significant enforcement activity—particularly when minors’ data is involved. In a recent action, the California Privacy Protection Agency imposed a $1.1 million fine on youth sports platform PlayOn Sports for alleged violations involving student data and inadequate opt-out mechanisms. The case highlights growing regulatory scrutiny around how companies collect, share, and provide transparency about personal information—especially when schools and students are involved. 

Search

Subscribe Arrow

Recent Posts

Categories

Tags

Authors

Archives

Jump to Page