Illinois Resident Sued Anthropic Over Biometric Data
A new class action lawsuit alleges the AI company violated Illinois privacy law during its identity verification process.
Updated on Sept. 30, 2026 in Artificial Intelligence
Live Poll
Should tech companies be required to provide written disclosure before collecting user biometric data?
A Chicago resident has filed a class action lawsuit in San Francisco County Superior Court, accusing Anthropic of violating the Illinois Biometric Information Privacy Act. The complaint alleges the company failed to provide required disclosures for facial scans captured during its identity verification process.
Why it matters
The case highlights growing legal scrutiny over how AI companies manage the biometric data collected during mandatory identity verification protocols. If successful, the suit could set a precedent for how automated identity systems handle user consent and data retention standards under Illinois law.
The lawsuit centers on the 15-page complaint targeting a verification workflow that matches user face geometry against government-issued IDs. This system, which involves third-party vendor Persona Identities Inc., is now subject to legal review for its handling of data over a five-year lookback period.
The players
Anthropic
An AI research and deployment company that produces the Claude large language model family.
Persona Identities Inc.
A digital identity verification platform that provides facial recognition and document scanning software services.
Jose Enrique Ortiz Colon
A Chicago resident who serves as the lead plaintiff in the class action lawsuit against Anthropic.
The details
To access the Claude chatbot, Anthropic requires users to submit a government-issued ID and a live facial image for verification. The plaintiff alleges that this process, facilitated by Persona Identities Inc., fails to provide the written disclosures required under the Illinois Biometric Information Privacy Act. This state law mandates that entities inform users about the retention and destruction of biometric identifiers, such as digital maps of facial geometry, and obtain written consent before collection.
Timeline
September 30, 2026: The class action lawsuit was filed in San Francisco County Superior Court.
The Tech Race
The litigation marks a significant test of the Illinois Biometric Information Privacy Act as applied to generative AI verification workflows. It follows a pattern of high-profile privacy challenges brought under this act against major technology firms.
The lawsuit concerns Illinois residents who used Anthropic's identity verification process at any point in the last five years. While the case proceeds, users should be aware that their facial data is subject to specific state privacy protections regarding retention and destruction.
The takeaway
This case serves as a reminder that consumer-facing AI features are subject to strict regional compliance requirements regarding sensitive data. Illinois residents should monitor court proceedings for potential class membership notifications.
Further reading
For more on how privacy standards are evolving in the sector, see Artificial Intelligence.
Source note: This article includes information reported by Court House News Service.
Live Poll
Should tech companies be required to provide written disclosure before collecting user biometric data?
