Kronos Biometric Information Used for Timekeeping Illinois Class Action

It seems that biometric information is being used by some companies for ordinary timekeeping purposes. Kronos Incorporated, a company that provides HR, payroll, timekeeping, tax, and compliance services, uses biometric information in providing its services to employers. But the complaint for this class action alleges that when it does so, Kronos does not obey Illinois’s Biometric Information Privacy Act (BIPA). 

The class for this action is all individuals whose biometrics were captured, collected, stored, used, transmitted, or disseminated, by or on behalf of Kronos or its technology, within Illinois at any time during the applicable statute of limitations period.

Biometric data includes such things as fingerprints, facial geometry, and retina scans. It is unique and irreplaceable. For this reason, the use of biometric data reduces timekeeping fraud. But is it worth the risks it poses for an individual? 

The problem is that it is irreplaceable. If someone steals your credit card number, you can cancel that credit card and get another one. But if someone steals your fingerprints, you cannot get rid of the old ones and get new ones. 

Lawmakers have barely begun thinking about how consumers and their biometrics must be protected. Illinois has a passed a law that provides some relatively simple rules that apply to entities or companies like Kronos or its clients when they require employees to surrender this data:

  • The company must inform the persons in writing that their biometric information is being collected and stored.
  • The company must inform the persons in writing of the purpose and length of time of for which their biometric information is being collected, used, and stored.
  • The company must obtain a written release from those persons, permitting them to capture and collect their information.
  • The company must publish publicly available retention guides that tell the persons when their biometric identifiers and information will be permanently destroyed. 

The complaint points out that all this can be accomplished with a single, signed sheet of paper. 

Still, the complaint says that Kronos does not comply—it does not inform people in writing about the collection, use, and storage of their information, does not publish any policy about the retention of the information, and does not obtain written consent to take and use the information. Yet the information is used every time an employee clocks in or out. 

Even worse, the complaint claims that Kronos shares the information with third parties, such as data storage vendors and payroll services. The complaint points out that Kronos has not received consent to share the information. In fact, it seems likely that the owners of the information may not be aware that it is being shared at all. 

Article Type: Lawsuit
Topic: Consumer

Most Recent Case Event

Kronos Biometric Information Used for Timekeeping Illinois Complaint

March 1, 2019

It seems that biometric information is being used by some companies for ordinary timekeeping purposes. Kronos Incorporated, a company that provides HR, payroll, timekeeping, tax, and compliance services, uses biometric information in providing its services to employers. But the complaint for this class action alleges that when it does so, Kronos does not obey Illinois’s Biometric Information Privacy Act (BIPA). 

kronos_biometric_data_complaint.pdf

Case Event History

Kronos Biometric Information Used for Timekeeping Illinois Complaint

March 1, 2019

It seems that biometric information is being used by some companies for ordinary timekeeping purposes. Kronos Incorporated, a company that provides HR, payroll, timekeeping, tax, and compliance services, uses biometric information in providing its services to employers. But the complaint for this class action alleges that when it does so, Kronos does not obey Illinois’s Biometric Information Privacy Act (BIPA). 

kronos_biometric_data_complaint.pdf
Tags: Biometric Fingerprint Violations, Taking/Storing/Using Biometric Data