Charlotte Tilbury Beauty Agrees to $2.9M Settlement Over Biometric Data Collection

Charlotte Tilbury Beauty has agreed to a $2.925 million settlement to resolve allegations that its website collected biometric information from consumers without proper consent, in violation of the Illinois Biometric Information Privacy Act (BIPA). The case centers on the company’s virtual try-on technology, which uses facial recognition to allow customers to test makeup products digitally.

The settlement applies to U.S. residents who can submit valid claims. Individual claimants may receive between $700 and $1,100 in compensation, with no proof of purchase required for claim submission. The deadline for filing claims has been set for January 2, 2025. The settlement follows similar BIPA-related payouts, including Facebook’s landmark settlement and a recent $40 million settlement involving dating apps Bumble and Badoo.

BIPA, enacted in Illinois in 2008, establishes strict requirements for businesses collecting and handling biometric data, including facial recognition patterns and fingerprints. The law mandates that companies obtain explicit consent before collecting such information and maintain specific policies regarding the storage and deletion of biometric data. Recent court decisions have reinforced BIPA’s significance, with federal judges consistently upholding its provisions.

Although specific payment distribution dates have not been announced, settlements of this nature typically process payments after the claims period concludes. The case represents one of several recent BIPA-related settlements, as companies face increased scrutiny over their handling of biometric data. The trend has particularly affected retailers implementing virtual try-on features, with several major brands reviewing their biometric data collection practices.

The settlement’s magnitude demonstrates the growing intersection between consumer privacy regulations and digital retail technologies. BIPA has become a significant factor for businesses implementing biometric features in their operations, particularly in e-commerce platforms. The case highlights the broader trend of increasing regulatory oversight of facial recognition technology in retail settings, with similar privacy protection measures being adopted in other jurisdictions worldwide.

—
December 28, 2024 – by the ID Tech Editorial Team