Tea, a women-focused dating app known for its selfie-based safety verification, is facing multiple class-action lawsuits after a July data breach exposed sensitive user information, including ID photos and facial scans. While current claims focus on negligence and consumer protection, the lawsuits could eventually test the limits of Illinois’ Biometric Information Privacy Act (BIPA), one of the strictest biometric data laws in the United States.
The breach has sparked scrutiny over Tea’s identity verification process, which requires users to upload a selfie, often alongside a government-issued ID, for facial analysis before gaining access to the platform. Critics argue that this approach may involve the collection of biometric identifiers such as facial geometry, potentially triggering legal obligations under Illinois law.
So far, the lawsuits have been filed in federal court and center on allegations that Tea failed to implement adequate security controls to protect users’ personal and biometric data. Plaintiffs are seeking class-action status and damages related to the unauthorized exposure of sensitive information.
Illinois’ BIPA requires companies to obtain written consent before collecting biometric data and to publish clear policies on how such data is stored and destroyed. The law allows for damages of up to $1,000 per negligent violation and $5,000 for willful or reckless breaches. Though Tea has not yet been formally sued under BIPA, its verification workflow could place it at risk if claims under the law are added to the litigation.
Dating apps have increasingly turned to biometric verification tools in the name of user safety, but these efforts have raised privacy concerns. In 2024, a lawsuit against Match Group – owner of Tinder and OkCupid – was dismissed after a Texas court ruled that Match’s terms of service required application of Texas law, not Illinois’ BIPA. The case underscored how terms of service and user location can complicate biometric privacy enforcement across jurisdictions.
BIPA litigation has surged in recent years, resulting in several high-profile settlements. Earlier in 2025, truck-camera provider Lytx agreed to pay $4.25 million to resolve biometric data claims brought by Illinois truck drivers. Legal experts say the Tea case could become a new test of how biometric data collection intersects with digital identity, app-based platforms, and consent.
Source: Law360
–
By Ji-seo Kim
