Hunton Employment & Labor Perspectives

In a welcome win for defendants litigating claims under the Illinois Biometric Information Privacy Act (“BIPA”), earlier this month a Northern District of Illinois magistrate judge denied a plaintiff’s motion to compel communications between defendant Union Pacific Railroad Company (“Union Pacific”) and the vendors that provided it with fingerprint-activated security gates.  Fleury v. Union Pac. R.R. Co., No. 20 C 390, 2024 WL 1620613, at *4-6 (N.D. Ill. Apr. 15, 2024).  In so doing, the court implicitly affirmed that, in a BIPA lawsuit, the common interest doctrine presumptively protects the communications between biometric technology vendors and their customers, regardless of which entities are named as defendants.  This ruling is a powerful tool in the BIPA landscape for employers (who are typically the customers in this scenario) and other defendants alike because it supports the ability of BIPA defendants to coordinate their defense strategy with entities who share their legal interest.  The opinion is also a good reminder, however, that vendors and their customers should use best practices early on in a BIPA litigation to maximize the scope of the common interest doctrine.

Assembly Bill 1651 or the Workplace Technology Accountability Act, a new bill proposed by California Assembly Member Ash Kalra, would regulate employers, and their vendors, regarding the use of employee data.  Under the bill, data is defined as “any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular worker, regardless of how the information is collected, inferred, or obtained.”   Examples of data include personal identity information; biometric information; health, medical, lifestyle, and wellness information; any data related to workplace activities; and online information.  The bill confers certain data rights on employees, including the right to access and correct their data.