“BIPA prohibits a private entity from collecting, capturing, purchasing, receiving or obtaining an individual’s biometric information, unless it provides certain notice and obtains written consent.”
Of course they’re not allowed to collect biometric data without consent.
That’s not exactly what the law says. Video recording is ‘capturing biometric data’. It’s what you do with it that matters.
If a company uses face recognition to apply an internal ID to a customer, how are you going to know? There are legitimate use-cases for how this might be helpful for both sides. It’s when biometrics get attached to financial details that we start to have a problem.
Fingerprints and retinal scans are far different than facial characteristics. As said, you’re recorded the moment you leave the house, your face isn’t private - unless you wear a burqa.