CDPA requires that businesses only hold the pieces of data they need for a specific purpose and necessary to achieve that purpose; these principles are commonly referred to
Unique among state laws, the Illinois Biometric Information Privacy Act (“BIPA”) creates a private right of action for "any person aggrieved" by a violation of the statute and provides for statutory damages of $1,000 for a negligent violation to $5,000