What procedural requirements does BIPA impose on private entities?
BIPA requires private entities to obtain written consent before collecting biometric data and to develop a retention schedule for biometric information.