SB0415
EDUCATION-TECH
TL;DR
Illinois SB0415, introduced by Senator Karina Villa and eight co-sponsors, bars public school districts from buying biometric systems (facial recognition, fingerprint scanners, voice recognition, iris scans) for use on students unless the district determines it serves a legitimate instructional purpose like identification or fraud prevention. By the 2027-2028 school year, any biometric tech already in use must be limited to those narrow purposes, and existing vendor contracts cannot be renewed if they conflict with the new rules.
How This Might Impact Your Business
EdTech vendors selling to Illinois K-12 schools (including Chicago Public Schools) face a shrinking market for biometric products; only tools tied to identification or fraud prevention will qualify as 'legitimate instructional purposes.'
Contracts signed on or after January 1, 2027 that conflict with the new restrictions are automatically void, so vendors need to restructure agreements before that date.
Existing contracts entered before January 1, 2027 are grandfathered but cannot be extended or rolled over, meaning recurring SaaS deals with auto-renewal clauses will effectively terminate at the next renewal.
Districts must obtain written parental consent, destroy biometric data within 30 days of discontinuation, and cannot sell or share the data, pushing compliance obligations onto vendors who process this data.
Products with incidental biometric features (like voice-activated tablets or facial-unlock on school-issued devices) remain permitted if used for ID or fraud prevention, preserving a carve-out for device makers like Apple, Google, and Microsoft.
No monetary penalties are specified in the bill, but non-compliant contracts are unenforceable, creating significant revenue risk for vendors.
Compliance deadline is the 2027-2028 school year, giving vendors roughly two years to reengineer products, disable biometric features, or exit the Illinois K-12 market.
What Should You Do
EdTech sales and legal teams should inventory all Illinois school district contracts and flag any with biometric components, auto-renewal clauses, or extension options expiring after January 1, 2027.
Product teams should identify whether their software has biometric capabilities (even dormant ones) and build a toggle to disable those features for Illinois K-12 deployments.
Have legal review your data processing agreements to ensure they include the 30-day destruction requirement, written consent tracking, and no-resale provisions before the 2027-2028 school year.
Track the bill through the Illinois House (it was re-referred to Rules Committee); prepare a compliance roadmap now assuming passage, since it has cleared the Senate.
If you sell devices with built-in biometric login (Chromebooks, iPads, Surface tablets), document that the biometric use is limited to identification or fraud prevention to preserve the statutory carve-out.
Who It Affects
Sponsors
Status Timeline
passed chamber
Rule 19(a) / Re-referred to Rules Committee
May 21, 2026