SB 1239 · Illinois · introduced Jan 24, 2025In Committee

SB 1239

SCH CD-STUDENT BIOMETRIC INFO

Medium RiskMay require changes to AI practices. Monitor and prepare.

TL;DR

Illinois SB 1239 would amend the School Code to regulate how K-12 schools collect, use, and share students' biometric information (think fingerprints, facial scans, iris scans). It sets parental consent rules and limits on data retention, which directly affects ed-tech vendors and AI systems that use student biometrics.

How This Might Impact Your Business

K-12 schools and their ed-tech vendors in Illinois would face new rules on collecting student biometric data like fingerprints, facial recognition scans, and iris scans

Vendors selling AI-powered attendance, cafeteria payment, library checkout, or security systems that use biometrics would need written parental consent workflows built into their products

Data retention limits mean companies cannot store student biometric data indefinitely; expect required deletion timelines after a student leaves the school

Selling, leasing, or sharing student biometric data with third parties would likely be prohibited, killing certain data monetization models

Companies operating across multiple states will need Illinois-specific consent and deletion workflows, adding engineering and legal overhead

Non-compliance could expose vendors to liability under Illinois's already aggressive biometric privacy regime (BIPA-style litigation risk)

Bill is still in committee (re-referred to Assignments), so requirements and penalties could shift before passage

What Should You Do

1

If you sell ed-tech or security tech to Illinois schools, inventory every product that captures student biometrics and document current consent and retention practices

2

Ask your legal team to map this bill against your existing BIPA compliance program; there may be overlap but also new school-specific obligations

3

Brief your product team on building parental consent flows and automated data deletion features now, before the bill advances

4

Review vendor contracts with Illinois school districts for indemnification and data handling clauses that may need updating

5

Track the bill's movement out of the Assignments Committee and flag any amendments that add private right of action or statutory damages

Who It Affects

Education TechnologySchool Security and SurveillanceBiometric Identity VendorsCafeteria and Payment SystemsK-12 Software Providers

Status Timeline

  1. committee

    Rule 3-9(a) / Re-referred to Assignments

    April 11, 2025

AI-generated analysis for informational purposes only. Not legal advice. Always consult a qualified attorney for legal guidance.Last action Apr 11, 2025

Need help preparing your team for AI compliance?

Talk to LaunchReady about AI Training

Get the Weekly AI Law Roundup

Plain-English summaries of the AI laws that matter for your business. Every Monday. Free.

No spam. Unsubscribe anytime.