The Illinois Biometric Privacy Act is the gift that keeps on giving—to litigators, that is. 

The 2008 state law—uniquely expansive—allows individuals to sue companies for failing to follow rules on collecting and retaining biometric data such as fingerprints, retina scans and facial geometry.