Krista Cabiltes alleged that Ulta collected, stored and used her biometric identifiers and biometric information without informing her and without obtaining her consent as required by the Illinois law.
The company also failed to make public its data-retention and data-destruction policies, according to the complaint filed Tuesday in the US District Court for the Northern District of Illinois.
The lawsuit is the latest in ...