Krista Cabiltes alleged that Ulta collected, stored and used her biometric identifiers and biometric information without informing her and without obtaining her consent as required by the Illinois law.
The company also failed to make public its data-retention and data-destruction policies, according to the complaint filed Tuesday in the US District Court for the Northern District of Illinois.
The lawsuit is the latest in ...
Learn more about Bloomberg Law or Log In to keep reading:
See Breaking News in Context
Bloomberg Law provides trusted coverage of current events enhanced with legal analysis.
Already a subscriber?
Log in to keep reading or access research tools and resources.
