HyreCar Held Onto Illinois Users’ Facial Data, Privacy Suit Says

Online car-rental platform HyreCar LLC was hit with a proposed biometric privacy class action accusing it of failing to promptly delete Illinois users’ facial data or disclose when it would, as state law requires.

HyreCar violated Illinois’ Biometric Information Privacy Act by not permanently deleting more than 1,000 customers’ collected facial geometry data after the data’s purpose of verifying the users’ identities when opening new accounts had been served, according to a complaint filed Tuesday in the US District Court for the Northern District of Illinois. The company also lacked a BIPA-mandated publicly available data retention policy establishing storage and ...