ARTICLE
15 September 2026

Seventh Circuit Upholds That Vendors Can Share Their Clients' BIPA Exemption

SM
Sheppard, Mullin, Richter & Hampton LLP

Contributor

Businesses turn to Sheppard to deliver sophisticated counsel to help clients move ahead. With more than 1,200 lawyers located in 16 offices worldwide, our client-centered approach is grounded in nearly a century of building enduring relationships on trust and collaboration. Our broad and diversified practices serve global clients—from startups to Fortune 500 companies—at every stage of the business cycle, including high-stakes litigation, complex transactions, sophisticated financings and regulatory issues. With leading edge technologies and innovation behind our team, we pride ourselves on being a strategic partner to our clients.
A recent Seventh Circuit decision is a reminder of BIPA’s financial institution GLBA exceptions. In that case, the court held that a vendor to GLBA-regulated entities was exempt from Illinois’ biometric law.
United States Illinois Privacy
Liisa M. Thomas’s articles from Sheppard, Mullin, Richter & Hampton LLP are most popular:
  • with readers working within the Automotive industries
Sheppard, Mullin, Richter & Hampton LLP are most popular:
  • within Strategy and Insolvency/Bankruptcy/Re-Structuring topic(s)

A recent Seventh Circuit decision is a reminder of BIPA’s financial institution GLBA exceptions. In that case, the court held that a vendor to GLBA-regulated entities was exempt from Illinois’ biometric law.

The company, Nuance Communications, provides identity-check services for GLBA entities, including one that uses voice identification tools for customer identification. Nuance was hired to run that voice ID system. A customer brought a BIPA suit, arguing that Nuance failed to obtain BIPA-required written consent before collecting her voice-identification data.

The plaintiff did not sue the company itself, recognizing it was exempt under GLBA. She argued, instead, that the exemption should not extend to the financial institution’s vendor. The court disagreed. It found that Nuance was confirming identity as part of a proper banking activity, and as such was engaging in a GLBA activity. As such, its activities were subject to the GLBA exemption. The court pointed to a similar conclusion reached by the Third Circuit.

Putting it into Practice: This case is a reminder that BIPA does have exemptions, and those exemptions could apply to vendors providing services on behalf of an exempt entity. 

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

[View Source]

Mondaq uses cookies on this website. By using our website you agree to our use of cookies as set out in our Privacy Policy.

Learn More