IL HB5374

Changes "written release" to "written consent" in the Biometric Information Privacy Act and allows consent to be obtained electronically.

Requires written policies on biometric data retention and destruction be made available only to the individual whose data is collected, rather than to the public.

Establishes a 30-day notice and cure period before legal action; if a private entity cures the violation within 30 days, no statutory damages may be pursued unless the entity later breaches its cure statement.

Reduces damages for negligent violations from $1,000 liquidated damages to actual damages only; reduces willful violations from $5,000 liquidated damages to actual damages plus liquidated damages up to the amount of actual damages.

Exempts private entities whose employees are covered by collective bargaining agreements with different biometric information policies from the Act's requirements.