IL SB3592

Changes "written release" to "written consent" in the Biometric Information Privacy Act and allows consent to be obtained by electronic means.

Requires written policies for biometric data retention and destruction to be made available to individuals whose biometric information is collected, rather than to the public.

Eliminates private right of action for individuals and instead makes violations by employers subject to Department of Labor enforcement, with employees able to file complaints within one year of the violation.

Makes non-employment biometric violations enforceable by the Attorney General or State's Attorney under the Consumer Fraud and Deceptive Business Practices Act, with enforcement actions limited to one year from the violation date.

Exempts private entities whose employees are covered by collective bargaining agreements that establish different biometric information policies.