IL HB2252

Changes "written release" to "written consent" throughout the Biometric Information Privacy Act and allows consent to be obtained electronically.

Requires private entities to make their biometric information policies available to the individual from whom information is collected (rather than to the public).

Establishes a 30-day notice and cure period before litigation: if a private entity cures the violation within 30 days and provides written confirmation, no statutory damages may be claimed unless they later breach that written statement.

Reduces damages for negligent violations from liquidated damages of $1,000 or actual damages (whichever is greater) to actual damages only; for willful violations, changes from $5,000 or actual damages to actual damages plus liquidated damages up to the amount of actual damages.

Exempts private entities whose employees are covered by a collective bargaining agreement that provides different policies for biometric information retention, collection, disclosure, and destruction.