IL HB2838

Amends Illinois' Biometric Information Privacy Act (BIPA) to exclude from the definition of "biometric identifier" any information converted to a mathematical representation (such as a numeric string) that cannot be used to recreate the original biometric data

Creates exemptions for biometric time clocks and biometric locks that convert biometric data to mathematical representations, removing these devices from BIPA's requirements

Allows private entities to collect biometric information without written consent when used solely for security purposes, including preventing retail theft, fraud, protecting property from trespass, or assisting law enforcement investigations

Requires aggrieved persons to provide 30 days' written notice to a private entity before filing suit, allowing the entity to cure the violation and avoid statutory damages; also shortens the statute of limitations to one year

Exempts private entities whose employees are covered by collective bargaining agreements that address biometric information policies from the Act's requirements