Illinois Biometric Information Privacy Act (BIPA) BIPA-SEC15A-DESTROY: Destruction When Purpose Satisfied or Three Years Inactive
Permanently destroy biometric data when the initial purpose has been satisfied or within three years of the individual's last interaction, whichever occurs first.