Illinois has one of the strictest laws in the nation protecting biometric data, which can include data from facial, fingerprint and iris scans. The 2008 law mandates that companies collecting such information obtain prior consent from consumers, detail how they’ll use it and specify how long the information will be kept. The law also allows private citizens, rather than just governmental entities, to file lawsuits over the issue.