Illinois resident’s class-action lawsuit alleges Claude chatbot violates state privacy law

Anthropic's class‑action lawsuit filed by Illinois resident Jose Enrique Oriz Colon alleges that the Claude chatbot violated the Illinois Biometric Information Privacy Act by requiring users to submit a government ID and a live image for verification. For website owners, this litigation signals heightened scrutiny of any AI interface that collects biometric data. If your site embeds Claude via API or offers a similar verification step, you could be exposed to BIPA claims for each biometric capture, regardless of whether the data is stored. Regulators are now treating real‑time facial scans as biometric identifiers, so any user‑auth flow that mirrors Claude’s “live image” check must be reassessed to avoid costly statutory damages. **Actionable steps:** 1. **Audit AI integrations** – Identify every third‑party chatbot or authentication widget that requests facial images or government IDs, and verify whether they comply with BIPA consent requirements. 2. **Update your llms.txt** – Add explicit entries for Claude and any similar bots, specifying “no‑biometric‑collection” or “require‑explicit‑consent” directives to inform crawlers and compliance tools. 3. **Implement consent logs** – Deploy a server‑side log that records user consent timestamps and the exact biometric data captured, enabling rapid response if a BIPA claim arises.