Lowe's: Illinois BIPA Voiceprint Class Action Alleges Secret Data Collection

• Rosemarie Perkins has filed a class action lawsuit against Lowe's in the Circuit Court of Cook County.
• The lawsuit alleges Lowe's secretly collected voiceprints from Illinois callers via its customer service lines without consent.
• Perkins claims Lowe's violated the Illinois Biometric Information Privacy Act (BIPA) by failing to inform callers and obtain written release for biometric data collection.
• The complaint states Lowe's used unique vocal characteristics to analyze customer interactions and transferred this sensitive data to third-party vendors.
• This action follows a similar BIPA class action filed against Walmart one month prior, highlighting a growing trend in biometric data litigation.

This context underscores the significant compliance risk under BIPA if explicit consent is not obtained before capturing, storing, or sharing voiceprints or other biometric identifiers, potentially leading to costly class action litigation.

Illinois resident Rosemarie Perkins has initiated a class action lawsuit against home improvement retailer Lowe's, alleging the company secretly collects voiceprints from callers to its customer service lines without obtaining proper consent. The complaint, filed on a recent Thursday in the Circuit Court of Cook County, claims Lowe's utilizes its high-traffic customer service systems to capture unique vocal characteristics from individuals seeking assistance with products, services, or accounts. Perkins contends that these voiceprints are then analyzed and used to track customer interactions, with the sensitive biometric data subsequently transferred to third-party technology vendors.

The lawsuit seeks to represent a proposed class of all Illinois residents who contacted Lowe's customer service and had their voice-derived biometric information captured without prior notification. Perkins asserts that she was never informed her voiceprints or other biometric data would be collected during a customer service call she made in May, nor was she asked to approve such collection. She states in the complaint that had she known Lowe's would subject her voice to biometric processing, retain that information, or disclose it to third parties, she would not have used the company's telephone customer service line.

The core of the lawsuit revolves around the distinction between standard call recording and biometric data collection. While ordinary audio recording is a common practice for quality improvement in customer service, the complaint highlights that biometric technology specifically analyzes a speaker's voice characteristics, translating them into a unique mathematical representation to identify individuals. This "voiceprint" is distinct from other personal identifiers because, unlike a password or account number, it cannot simply be replaced if compromised.

Lowe's U.S. privacy statement, last updated in March, does not explicitly mention the collection or storage of biometric information. However, the company does acknowledge its deployment of AI virtual assistant technology that analyzes and processes voice recordings. Perkins' complaint suggests that this technology is being used to create, collect, receive, or otherwise obtain voiceprints derived from callers' distinctive vocal characteristics, often without their knowledge.

The lawsuit asserts that Lowe's alleged practices violate the Illinois Biometric Information Privacy Act (BIPA), a landmark law enacted in 2008 to safeguard the biometric data of Illinois citizens. BIPA strictly prohibits private entities from collecting, capturing, purchasing, or receiving a person's biometric information unless they first inform the individual and obtain a written release or consent. Perkins' claim directly challenges Lowe's adherence to these foundational requirements.

This legal action also draws attention to a 2023 statement from the Federal Trade Commission (FTC), which outlined the extensive scope and inherent risks associated with the rapid adoption of biometric technologies. The FTC specifically noted that such technologies impact consumer privacy and data security, posing key risks like unauthorized account access and false identifications. The commission further highlighted that these issues disproportionately affect vulnerable groups, including women, elderly individuals, and racial minorities, and explicitly defines voice biometrics as protected biometric information. This context underscores the significant compliance risk under BIPA if explicit consent is not obtained before capturing, storing, or sharing voiceprints or other biometric identifiers, potentially leading to costly class action litigation.

The class action against Lowe's is not an isolated incident but rather reflects a growing trend of litigation concerning biometric data collection in Illinois. Just one month prior to this filing, a similar class action was initiated against retail giant Walmart by a group of its customers, also alleging violations of BIPA. These cases collectively signal increasing scrutiny over how companies manage sensitive biometric information, particularly voice data, and highlight the substantial legal exposure faced by businesses that fail to secure explicit consent from consumers in Illinois.

The ongoing legal challenges emphasize the urgent need for companies, especially those operating in Illinois or utilizing voice analysis technology for customer service, to meticulously review their biometric data collection practices to mitigate class action risk.

Companies, particularly those operating in Illinois or utilizing voice analysis technology for customer service, must urgently review their biometric data collection practices. This lawsuit underscores the significant compliance risk under BIPA if explicit consent is not obtained before capturing, storing, or sharing voiceprints or other biometric identifiers, potentially leading to costly class action litigation.

Source: Original reporting via Courthouse News