Devogelear v. Dart

Plain English (For Everyone)

Imagine a company taking your fingerprint or face scan without asking. This case says that just collecting and using your fingerprint for their own business, like for employee time clocks, isn't enough to sue them under a specific privacy law. You generally need to show they also shared that fingerprint information with someone else.

For Legal Practitioners

The appellate court affirmed dismissal, holding the plaintiff failed to adequately plead publication of biometric data to a third party, a prerequisite for a BIPA claim. This ruling clarifies that internal collection and use, without disclosure to unaffiliated entities, does not satisfy the 'publication' element, potentially increasing the pleading burden for BIPA plaintiffs and requiring plaintiffs to plead specific facts demonstrating third-party disclosure.

For Law Students

This case tests the 'publication' element of a BIPA claim. The court held that internal collection and use of biometric data by the defendant does not constitute 'publication' to a third party. This aligns with a stricter interpretation of BIPA's requirements, emphasizing the need for allegations of data sharing with external entities to establish a claim, rather than just the act of collection itself.

Newsroom Summary

A state appeals court ruled that employees can't sue their employer under a privacy law just because their fingerprint was collected for timekeeping. The ruling clarifies that the employer must have shared that biometric data with a third party for a lawsuit to proceed, impacting how employees can challenge data collection practices.

Procedural Posture

The plaintiff, a former employee of the Department of Revenue, sued the Department of Revenue and its director (collectively, 'Dart') for breach of contract and violation of the Illinois Pension Code. The plaintiff alleged that Dart improperly calculated his pension benefits. The trial court granted summary judgment in favor of Dart, finding that the plaintiff was not entitled to the pension benefits he sought. The plaintiff appealed this decision to the Illinois Appellate Court.

Constitutional Issues

Whether the Illinois Pension Code mandates a specific method for calculating pension benefits that was violated by the defendant.Whether the plaintiff's actions constituted a forfeiture of pension benefits under the Illinois Pension Code.

Rule Statements

"A public employee's right to a pension is a vested right that cannot be diminished or impaired by subsequent legislation."

"The Illinois Pension Code must be construed to give effect to the legislative intent, and where the language is clear and unambiguous, it must be given its plain and ordinary meaning."

Remedies

Reversal of the trial court's grant of summary judgment.Remand to the trial court for further proceedings consistent with the appellate court's interpretation of the Pension Code.

Scenario: Your employer uses a fingerprint scanner to track your work hours, and you're concerned about how they're using your fingerprint data.

Your Rights: Under Illinois' Biometric Information Privacy Act (BIPA), you have the right to be informed about the collection and use of your biometric data and to consent to it. However, this ruling suggests that if your employer only uses your fingerprint data internally and doesn't share it with any other companies, you may not have a right to sue them under BIPA.

What To Do: Review your employer's privacy policy regarding biometric data. If you believe your data has been shared with a third party without your consent, consult with an attorney specializing in privacy law to discuss your options.

Is it legal for a company to collect my fingerprint for employee timekeeping in Illinois?

It depends. Under Illinois' Biometric Information Privacy Act (BIPA), companies must inform you that they are collecting your biometric data, state the specific purpose and length of time for which it will be used, and obtain your written consent. However, this case suggests that simply collecting and using the data internally, without sharing it with a third party, may not be grounds for a lawsuit under BIPA.

This ruling applies specifically to Illinois law.

For Employees in Illinois

Employees who believe their biometric data (like fingerprints or facial scans) has been collected without proper consent may find it harder to sue their employers. This ruling requires proving that the employer shared this data with a third party, not just collected it for internal use.

For Businesses in Illinois

Businesses that collect employee biometric data for internal purposes, such as timekeeping, may face fewer BIPA lawsuits. The ruling provides some clarity by establishing that internal use alone does not constitute 'publication' to a third party, a key element for a successful claim.

Q: What is Devogelear v. Dart about?

Devogelear v. Dart is a case decided by Illinois Appellate Court on June 26, 2025.

Q: What court decided Devogelear v. Dart?

Devogelear v. Dart was decided by the Illinois Appellate Court, which is part of the IL state court system. This is a state appellate court.

Q: When was Devogelear v. Dart decided?

Devogelear v. Dart was decided on June 26, 2025.

Q: What is the citation for Devogelear v. Dart?

The citation for Devogelear v. Dart is 2025 IL App (1st) 231404. Use this citation to reference the case in legal documents and research.

Q: What is the full case name and citation for this decision?

The full case name is Devogelear v. Dart, and it was decided by the Illinois Appellate Court. The specific citation is not provided in the summary, but it is an appellate court decision affirming a lower court's ruling.

Q: Who were the parties involved in the Devogelear v. Dart case?

The parties involved were the plaintiff, Devogelear, who alleged a violation of privacy rights, and the defendant, Dart, which was accused of unauthorized collection and use of biometric data.

Q: What law was at the center of the Devogelear v. Dart lawsuit?

The lawsuit centered on the Illinois Biometric Information Privacy Act (BIPA), a state law designed to protect individuals' biometric data from unauthorized collection and use.

Q: What was the core allegation made by the plaintiff, Devogelear?

Devogelear alleged that Dart violated BIPA by collecting and using his biometric data without his informed consent, thereby infringing upon his privacy rights under the Act.

Q: What was the outcome of the case at the appellate court level?

The Illinois Appellate Court affirmed the trial court's dismissal of the case, ruling in favor of Dart. The appellate court found that Devogelear's complaint did not sufficiently state a claim under BIPA.

Q: What is the 'nature of the dispute' in Devogelear v. Dart?

The nature of the dispute was a legal disagreement over whether Dart's collection and internal use of Devogelear's biometric data violated the Illinois Biometric Information Privacy Act, specifically concerning the requirement of data publication to a third party.

Q: Is Devogelear v. Dart published?

Devogelear v. Dart is a published, precedential opinion. Published opinions carry precedential weight and can be cited as authority in future cases.

Q: What topics does Devogelear v. Dart cover?

Devogelear v. Dart covers the following legal topics: Illinois Biometric Information Privacy Act (BIPA), BIPA "publication" element, Pleading standards for statutory claims, Biometric data collection and use, Third-party disclosure of data.

Q: What was the ruling in Devogelear v. Dart?

The court ruled in favor of the defendant in Devogelear v. Dart. Key holdings: The court affirmed the dismissal of the plaintiff's BIPA claim, holding that the plaintiff failed to allege facts demonstrating that the defendant "published" biometric data to a third party.; The court clarified that a violation of BIPA's "publication" provision requires more than just the collection and use of biometric data by the entity itself; it necessitates disclosure to an unrelated third party.; The plaintiff's complaint did not contain allegations that the defendant shared or disclosed the plaintiff's biometric data with any other entity, thus failing to meet the pleading requirements for a BIPA claim.; The court distinguished this case from others where publication to a third party was adequately alleged, emphasizing the specific statutory language requiring such disclosure..

Q: Why is Devogelear v. Dart important?

Devogelear v. Dart has an impact score of 30/100, indicating limited broader impact. This decision clarifies a critical pleading requirement for BIPA claims involving the "publication" of biometric data. It signals that plaintiffs must specifically allege the transfer or disclosure of such data to a third party, rather than merely internal collection and use, to survive a motion to dismiss. This ruling may make it more challenging for plaintiffs to bring BIPA "publication" claims without concrete evidence of third-party sharing.

Q: What precedent does Devogelear v. Dart set?

Devogelear v. Dart established the following key holdings: (1) The court affirmed the dismissal of the plaintiff's BIPA claim, holding that the plaintiff failed to allege facts demonstrating that the defendant "published" biometric data to a third party. (2) The court clarified that a violation of BIPA's "publication" provision requires more than just the collection and use of biometric data by the entity itself; it necessitates disclosure to an unrelated third party. (3) The plaintiff's complaint did not contain allegations that the defendant shared or disclosed the plaintiff's biometric data with any other entity, thus failing to meet the pleading requirements for a BIPA claim. (4) The court distinguished this case from others where publication to a third party was adequately alleged, emphasizing the specific statutory language requiring such disclosure.

Q: What are the key holdings in Devogelear v. Dart?

1. The court affirmed the dismissal of the plaintiff's BIPA claim, holding that the plaintiff failed to allege facts demonstrating that the defendant "published" biometric data to a third party. 2. The court clarified that a violation of BIPA's "publication" provision requires more than just the collection and use of biometric data by the entity itself; it necessitates disclosure to an unrelated third party. 3. The plaintiff's complaint did not contain allegations that the defendant shared or disclosed the plaintiff's biometric data with any other entity, thus failing to meet the pleading requirements for a BIPA claim. 4. The court distinguished this case from others where publication to a third party was adequately alleged, emphasizing the specific statutory language requiring such disclosure.

Q: What cases are related to Devogelear v. Dart?

Precedent cases cited or related to Devogelear v. Dart: 996 N.E.2d 1150 (Ill. 2013); 10 N.E.3d 1011 (Ill. App. Ct. 2014).

Q: What specific legal standard did the appellate court apply in Devogelear v. Dart?

The court applied the pleading standard requiring a plaintiff to establish all necessary elements of a statutory claim. In this case, the court focused on whether the plaintiff sufficiently pleaded that Dart 'published' the biometric data to a third party as required by BIPA.

Q: What does 'publication' mean in the context of BIPA claims, according to this court?

According to the appellate court in Devogelear v. Dart, 'publication' under BIPA means disclosing or making biometric data available to a third party. The court clarified that mere collection and internal use of the data by the defendant itself does not constitute publication.

Q: Why did the court find that Devogelear failed to state a claim under BIPA?

The court found that Devogelear failed to state a claim because his complaint did not allege facts showing that Dart published his biometric data to any third party. The court reasoned that the collection and use by Dart alone did not meet the statutory definition of publication.

Q: What is the holding of the Devogelear v. Dart case regarding BIPA claims?

The holding is that a plaintiff must plead specific facts demonstrating that the defendant published biometric data to a third party to establish a claim under the Illinois Biometric Information Privacy Act. Internal collection and use are insufficient.

Q: Did the court consider the collection and use of biometric data by Dart itself to be a violation of BIPA?

No, the court did not consider the mere collection and use of biometric data by Dart itself to be a violation of BIPA. The court held that a necessary element for a BIPA claim, publication to a third party, was not pleaded.

Q: What is the 'burden of proof' for a plaintiff in a BIPA case like this, based on the ruling?

The burden of proof lies with the plaintiff to plead and ultimately prove all elements of a BIPA violation. In this case, the ruling emphasizes that the plaintiff must specifically plead and prove the 'publication' of biometric data to a third party.

Q: How does Devogelear v. Dart affect me?

This decision clarifies a critical pleading requirement for BIPA claims involving the "publication" of biometric data. It signals that plaintiffs must specifically allege the transfer or disclosure of such data to a third party, rather than merely internal collection and use, to survive a motion to dismiss. This ruling may make it more challenging for plaintiffs to bring BIPA "publication" claims without concrete evidence of third-party sharing. As a decision from a state appellate court, its reach is limited to the state jurisdiction. This case is moderate in legal complexity to understand.

Q: What is the practical implication of the Devogelear v. Dart ruling for individuals?

The practical implication is that individuals seeking to sue under BIPA must be able to demonstrate not only that their biometric data was collected or used without consent, but also that it was shared with or disclosed to another entity.

Q: How does this ruling affect businesses that collect biometric data in Illinois?

Businesses that collect biometric data in Illinois are likely to face fewer BIPA lawsuits if the alleged violation is solely based on internal collection and use. However, they still face liability if they share or sell such data to third parties.

Q: What kind of evidence would a plaintiff need to present to succeed in a BIPA claim after this ruling?

A plaintiff would need to present evidence showing that the defendant disclosed, sold, leased, or otherwise provided the plaintiff's biometric data to an external entity, such as another company or a vendor.

Q: Does this ruling mean BIPA is no longer enforceable?

No, the ruling does not mean BIPA is unenforceable. It clarifies a specific pleading requirement for claims alleging publication. BIPA claims can still proceed if a plaintiff can adequately plead and prove that biometric data was published to a third party.

Q: What are the potential compliance changes for companies following Devogelear v. Dart?

Companies should review their data sharing agreements and internal policies to ensure they have clear procedures for handling biometric data, especially regarding any disclosures to third parties. Documenting consent and data handling practices remains crucial.

Q: How does the Devogelear v. Dart decision fit into the broader legal landscape of privacy rights in Illinois?

This decision narrows the scope of BIPA claims by emphasizing the 'publication' element, potentially making it harder for plaintiffs to bring suits based solely on internal data collection. It highlights the importance of specific statutory language in privacy law.

Q: Are there any prior Illinois cases that established a different interpretation of 'publication' under BIPA?

While the summary doesn't detail prior cases, this decision appears to refine or clarify the interpretation of 'publication' by explicitly stating that internal use alone is insufficient. Future cases may build upon or distinguish this specific interpretation.

Q: How does this ruling compare to other state biometric privacy laws?

This ruling focuses on a specific pleading requirement unique to Illinois' BIPA. Other states may have different statutory language or judicial interpretations regarding what constitutes a violation, potentially leading to broader or narrower claims elsewhere.

Q: What was the docket number in Devogelear v. Dart?

The docket number for Devogelear v. Dart is 1-23-1404. This identifier is used to track the case through the court system.

Q: Can Devogelear v. Dart be appealed?

Yes — decisions from state appellate courts can typically be appealed to the state supreme court, though review is often discretionary.

Q: What procedural posture led to the appellate court's decision in Devogelear v. Dart?

The case reached the appellate court after the trial court dismissed Devogelear's complaint. The appellate court reviewed the trial court's decision to ensure it correctly applied the law to the facts as pleaded in the complaint.

Q: What is the significance of the trial court's dismissal being affirmed?

The affirmation means the appellate court agreed with the trial court's reasoning that the plaintiff's initial complaint lacked sufficient factual allegations to proceed with a BIPA claim, specifically regarding the element of publication to a third party.

Q: Could Devogelear have amended his complaint to try and meet the court's standard?

Potentially. If the trial court's dismissal was without prejudice, Devogelear might have had an opportunity to amend his complaint to include specific allegations of publication to a third party, if such facts existed.

Q: What does 'affirming the dismissal' mean in legal terms?

Affirming the dismissal means the appellate court upheld the lower court's decision to throw out the case. The appellate court found no legal error in the trial court's ruling that the plaintiff's complaint failed to state a valid claim.