Illinois Video Surveillance Laws

Illinois video surveillance law can create significant compliance risk for security teams. Camera deployments in Illinois require careful review before installation or reconfiguration because compliance can turn on camera placement and microphone status. Systems that process biometric data require a separate review.

How Illinois Regulates Video and Audio Recording

Video-only cameras and audio-capable cameras fall under separate statutory tracks in Illinois. Video-only cameras are addressed by 720 ILCS 5/26-4, which prohibits recording without consent in specified private locations, such as restrooms, locker rooms, hotel bedrooms, and another person's residence. In Illinois, video-only cameras without audio fall outside the consent requirement under state eavesdropping law.

Audio-capable cameras require more caution because the Illinois Eavesdropping Act can apply. The Illinois Eavesdropping Act at 720 ILCS 5/14-2 requires all-party consent for surreptitious recording of private conversations. Under 720 ILCS 5/14-2, both elements must be present for a violation: the recording must be covert, and the audio must capture a conversation participants intended to be private.

Any IP camera with an active microphone should therefore be treated as a dual-regime device. Such a camera can fall under both statutes at the same time, and security directors should audit camera configurations to confirm whether audio capture is active.

Where Cameras Are Permitted and Prohibited

Illinois criminal law flatly prohibits cameras in a named set of private locations. Section 26-4 designates prohibited locations by name rather than relying on a general privacy standard. Cameras are criminally prohibited in private places such as restrooms, locker rooms, changing rooms, tanning beds and tanning salons, hotel bedrooms, and residential dwelling units. Under 720 ILCS 5/26-4, placing a device with intent to record is a Class A misdemeanor, and actual recording is a Class 4 felony.

Under 720 ILCS 5/26-4, statutory exemptions are limited. They cover law enforcement investigations and correctional security, with a separate exemption for credentialed news media with authority permission.

Section 26-4's list of prohibited locations is phrased by category and does not separately mention building common areas such as lobbies or hallways. The statute defines "residence" in §26-4(e).

Locations That Require Additional Analysis

Break rooms, private offices, and workplace medical rooms fall outside Section 26-4's express location bans and still require additional analysis.

BIPA and Biometric-Enabled Surveillance

The Biometric Information Privacy Act (BIPA) applies when a video system extracts biometric identifiers such as face geometry templates. BIPA (740 ILCS 14) applies whenever a video system extracts biometric identifiers, most commonly face geometry templates generated by face-matching analytics.

This compliance analysis covers systems that extract biometric identifiers from video.

BIPA Core Obligations for Security Teams

Before collection begins, BIPA requires written notice and a written release. It also requires a public retention policy. Before collecting any biometric identifier, Section 15(b) requires written notice stating the specific purpose and retention term, plus a written release from the subject. Section 15(a) independently requires a publicly available written retention and destruction policy. Biometric data must be permanently destroyed when the collection purpose has been satisfied or within three years of the individual's last interaction, whichever occurs first.

Sharing biometric data with vendors or integrators is also restricted. Section 15(d) prohibits disclosure of biometric data to third parties, including analytics vendors and system integrators, without the subject's consent, a state or federal law requirement, or a valid warrant or subpoena.

Workplace Surveillance Considerations

Ordinary workplace video surveillance in Illinois is governed by the cited criminal statutes, including no cameras in restrooms or locker rooms and no unconsented audio of private conversations, and by BIPA where biometric processing is involved. The statutes cited in this article impose no general employee notice rule for ordinary workplace video surveillance.

The Right to Privacy in the Workplace Act (820 ILCS 55) permits employers to monitor their own electronic equipment. It creates no video surveillance notification mandate.

Employers should review no-recording policies on employer-issued devices in light of changes to employee protections for recording crimes of violence on employer-issued devices.

Notice and Signage Requirements

Illinois generally does not require posted signs for standard commercial video surveillance. Biometric-enabled systems require individual written notice and consent under BIPA.

For audio recording of private conversations, all-party consent remains required even when posted surveillance notice makes recording open rather than surreptitious under the Eavesdropping Act.

Data Retention and Breach Obligations

Biometric data and ordinary footage follow different retention rules. BIPA's destruction timelines, described above, govern biometric data.

For private-sector operators, standard surveillance-footage retention is governed by internal policy and litigation hold obligations, along with any applicable industry regulations.

Illinois breach-notification law can apply when compromised surveillance data contains personal information. The Personal Information Protection Act (815 ILCS 530) requires breach notification to affected Illinois residents when personal information is compromised. Breaches affecting more than 500 residents require notification to the Illinois Attorney General.

Penalties and Enforcement Risk

Illinois surveillance violations can trigger both criminal exposure and significant civil liability. Criminal penalties for eavesdropping violations can begin at a Class 4 felony and escalate for later violations. Under 720 ILCS 5/26-4, recording in prohibited locations carries a Class 4 felony classification. Under 720 ILCS 5/26-4, disseminating footage from a prohibited recording is a Class 3 felony.

BIPA Liability Exposure

BIPA creates private-litigation risk even without proof of actual harm. BIPA provides a private right of action, and 740 ILCS 14 sets statutory damages of $1,000 per violation for negligent violations and $5,000 per violation for intentional or reckless violations.

Historical biometric deployments can remain relevant to current exposure. Earlier biometric deployments without proper compliance may still present class-action risk.

A Practical Compliance Baseline for Illinois

Illinois surveillance compliance turns on system design choices that security teams can verify before rollout. A disciplined review of camera placement and microphone status helps teams apply the right legal framework. Biometric processing belongs in the same review before system changes and during routine operations.

Frequently Asked Questions

What are the specific BIPA requirements for using facial recognition cameras in an Illinois workplace, and how do I obtain proper employee consent?

Provide employees with a standalone written document explaining the specific purpose of facial recognition, how long templates will be stored, and when they will be destroyed. Obtain a separate signed release from each employee before activating the system.

Can I use security cameras with built-in microphones in Illinois if I disable the audio recording feature?

Yes. When audio recording is disabled, the camera functions as video-only and avoids the Illinois Eavesdropping Act's all-party consent requirement. Document the disabled status in your system configuration logs to demonstrate compliance during audits.

What are the penalties for installing a security camera in a prohibited location like a break room or private office in Illinois?

The applicable statute should be reviewed directly to determine which locations, if any, are specifically prohibited.