← All tech signals
Trust signal

The Sealed Mirror

The Seventh Circuit ruled Illinois’s biometric-privacy law reaches only data a company controls, so Samsung’s face templates, kept on users’ own phones, fell outside it.

What is it?

A 2026 appeals ruling found Illinois’s biometric-privacy law does not reach a face template that never leaves a user’s device. The shield is real and precedential, but holds only while data stays local — once it reaches a company’s server, a different defence is needed.

Why now?

The Seventh Circuit decided this in August 2026, months after the same circuit made BIPA’s damages cap retroactive — two rulings, one docket, narrowing biometric-privacy exposure from opposite directions at once. No beauty company has invoked either ruling yet, but any face-scanning tool now inherits the position either way.

Who’s building it?

Courts are defining the shield; device and app makers decide whether their own architecture actually qualifies for it.

Federal courtsSamsungPhone makersScan-tool vendorsPrivacy litigators
The full read
Why now, who is building it, where the market goes, and what stays unsettled.
Get weekly →
01 · The market
Who’s in it
Courts — the Seventh Circuit, defining what counts as possessing data.
Device makers — any company whose software creates a face template, on-device or off.
Litigators — plaintiffs’ and defence counsel now arguing over where the data actually sits.
What’s at stake
Whether a scan ever reaches a server now decides a defendant’s entire legal exposure under Illinois’s law.
No beauty brand has invoked this shield in court yet.
The ruling never decided what a face scan legally is.
What’s unsettled
Whether facial-geometry data even counts as a BIPA biometric identifier.
Whether any beauty company restructures a tool to keep scans local.
How a court decides whether data truly reaches a server or stays parked.
02 · How the demand matureda progression, not a timeline
Filing
A biometric-privacy suit is filed against a device that reads a face.
Architecture
The defence turns on where the resulting face template is actually stored.
Ruling
A court decides whether keeping data on-device removes the company from the statute’s reach.
Adoption
Other defendants, and eventually other sectors, start citing the same architecture as a shield.
03 · Where the market goesthe forks, not a prediction
→Whether a beauty company is the next to invoke this shield, re-architecting a scan tool to keep images local rather than settling a suit.
→Whether a future ruling finally decides if facial geometry is a biometric identifier at all.
→Whether plaintiffs start pleading server transmission specifically, to defeat the shield at the outset.
→Whether other circuits adopt the Seventh Circuit’s control-based reading of BIPA.
The shield is real and precedential, but it protects only data that never leaves the device — and no beauty company has tested it yet.
04 · The On-Device Defence deska shield, and its edge
The Control Test
Possession under BIPA requires actual control.
Face templates parked on-device fall outside BIPA’s reach.
Mayer Brown
Control Decides Liability
The court tied liability to who controls the data.
BIPA liability needs some degree of control over the biometric data.
Mayer Brown
The Other 2026 Ruling
The same 2026 circuit capped damages too.
One recovery per person per method, not per scan, since April 2026.
FindLaw (U.S. Court of Appeals, Seventh Circuit opinion)
05 · The Wire
01
Seventh Circuit: BIPA liability needs control over the biometric data
Mayer Brown ↗
02
Seventh Circuit: BIPA damages amendment applies to pending cases
FindLaw (U.S. Court of Appeals, Seventh Circuit opinion) ↗
The panel on this signal
They agreed on
–On-device processing is now a real, appellate-tested legal shield, not just a design choice or a marketing line.
–The shield fails once data reaches a company’s own server.
–No beauty company has invoked this defence or marketed it to shoppers yet.
The biometric-privacy litigator disagreed on
–The shield sounds broad, but it rests on facts pled at the pleading stage — allege server transmission and it fails.
Know more about the method →
✦How this signal was built
01 · Panel
A Delphi panel of 4 AI analysts, each reasoning independently.
→
02 · Debate
They challenge and revise each other’s reads over two rounds.
→
03 · Evidence
Every claim is tied to a cited, linked source on The Wire.
→
04 · Synthesis
A moderator writes it into one read, disagreement and all.