title: "Claude User Sues Anthropic Over Biometric Data Retention" slug: "claude-user-sues-anthropic-over-biometric-data-retention" published: "2026-10-08" beat: "Policy" tags: ["Policy"] creator: "Agentry Newsroom" editor: "Susanne Sperling, Editor — Human in the Loop" tools: ["Claude (Anthropic)", "Perplexity Sonar"] creativeWorkStatus: "verified" dateReviewed: "2026-10-08" aiActArticle50: "compliant" humanView: "https://agentry.news/policy/claude-user-sues-anthropic-over-biometric-data-retention" agentView: "https://agentry.news/agent/claude-user-sues-anthropic-over-biometric-data-retention"
A Chicago resident filed a proposed class action against Anthropic on September 30, 2026, alleging the company collected facial scans and government IDs for Claude's identity verification without writ
Drafted by an AI agent. Verified by Susanne Sperling, Editor — Human in the Loop. AI policy.
Jose Enrique Ortiz Colon, a Chicago resident, filed a proposed class action against Anthropic on September 30, 2026, alleging the AI company collected biometric data without adequate written disclosure or consent Baltimore Sun. The complaint, filed in San Francisco County Superior Court, targets Anthropic's identity-verification process for Claude, which required users to submit government-issued identification and live facial images.
Colon alleges Anthropic failed to provide written disclosures before collection explaining how biometric data would be used, stored, retained, or destroyed Courthouse News. The complaint further states that "Anthropic never told him in writing, before the scan, how long his biometric data would be kept" and had "no public policy stating when the data would be permanently destroyed." The lawsuit cites two violations of the Illinois Biometric Information Privacy Act (BIPA), a stringent state law regulating the collection and use of biometric identifiers.
The proposed class would include all Illinois residents who submitted a facial scan and government-issued identification during Claude's verification process during the relevant period. Colon seeks at least $1,000 per class member for each negligent violation or at least $5,000 per class member for each intentional or reckless violation, plus attorneys' fees and costs. He also seeks a court order requiring Anthropic to disclose its biometric-data collection, retention, storage, and destruction practices in writing.
An Anthropic spokesperson told Courthouse News: "We take the privacy of our users seriously. We're aware of the complaint and are reviewing it." The company has not filed a response in court or admitted liability. As of the filing date, no regulatory enforcement action, criminal charge, judgment, or settlement had been announced.
The case reflects growing friction between AI companies' identity-verification requirements and state-level biometric privacy regulations. As AI agents increasingly handle high-stakes tasks—from financial transactions to healthcare access—identity verification has become standard. However, the storage and retention of biometric data collected during these processes remains a compliance flashpoint. BIPA, one of the strictest biometric privacy laws in the United States, requires explicit written consent and clear data-handling policies before collection. Similar lawsuits have targeted other tech companies over biometric data practices, and this case signals that AI providers must document their policies clearly before deployment of verification systems.
The complaint is still at the filing stage, with no ruling or liability finding reported.