A Surge in Illinois Genetic Information Privacy Act (GIPA) Claims Poses Threat to Employers
Privacy, Cyber & AI Decoded Alert | 2 min read
Mar 5, 2024
The Illinois Genetic Information Privacy Act (“GIPA”) was enacted in 1998, and although minimal litigation followed in the years following its enaction, we are now seeing a significant surge in litigation similar to that experienced under the Illinois Biometric Information Privacy Act (“BIPA”).
Like BIPA, plaintiffs asserting claims under GIPA have suffered little or no actual damages. However, they attempt to recover significant statutory damages on their behalf and other class members like them.
Employers are the most recent targets of GIPA class actions due to their requests for medical histories from current and/or prospective employees.[1] GIPA applies to employers, employment agencies, labor organizations, and licensing agencies that directly or indirectly “solicit, request, require, or purchase genetic testing or genetic information of a person or a family member of the person, or administer a genetic test to a person or a family member of the person as a condition of employment, employment application, labor organization membership, or licensure.”[2] Plaintiffs’ attorneys have filed dozens of lawsuits alleging that requests for family medical histories constitute a solicitation or request for genetic information under GIPA.
The majority of complaints have only been filed within the past year. Therefore, employers and their vendors, such as healthcare facilities and insurance providers, must be aware of the potential risks involved with requesting information that may fall under GIPA. Similar to BIPA, GIPA allows for a private right of action. GIPA allows an aggrieved party to recover statutory damages of $2,500 per negligent violation and $15,000 per intentional or reckless violation, plus reasonable attorneys’ fees and costs.
In the ever-changing landscape of privacy litigation and the growing number of complaints filed under GIPA, employers need to choose a law firm with experience in handling these kinds of matters. Hinshaw has handled thousands of consumer class actions and individual suits wherein the plaintiff seeks recovery for statutory damages and attorneys’ fees. We have defended these cases at all levels of the state and federal court system and recently obtained a favorable decision for a client before the Illinois Supreme Court in a case involving alleged BIPA violations.
[1] Other entities such as a DNA company called Sequencing, LLC have been facing suits related to their handling of genetic information. Sequencing, LLC had a class certification motion granted against it for a GIPA claim. Melvin v. Sequencing, Ltd. Liab. Co., 344 F.R.D. 231, 237 (N.D. Ill. 2023).
[2] 410 ILCS 513/25(c)(1)
Featured Insights

Webinar
Apr 29, 2026
When a Cyber Breach Hits: Cybersecurity, Privacy, and Compliance

In The News
Apr 24, 2026
Michael Dowell Reviews New PBM Reform Reshaping Pharmacy Reimbursement

Lawyers for the Profession® Alert
Apr 21, 2026
When Does a Client’s Duty to Investigate Begin? Lessons from a Time-Barred Malpractice Case

Press Release
Apr 20, 2026
Tom Kuzmanovic Selected for BizTimes Milwaukee 2026 Notable Leaders in Law

Press Release
Apr 17, 2026
André Sesler Elected to the Board of Trustees of the University of Florida Law Center Association

Hinshaw Alert
Apr 17, 2026
Q&A: How to Submit Your IEEPA Refund Claim as CAPE Portal Launches April 20, 2026

In The News
Apr 14, 2026
Bloomberg Law Recaps Panels Presented at Hinshaw's 25th Anniversary LMRM Conference

In The News
Apr 14, 2026
Michael Dowell Discusses the Uncertain Impact of Growing Medicare Advantage Scrutiny

Privacy, Cyber & AI Decoded Alert
Apr 9, 2026
6 Key Takeaways From the IAPP 2026 Global Summit for Privacy Compliance Professionals






