As part of the larger trend of invasion of privacy claims asserted by employees or consumers against businesses, several states have recently passed legislation that sets forth requirements for the collection, storing and dissemination of biometric information such as fingerprints, voice recordings and even keystroke patterns. See, e.g., California Civil Code Sections 1798.100, 1798.140(b). Similar statutes have been enacted in Illinois, Washington and New York.
As claims arising from the collection and disclosure of biometric information proliferate, businesses faced with lawsuits will turn to their liability insurance policies. A recent case from a U.S. district court in Illinois addressed two key issues: whether mere “procedural violations” of a statute governing the collection of biometric information triggered the application of an invasion of privacy exclusion; and whether a company’s commitment in its employee handbook to comply with applicable laws and regulations triggered an employment practices liability insurer’s duty to defend given allegations in the underlying actions that the employer had violated the underlying statute.
In Twin City Fire Insurance Co. v. Vonachen Services, Inc., 2021 WL 4876943 (C.D. Ill. Oct. 19, 2021), the court addressed coverage for two class actions arising under the Illinois Biometric Privacy Act. Vonachen Services was sued in two putative class actions alleging that it used, collected and indefinitely stored its employees’ fingerprints without informed consent and failed to inform its employees of the specific purpose and length of time for which their biometric identifiers or information would be collected, stored and used. More particularly, the complaints alleged Vonachen violated BIPA when it required employees to use a fingerprint-based timekeeping system without obtaining informed consent, failed to inform employees of the risks associated with that data collection including whether it was disclosed to third parties, and failed to maintain and adhere to a public retention policy.
Vonachen was insured under a liability policy issued by Twin City that had both D&O and EPL coverage parts. Vonachen tendered the two claims to Twin City, which issued a coverage denial letter and then filed a declaratory relief action. Vonachen and Twin City filed cross-motions for summary judgment. In ruling on those motions, the court found that while Twin City did not have a duty to defend Vonachen based on the D&O coverage, it did have a duty to defend under the EPL coverage.
The court first considered the D&O coverage part. Twin City did not contest that the allegations in the two complaints fell within the D&O coverage. Instead, it claimed that two exclusions — the “insured vs. insured” and “invasion of privacy” exclusions — operated to bar coverage.
The court’s discussion concerning the invasion of privacy exclusion is especially instructive. That exclusion provided that Twin City was not obligated under the policy’s entity coverage to pay any “Loss … in connection with any claim based upon, arising from, or in any way related to any actual or alleged … invasion of privacy”.
Vonachen argued that the underlying complaints merely asserted “procedural violations of BIPA” that did not constitute invasion of privacy. Vonachen asserted that the underlying actions did not allege any disclosure, release or misuse violations, but instead only alleged procedural violations where the plaintiff-employees “did not face an appreciable risk of harm to their privacy interests”.
The district court disagreed, noting that the Illinois courts had concluded that BIPA codifies persons’ right to privacy in their biometric identifiers and information. See West Bend Mutual Insurance Company v. Krishna Schaumburg Tan, Inc., 2021 IL 125978, (Ill. 2021); Rosenbach v. Six Flags Ent. Corp. 129 N.E. 3d 1197, 1206 (Ill. 2019) (holding that individuals possess a right to privacy in and control over their biometric identifiers and biometric information). In sum, the court rejected Vonachen’s argument that BIPA is violated only if the biometric information is collected surreptitiously or disseminated to third parties. For this reason, the court determined that there was no coverage for the underlying claims under the D&O part.
While the court declined to find coverage under the policy’s D&O part, it determined that there was coverage under the EPL part. In this regard, an “employment practices wrongful act” was defined to include the “breach of any oral, written or implied employment contract, including, without limitation, any obligation arising from a personnel manual, employee handbook or policy statement.” According to the court, this language assumes that a personnel manual, employee handbook or policy statement can give rise to a contractual obligation.
Vonachen successfully argued that its employee handbook required employees to use the designated timekeeping system or face penalties of noncompliance, including termination. It also emphasized that the handbook stated that Vonachen “will comply with all applicable laws and regulations.” Based on these provisions, Vonachen’s argument concerning coverage was that, because the handbook required it to use the timekeeping system, and because Vonachen had obligated itself in the handbook to comply with all laws associated with that system, including BIPA, Twin City’s duty to defend was triggered based on the alleged BIPA violations alleged in the underlying complaint.
The district court agreed. In finding Twin City had a duty to defend, the court emphasized that under the policy Twin City had agreed to provide coverage arising from the breach of any obligation arising from an employee handbook. Making no finding about whether Vonachen’s employee handbook was in fact a contract, the court nonetheless held that in the context of the duty to defend, the complaints’ allegations were sufficient to trigger Twin City’s obligation to defend Vonachen in the two lawsuits.
This article was originally published in the Daily Journal.
- Partner
Peter S. Selvin, Chair of ECJ's Insurance Coverage and Recovery Department, is a business trial lawyer with more than 30 years of experience. While he specializes in the areas of insurance coverage and international litigation, his ...
Subscribe
Recent Posts
- SB 1340 Allows Enforcement Of Local Employment Discrimination Laws | By: Kelly O. Scott
- Landlord: Look Out and Take Notice | By: Geoffrey M. Gold
- New Cal/OSHA Indoor Heat Standards Require New Prevention Measures and Written Prevention Plan | By: Joanne Warriner
- California Bans All Plastic Bags at Grocery Stores | By: Pooja S. Nair
- FTC’s Nationwide Ban on Non-Compete Agreements Stopped by Federal Court Ruling | By: Cate A. Veeneman
- Can the IRS Obtain a Receiver to Help Collect Taxes Owed? | By: Peter Davidson
- Severing Unconscionable Terms in Employment Arbitration Agreements | By: Jared W. Slater
- Can You Collaterally Attack a Receiver’s Appointment?
- Changes to PAGA Create Opportunities for Employers to Minimize Penalties | By: Tanner Hosfield
- Overbroad Employment Arbitration Agreements Will Not Be Enforced in California | By: Jared W. Slater
Blogs
Contributors
Archives
- November 2024
- October 2024
- September 2024
- August 2024
- July 2024
- June 2024
- May 2024
- April 2024
- March 2024
- February 2024
- January 2024
- December 2023
- November 2023
- October 2023
- September 2023
- August 2023
- July 2023
- June 2023
- May 2023
- April 2023
- March 2023
- February 2023
- January 2023
- December 2022
- November 2022
- October 2022
- September 2022
- August 2022
- July 2022
- June 2022
- May 2022
- April 2022
- March 2022
- February 2022
- January 2022
- December 2021
- November 2021
- October 2021
- September 2021
- August 2021
- July 2021
- June 2021
- May 2021
- April 2021
- March 2021
- February 2021
- January 2021
- December 2020
- November 2020
- October 2020
- September 2020
- August 2020
- July 2020
- June 2020
- May 2020
- April 2020
- March 2020
- February 2020
- January 2020
- December 2019
- November 2019
- October 2019
- September 2019
- August 2019
- July 2019
- June 2019
- May 2019
- March 2019
- February 2019
- January 2019
- November 2018
- October 2018
- September 2018
- August 2018
- July 2018
- June 2018
- May 2018
- April 2018
- February 2018
- January 2018
- December 2017
- November 2017
- October 2017
- September 2017
- August 2017
- July 2017
- June 2017
- May 2017
- April 2017
- March 2017
- February 2017
- January 2017
- December 2016
- November 2016
- October 2016
- September 2016
- August 2016
- July 2016
- June 2016
- May 2016
- April 2016
- January 2016
- December 2015
- November 2015
- October 2015
- September 2015
- August 2015
- July 2015
- June 2015
- May 2015
- April 2015
- March 2015
- February 2015
- January 2015
- December 2014
- November 2014
- October 2014
- September 2014
- August 2014
- July 2014
- June 2014
- May 2014
- April 2014
- March 2014
- February 2014
- January 2014