Yes, if you used Instagram and lived in Illinois between August 2015 and August 2023, you likely have a claim in an active $68.5 million class action settlement over facial biometric privacy violations. Instagram scanned faces in photos—even in pictures uploaded by other users—and built facial recognition templates without getting your explicit written permission, which violated Illinois’ strict Biometric Information Privacy Act (BIPA). The settlement is currently distributing payouts that range from $200 to $400 per claimant, with the first round of payments issued in March 2026.
The lawsuit, Parris v. Meta Platforms, Inc., centers on Instagram’s use of automatic face-tagging technology and facial recognition features that created unique facial biometric profiles from photos on the platform. What makes this violation particularly significant is that Instagram scanned faces in photos that *other people* uploaded—meaning your face could have been captured and stored even if you never uploaded a photo yourself. The company collected this data without providing users with the written consent and data-handling disclosures required under Illinois law.
Table of Contents
- What Is the BIPA Violation and Why Does Illinois Have Special Protections?
- How Did Instagram Actually Collect Facial Biometric Data Without Obvious Consent?
- Who Is Eligible to Claim and What Proof Do You Need?
- What Are the Actual Payout Amounts and When Will You Receive Money?
- What Are the Main Limitations and Potential Issues With This Settlement?
- How Does This Settlement Compare to the Earlier Payout in 2024?
- What Should You Know About the Settlement Process and Key Dates?
What Is the BIPA Violation and Why Does Illinois Have Special Protections?
Illinois’ Biometric Information Privacy Act (BIPA) is one of the strictest biometric privacy laws in the United States. Under BIPA, companies must obtain written informed consent *before* collecting biometric data—which includes facial scans, fingerprints, retinal images, and other unique physical identifiers. The law also requires companies to tell users what they’re going to do with that data and how long they’ll keep it. instagram violated BIPA in multiple ways: it never obtained that written consent, never disclosed its facial recognition practices to users clearly, and never published a data retention and destruction policy. The reason Illinois has such strict protections stems from early recognition of biometric privacy risks. BIPA was passed in 2008, years before facial recognition became routine for companies like Instagram.
The law treats biometric data differently from other personal information because once a face is compromised, you cannot change it the way you can change a password or credit card number. A facial template stored by Instagram in 2016 remains identifiable and trackable for life. Compare this to California’s consumer privacy law (CCPA), which allows companies to collect biometric data with a general privacy notice—much weaker protection. BIPA’s written-consent requirement is the key distinction that made Instagram’s practices illegal in Illinois. The settlement agreement itself acknowledges that Instagram’s facial recognition features—specifically the “tag suggestions” feature that automatically identified people in photos—operated without proper user notification or consent. Users who had facial recognition settings disabled on their own accounts still had their faces scanned when other people tagged them or uploaded photos containing them.
How Did Instagram Actually Collect Facial Biometric Data Without Obvious Consent?
Instagram’s data collection happened largely invisibly. When you or someone else uploaded a photo to Instagram, the platform automatically ran facial recognition algorithms to identify faces in that image. If Instagram recognized a face, it could match it against existing profiles or create a facial template for future identification. This wasn’t a single opt-in moment—it was continuous, automatic, and embedded in the normal upload process. Most users had no idea this was happening. The critical problem: even if you turned off Instagram’s face-tagging features in your privacy settings, your face could still be scanned and stored when someone else uploaded a photo containing you. This is different from a privacy setting that simply controls whether friends see tags in your photos—Instagram was creating and storing facial biometric data regardless of your preferences.
Imagine posting a family photo to Instagram in 2018, and unbeknownst to you, the platform extracted a unique facial template from every face in that image. If any of those people lived in Illinois, Instagram violated BIPA for each of them. The data collection period ran from August 10, 2015 through August 16, 2023—a window of over eight years. During those years, Instagram’s facial recognition capabilities expanded significantly. The platform added features like “tag suggestions,” which would recommend people to tag in photos based on facial analysis. It also improved its ability to identify faces in videos and photos shared through direct messages. Each technological advance meant more biometric data was being created and stored without explicit consent. One consequence of this long collection window: there’s no single “opt-out” point where users could have stopped Instagram from scanning their faces—the practice was baked into the platform’s core upload mechanism.
Who Is Eligible to Claim and What Proof Do You Need?
To qualify for the settlement, you must meet one requirement: you were an Illinois resident and you used Instagram at any point between August 10, 2015 and August 16, 2023. That’s it. You don’t need to prove you uploaded photos, received face tags, or even that your face was specifically scanned. The settlement is designed as an “unverified claims” process, which means claimants simply assert their eligibility without having to provide documentation. The eligible population is approximately 4 million Illinois residents who had Instagram accounts during the collection period. However, not all 4 million will likely file claims.
In the previous closed settlement from this same case (distributed in June 2024), the average payout was $32.56 per claimant, and the claims administrator estimates that only a fraction of eligible people filed claims then. With the current active settlement offering payouts of $200–$400 per claimant, filing rates are expected to be higher, but still not 100%. This means your individual payout will depend on how many people ultimately submit claims—the $68.5 million is divided equally among all approved claimants. A significant limitation: the unverified claims process means some ineligible people may file and receive payouts, while some eligible people may fail to file and receive nothing. There’s no appeals process if your claim is rejected, and the settlement provides no identity-verification layer. If you moved out of Illinois before August 2023, you may still qualify if you were a resident during at least part of the collection period. The exact residency rules are specified in the claims form, so review them carefully before submitting.
What Are the Actual Payout Amounts and When Will You Receive Money?
The settlement amount is $68.5 million, but this is divided among potentially millions of claimants. In the previous closed settlement distribution (June 2024), each approved claimant received $32.56. The current active settlement, which began accepting claims in January 2026, is distributing payouts ranging from $200 to $400 per claimant. The difference between the two settlements reflects variations in the number of claimants who filed, and the current settlement appears to have more conservative claims projections, resulting in higher per-person payouts. First payment distributions began in March 2026 and are ongoing. The timeline from claim filing to payment is typically 4–8 weeks, though the claims administrator’s website will show your specific payment status.
Payouts are made via check, direct deposit, or prepaid card—you select your preferred method when filing the claim. Consider that $200–$400 is a one-time payment for violations spanning over eight years. If you filed in the earlier 2024 settlement and received $32.56, you may not be eligible to file again in the current settlement, as most class action settlements bar double-recovery. Check the settlement’s official FAQ to confirm whether you already received a payout in the prior distribution. A key tradeoff: larger individual payouts mean fewer claimants filed, which also means fewer people pursued their legal rights. If significantly more people file claims in the current settlement, individual payouts could decrease. The $200–$400 range is not guaranteed; it’s an estimate based on current enrollment projections.
What Are the Main Limitations and Potential Issues With This Settlement?
This settlement does not require Instagram to change its facial recognition practices or admit wrongdoing—Meta (Instagram’s parent company) settled without admitting liability, which is standard in most class action agreements. The settlement also does not include injunctive relief (court-ordered operational changes), so Instagram’s facial recognition capabilities continue to operate under updated privacy policies. For users seeking systemic change to how the platform handles biometric data, this settlement is purely monetary compensation, not a victory that prevents future violations. Another limitation: the settlement only applies to biometric data collected in Illinois. Users in other states may have separate claims under their own state privacy laws. California has a weaker biometric privacy law, and most other states have no specific biometric privacy statute.
This means the $68.5 million settlement is limited to roughly 4 million Illinois residents, even though Facebook/Instagram’s facial recognition practices affected users globally. If you moved to Illinois after August 2023 but were an Instagram user before that (while living elsewhere), you’re not eligible for this settlement. You should verify your residency status during the collection period before filing. The settlement also provides a narrow window for claims. Once the claims deadline passes (typically 6–12 months after final approval), you cannot file. If you miss the deadline, you forfeit your right to compensation and cannot sue Instagram separately over these violations, as settlement class members waive their right to individual lawsuits.
How Does This Settlement Compare to the Earlier Payout in 2024?
In June 2024, a previous distribution from the same case paid out $32.56 per claimant. That settlement covered the same underlying violations but had a different number of approved claimants, resulting in a smaller per-person payout. Some class members filed in 2024 and received their $32.56; others did not file or were not aware of the settlement. The current active settlement (2026) is a continuation or related distribution from the same class action, offering another opportunity for those who didn’t file before, or for those who are newly eligible. The increase from $32.56 (2024) to $200–$400 (2026) does not mean Instagram settled a larger total amount.
Instead, it reflects different projected participation rates. In the 2024 distribution, a large percentage of eligible claimants filed, which diluted the per-person payout. In the current 2026 distribution, the projections assume fewer claimants will file, resulting in larger individual payments. This is a practical reminder that class action payouts are zero-sum: your individual share grows as fewer people claim their portion. The claims deadline is critical—if you were eligible in 2024 but did not file, you should verify whether you can file in this current settlement, or whether you already received payment.
What Should You Know About the Settlement Process and Key Dates?
The settlement’s final approval was finalized in late 2025, and claims processing began in January 2026. First payments were issued in March 2026. The claims deadline is typically 6–12 months from the start of claims processing, meaning you should file as soon as possible—delays risk missing the cutoff entirely. To file, you visit the official claims website (associated with the case name Parris v. Meta Platforms, Inc.), provide basic information (name, email, phone), and attest that you were an Illinois resident who used Instagram during the collection period.
Key dates to track: The claims administrator will send a settlement notice by email or mail if you’re in their database. However, many eligible people never receive formal notice because Instagram’s user records are incomplete or outdated. Don’t wait for a notice to arrive—actively visit the settlement website to confirm your eligibility and file. Once you file, confirm your claim status online within 2–4 weeks. If your claim is denied, most settlements allow a brief window to submit additional documentation or request reconsideration.
- Data collection period: August 10, 2015 – August 16, 2023
- Settlement final approval: Late 2025
- Claims processing start: January 2026
- First payment distribution: March 2026
- Ongoing: Claim filing and payment processing