Instagram and its parent company Meta agreed to pay $68.5 million to settle a class action lawsuit over unauthorized collection of facial biometric data from millions of users’ accounts. The settlement addresses Parris v. Meta Platforms, Inc., which alleged that Instagram collected facial geometry data from photo tagging features between August 10, 2015, and November 2021 without obtaining the written consent required by Illinois law.
If you had an Instagram account in Illinois during that period, you may be eligible to receive compensation ranging from $32.56 in initial distributions to $200–$400 in later payouts, depending on when your claim was processed. The settlement specifically targeted approximately 4 million Illinois users whose accounts were active between August 10, 2015, and August 16, 2023—the claims period cutoff. The final approval of the settlement occurred in 2024, following an originally scheduled hearing in October 2023 that was pushed to November 21, 2023. This settlement represents one of the most significant privacy enforcement actions against a major social media platform and has already begun distributing funds to eligible claimants.
Table of Contents
- How Instagram Collected Facial Geometry Data Without Written Consent
- The $68.5 Million Parris Settlement: Key Details and Timeline
- Eligibility for the Instagram Biometric Settlement
- Settlement Payouts: From Initial Distributions to Recent Payments
- Illinois BIPA and Why This Violation Mattered
- Photo Tagging and Auto-Tag Features: How the Violation Occurred
- The Separate Mental Health Litigation Against Instagram Meta
- Frequently Asked Questions
How Instagram Collected Facial Geometry Data Without Written Consent
When you uploaded a photo to Instagram and tagged people in it, the platform automatically created a mathematical representation of faces in the image. This facial geometry data is distinct from storing actual photographs—it’s a numerical fingerprint of facial features extracted through Instagram’s photo tagging and auto-tag suggestion features. Instagram did not ask users for explicit written permission before collecting and storing this data, which is what triggered the legal violation. Instead, users simply accepted Instagram’s terms of service, which did not clearly disclose this specific practice.
This type of biometric data collection is regulated under the Illinois Biometric Information privacy Act (BIPA), a landmark state law that requires companies to obtain written consent before collecting, storing, or using biometric information like fingerprints, facial geometry, iris scans, or voiceprints. Instagram’s collection of facial geometry without written consent directly violated this requirement. The practice continued from August 10, 2015, until Instagram disabled facial recognition features in November 2021 in response to regulatory pressure and public concern about facial recognition technology. By that time, millions of user accounts had been scanned and stored without consent.
The $68.5 Million Parris Settlement: Key Details and Timeline
The settlement in Parris v. meta Platforms, Inc. requires Meta to pay $68.5 million to resolve claims that it violated Illinois law by collecting facial biometric data without consent. The final approval hearing, originally scheduled for October 11, 2023, was rescheduled to November 21, 2023, and the settlement closed in 2024. This means that claim periods have already passed and payments are currently being distributed to eligible claimants.
The settlement fund is being divided among approximately 4 million affected Illinois users, with distribution amounts varying based on when claims were filed and processed. The initial wave of distributions resulted in an average payout of $32.56 per claimant when the settlement closed in 2024. However, the settlement has continued to distribute additional funds to late filers and newly approved claims. Beginning in early 2026, some claimants started receiving significantly larger amounts, ranging from $200 to $400 per claimant. These later distributions became possible because not all eligible users filed claims during the initial claim period, which meant more funds were available to allocate to subsequent rounds of claimants. This demonstrates an important quirk of class action settlements: if eligible members don’t file claims, remaining members who do file can receive larger individual payouts.
Eligibility for the Instagram Biometric Settlement
You are potentially eligible for the Instagram biometric settlement if you had an active Instagram account while residing in Illinois at any point between August 10, 2015, and August 16, 2023. The settlement only covers users in Illinois because the violation was based on the Illinois Biometric Information Privacy Act (BIPA), which is a state-specific law. Users in other states would not have the same legal protections under BIPA, and therefore this settlement does not apply to them. To verify your eligibility, you need to have held an Illinois residence and maintained an active Instagram account during the specified time window.
If you meet the residency and account requirements, you could have filed a claim either directly through the settlement administrator’s website or by submitting a claim form during the official claim period. The deadline for filing claims has passed since the settlement closed in 2024, but some settlement administrators continue to accept late claims and process them with the understanding that payouts may be delayed. This creates a complex situation: while new claims can sometimes still be filed and accepted, they may receive smaller per-person payouts than earlier filers because the remaining settlement funds must be divided among a larger pool of claimants. If you missed the original deadline, it’s worth contacting the settlement administrator to ask about your options, though you should verify any contact information directly rather than relying on third-party websites.
Settlement Payouts: From Initial Distributions to Recent Payments
When the settlement first closed in 2024, claimants who had filed their claims received an average individual payment of $32.56. This relatively modest amount reflected the need to divide the $68.5 million settlement fund among millions of eligible users, most of whom had filed their claims promptly. However, as is common in large class action settlements, not every eligible member filed a claim. Over time, as the claims period extended and additional claimants were approved, the settlement was able to make larger per-person distributions. By early 2026, newly approved claimants and those in subsequent distribution rounds began receiving $200 to $400 per claim.
For comparison, this payout structure is fairly typical in biometric privacy settlements. Some settlements have paid out higher per-person amounts when fewer claimants came forward, while others have had lower amounts due to larger claim volumes or more serious fraud-related reductions to the settlement fund. In the Instagram case, the scale of the affected user base—4 million people—meant that even substantial settlements require apportionment across a large number of claims. The delayed distributions in 2026 represent the settlement’s attempt to be more generous to late filers, which incentivizes even users who missed the original deadline to eventually come forward. If you are still waiting for a payout or believe you filed a claim but haven’t received payment, the settlement administrator is typically the only authoritative source for claim status updates.
Illinois BIPA and Why This Violation Mattered
The Illinois Biometric Information Privacy Act (BIPA) is one of the most stringent biometric privacy laws in the United States, and it’s the legal foundation for this entire settlement. Under BIPA, any company that collects, uses, stores, or discloses biometric information—which includes facial geometry, fingerprints, iris scans, and voiceprints—must first obtain written consent from the individual. The law also requires companies to provide a clear, conspicuous notice about their biometric data practices and to explain how long the data will be retained and how it will be destroyed. Instagram’s collection of facial geometry data through its tagging features violated each of these requirements. What makes BIPA particularly powerful is that it allows consumers to sue for damages even if they cannot prove they suffered a concrete injury from the violation.
This is called a “private right of action,” and it’s rare in federal privacy law. Instead of requiring users to prove they were harmed by facial recognition data collection, BIPA says that the violation itself—the unauthorized collection without written consent—is the harm. This legal framework is why the $68.5 million settlement was possible. Without BIPA, Instagram might have argued that collecting facial geometry data was a harmless technical practice that didn’t injure anyone. But BIPA treats biometric collection as inherently invasive and requires consent regardless of whether anyone suffered a direct, measurable injury. This is why Instagram disabled its facial recognition features in November 2021: the company recognized that regulatory attention and legal liability made the practice untenable.
Photo Tagging and Auto-Tag Features: How the Violation Occurred
Instagram’s photo tagging feature invited users to manually tag friends and acquaintances in images by clicking on a face and selecting a name from their friend list. This manual tagging was not itself the violation. However, Instagram also offered an “auto-tag” or “suggested tags” feature that used facial recognition technology to automatically detect faces in images and suggest which friends might be in the photo based on facial geometry data the platform had already collected. To power this feature, Instagram had built a database of facial geometry representations derived from millions of user photos over years of tagging activity.
The violation occurred because users never explicitly consented to have their faces converted into facial geometry data and stored in this database. When a user posted a photo containing other people, those other people did not know their faces were being scanned and stored as mathematical data. When a user’s own photo was tagged by someone else or appeared in someone else’s upload, the same facial scanning happened without explicit notification or consent. This silent collection, scaled across billions of photos uploaded over six years (2015–2021), resulted in a massive biometric database that Instagram could have theoretically used for other purposes—such as selling data to third parties, training facial recognition systems, or selling targeted advertising based on where a person’s face appeared across the platform.
The Separate Mental Health Litigation Against Instagram Meta
Separate from the biometric privacy lawsuit, Meta currently faces another major class action lawsuit involving allegations that Instagram deliberately designed addictive features that harm the mental health of minors. This case is consolidated under MDL-3047 (Multidistrict Litigation 3047), which brings together 1,867 to 2,191 individual lawsuits from school districts, families, and others claiming that Instagram’s algorithmic feed, infinite scroll, notifications, and social comparison features were designed to maximize engagement at the expense of teen mental health. This litigation has no direct connection to the biometric facial data collection claims, though both involve Instagram’s corporate practices.
In May 2026, Meta settled a bellwether case brought by the Breathitt County, Kentucky school district for approximately $27 million, making Meta the last major defendant to settle in the mental health litigation. This settlement indicates that courts and juries are willing to hold social media companies liable for harm to minors, though the mental health case frames the harm differently than the biometric case. Where the biometric settlement was based on unauthorized data collection, the mental health settlement addresses allegations about deliberately addictive product design. The two cases demonstrate that Instagram—now part of Meta—has faced significant legal exposure across multiple fronts, not just around privacy but also around platform design practices affecting vulnerable user populations.
Frequently Asked Questions
How do I know if I’m eligible for the Instagram settlement?
You must have had an active Instagram account while residing in Illinois between August 10, 2015, and August 16, 2023. Eligibility is based on state residency and account activity during that specific window. The settlement only applies to Illinois residents because the violation was under Illinois state law (BIPA).
Can I still file a claim if I missed the original deadline?
The original claim deadline has passed since the settlement closed in 2024, but some settlement administrators continue to accept late claims on a case-by-case basis. However, late claims typically receive smaller per-person payouts than earlier filers because they must be divided among a larger pool. Contact the settlement administrator directly to inquire about your specific situation.
Why did I receive only $32.56 instead of $200–$400?
Early claimants received $32.56 on average when the settlement closed in 2024. Later distributions, beginning in early 2026, ranged from $200–$400 because not all eligible users filed claims initially, leaving more funds available for subsequent rounds. Your payout timing depended on when your claim was processed and approved.
Is the mental health settlement separate from the biometric settlement?
Yes. The $68.5 million biometric settlement addresses unauthorized facial data collection, while the mental health litigation (MDL-3047) addresses allegations about addictive product design causing harm to minors. The May 2026 Kentucky school district settlement was in the mental health litigation, not the biometric case.
What is facial geometry data?
Facial geometry data is a mathematical representation of facial features extracted from photos, rather than storage of the actual photograph. Instagram created this data through its photo tagging and auto-tag features without users’ written consent, which violated Illinois BIPA.