Revolut, a prominent London-based fintech company, faces a serious legal challenge in the United States.
This lawsuit, centered on allegations of unauthorized biometric data usage, could potentially result in multi-million-dollar damages for the firm. Moreover, regardless of the outcome, the development has implications for Revolut and the broader fintech industry.
Understanding the Allegations Against Revolut
At the heart of the controversy is the accusation that Revolut illegally collected, stored, and utilized its customers’ biometric data without proper consent. This alleged breach of privacy rules, particularly in Illinois, has raised significant concerns.
The law in Illinois mandates companies to fully inform and obtain consent from users regarding the use of biometric data. That includes details about the duration of data storage, destruction policies, and whether the data is shared with third parties.
Revolut boasts a global user base exceeding 35 million, with approximately one million users in the U.S. alone. The potential financial implications of this lawsuit are substantial.
If successful, the lawsuit could deal a significant financial blow to Revolut’s U.S. operations. It comes in the wake of a $20 million loss Revolut suffered due to a cyberattack, which exploited a software vulnerability.
Biometric Data Usage in Fintech: A Double-Edged Sword
Revolut employs biometric data obtained through customer selfies via mobile apps to verify user identities. This process involves comparing the selfies to identification documents such as passports or driving licenses. While this method offers enhanced security and user verification, it also brings with it the responsibility of handling sensitive personal data ethically and legally.
Illinois’ BIPA is a critical piece of legislation in this context. The act imposes fines of up to $5,000 for each violation over the past five years. Given the scale of Revolut’s user base, this could translate into several million dollars in damages if the lawsuit is successful.
Historical Context: The Precedent of Privacy Violations
It is not the first instance of a tech giant facing legal action over BIPA violations. In 2021, Facebook encountered a similar situation, resulting in a settlement exceeding $650 million – one of the largest in privacy violation history.
Conversely, a similar lawsuit against Google was ultimately dismissed, highlighting the complexity and variability of legal outcomes in such cases.
