Apple Faces $32.5B Lawsuit Over iPhone Photos App Facial Recognition

Apple collected biometric data without consent or notice
The lawsuit alleges Apple's Photos app created facial profiles of users without permission, violating Illinois privacy law.
Mark

So Apple is being sued for $32.5 billion. That's a staggering number. What exactly is the lawsuit claiming happened?

Mimi

The Photos app on iPhones has a feature that recognizes faces in your pictures. According to the lawsuit, Apple used facial recognition to create unique digital profiles—faceprints—for every person in your photo library, and it did this without asking permission or telling you it was doing it.

Luke

Wait, let me clarify something. The lawsuit alleges this happened. We should be careful about stating it as fact until a court decides. What we know for certain is that the Photos app does use facial recognition to organize photos by person. That's not in dispute.

Mimi

Right. The "People" feature is real and it does work that way. The legal question is whether Apple violated Illinois law by collecting that biometric data without consent.

Mark

Why does Illinois law matter specifically? Doesn't Apple operate everywhere?

Luke

Good question. Illinois has a specific law—the Biometric Information Privacy Act from 2008—that regulates how companies can collect and use biometric data. The lawsuit is filed there, so that law applies. Other states have different rules or no rules at all.

Mimi

The law requires companies to notify people, get their consent, and follow specific data retention policies when collecting biometric information. The plaintiffs say Apple did none of those things with the Photos app.

Mark

How many people could be affected?

Mimi

Up to 6.5 million Illinois residents. If Apple loses, each person could claim up to $5,000 in damages. That's where the $32.5 billion figure comes from.

Luke

Though we should note: that's the maximum possible damages if every eligible person files a claim and wins. In reality, class action settlements often result in lower per-person payouts, and not everyone eligible typically participates.

Mark

What's the current status of the case?

Mimi

A federal appeals court just rejected Apple's attempt to dismiss it. The case can now move forward as a class action.

  • A federal appeals court rejected Apple's bid to dismiss the case in August 2026, clearing the way for one of the largest biometric privacy lawsuits in American history to move forward.
  • Up to 6.5 million Illinois residents may be eligible for $5,000 each in damages — a liability that compounds into a staggering $32.5 billion if Apple is found to have violated the state's Biometric Information Privacy Act.
  • The tension at the heart of the case is subtle but sharp: Apple's Face ID is a feature users knowingly activate, while the Photos app's facial recognition runs silently in the background, building 'faceprints' without ever asking permission.
  • Apple's carefully cultivated identity as a privacy-first company is now being tested not by a data breach, but by a default feature — one that many users never knew was running at all.
  • The outcome could force Apple to restructure how biometric data is handled across its entire ecosystem and may embolden similar lawsuits in other states with comparable privacy statutes.

In the quiet background of millions of iPhones, a feature designed to organize memories has become the center of a legal reckoning over consent and the invisible boundaries of the self. Apple now faces a $32.5 billion class action lawsuit in Illinois, where a 2008 privacy law stands as one of the few legal shields against the silent collection of biometric identity. The case asks a question that technology has long outpaced: does convenience justify collection, even when the data never leaves your pocket?

Apple is facing a $32.5 billion class action lawsuit over the facial recognition capabilities built into its iPhone Photos app. Filed in Illinois, the lawsuit alleges that the app's "People" feature — which scans faces in a user's photo library to identify and organize images — creates biometric "faceprints" without ever notifying users or obtaining their consent. That practice, the plaintiffs argue, is a direct violation of Illinois' Biometric Information Privacy Act, a landmark 2008 law that governs how companies may collect identifiers like fingerprints, iris scans, and faceprints.

The case began in March 2020 with roughly ten Apple users filing the initial complaint. By June 2026, an Illinois judge had certified it as a class action, and in August 2026, the U.S. Court of Appeals for the Seventh Circuit rejected Apple's appeal of that decision — allowing the lawsuit to proceed toward discovery and potentially trial. As many as 6.5 million Illinois residents could be eligible for damages, with the law permitting up to $5,000 per person.

The lawsuit draws a careful distinction between Face ID — a feature users consciously enable — and the Photos app's background facial recognition, which operates silently as part of the app's organizational logic. Apple has long emphasized that biometric data processed on its devices never reaches its servers, but the plaintiffs argue that on-device storage does not exempt the company from obtaining explicit consent before creating and retaining faceprints.

Beyond the financial exposure, the case carries broader implications. A ruling against Apple could reshape biometric data practices across its product ecosystem and signal to the wider technology industry that passive, consent-free data collection — even in service of user convenience — carries real legal risk.

Apple is being sued for $32.5 billion over the way its iPhone Photos app handles faces in your library. The lawsuit, filed as a class action in Illinois, alleges that the company has been collecting biometric data—specifically, facial recognition information—without asking permission or telling users it was happening.

The Photos app includes a feature called "People" that uses facial recognition to identify and organize photos by who appears in them. According to the lawsuit, when you take pictures and store them on your iPhone, the app scans those images and creates what the legal filing calls a "faceprint" for each face it detects. Once the software has analyzed enough photos of the same person, it uses an algorithm to identify that individual across your entire photo library. This biometric information is then stored on your device and used to organize your photos. The plaintiffs argue that Apple performed this analysis and data collection without consent, in direct violation of Illinois' Biometric Information Privacy Act, a law passed in 2008 that specifically regulates how companies can collect and use biometric identifiers like fingerprints, iris scans, voiceprints, and faceprints.

The case has been moving through the courts since March 2020, when roughly ten Apple users filed the initial complaint. In June 2026, an Illinois judge determined that the plaintiffs had met the legal threshold to proceed as a class action lawsuit, meaning the case could represent a much larger group of affected users. On Thursday of that week, the U.S. Court of Appeals for the Seventh Circuit rejected Apple's attempt to overturn that decision, clearing the path for the lawsuit to move forward.

The scale of potential liability is enormous. As many as 6.5 million Illinois residents could be eligible to claim damages if the case succeeds. The law allows for up to $5,000 per person in damages, which is how the $32.5 billion figure was calculated. The plaintiffs' core argument is straightforward: Apple collected biometric information through the Photos app's facial recognition capability without providing notice, obtaining consent, or following the data retention policies required by law.

Apple has long marketed itself as a privacy-focused company, particularly through its Face ID feature, which uses facial recognition as a security mechanism to unlock iPhones and authenticate payments. The company has emphasized that this biometric data is processed on the device itself and never sent to Apple's servers. The lawsuit does not challenge Face ID directly, but rather focuses on the separate facial recognition happening silently in the Photos app—a feature that many users may not even realize is active. The distinction matters: Face ID is something users knowingly enable and interact with. The Photos app's facial recognition, by contrast, operates in the background as part of the app's organizational features, and the lawsuit contends that Apple never obtained explicit permission to create and store faceprints for identification purposes.

The rejection of Apple's appeal by the federal court is a significant moment in the case. It means the company's legal arguments for dismissing the lawsuit did not persuade the appellate judges, and the class action can now proceed toward discovery and potentially trial. For Apple, the stakes are not just financial—a loss here could reshape how the company handles biometric data collection across its ecosystem and might prompt similar lawsuits in other states with comparable privacy laws. For the millions of Illinois residents who have used the Photos app, the case represents a test of whether companies can collect biometric information as a default feature without explicit user consent, even when that data never leaves the device.

The lawsuit claims the iPhone Photos app uses facial recognition technology to scan people who appear in images and create a unique 'faceprint' for each person detected in a user's photo library
— Class action complaint
Möchten Sie die ganze Geschichte? Das Original lesen bei PetaPixel ↗
Kontakt FAQ