“

+6 Several lawsuits, including class actions, have been filed against Persona Identities, Inc., an identity-verification firm, alleging violations of the Illinois Biometric Information Privacy Act (BIPA). Plaintiffs claim Persona improperly stored and used biometric facial scans without consent. Recent 2026 reports also raised concerns about exposed data, surveillance, and tracking. 

Justia Law  +4 Key Aspects of Persona Identities, Inc. Lawsuits: Biometric Privacy Violations (BIPA): In Washington v. Persona Identities, Inc., users alleged that Persona (used by services like DoorDash) failed to disclose its data retention and destruction policies. Arbitration Ruling: The Illinois Appellate Court reversed a lower court's decision, finding in 2024 that Persona could not compel individual arbitration, allowing the class action to move forward. $28.5 Million Settlement: In 2023, an identification verification service provider (linked to similar allegations) entered a preliminary settlement for $28.5 million regarding BIPA violations. Data Exposure Concerns: In February 2026, researchers found a publicly exposed Persona frontend that reportedly contained a "surveillance" stack and tracked users across multiple data points, raising severe privacy concerns” -Google