The policy discloses that Thomson Reuters collects biometric data including fingerprints and facial geometry scans, and states that such data will be permanently destroyed within the timeframe specified by applicable law or when the collection purpose ends, whichever comes first.
This analysis describes what Thomson Reuters's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes biometric data collection and a destruction schedule tied to legal timelines or cessation of purpose, triggering obligations under the Illinois Biometric Information Privacy Act and analogous statutes in Texas, Washington, and other states that impose specific written consent, retention schedule, and destruction requirements before or at the point of collection.
Interpretive note: The statement does not specify the consent mechanism employed prior to biometric data collection, leaving open whether collection practices satisfy BIPA's written release requirement and analogous state law obligations.
This provision authorizes collection of fingerprints and facial geometry scans and establishes that destruction occurs when the collection purpose ends or within the legally mandated timeframe. Under this clause, individuals whose biometric data is collected should be subject to applicable state-law notice and consent requirements prior to collection, though the statement does not specify the consent mechanism used.
Cross-platform context
See how other platforms handle Biometric Data Collection and Destruction and similar clauses.
Compare across platforms →"Biometric data Fingerprints, scans of face geometry, and other data generated by automatic measurements of an individual's physiological, biological, or behavioral characteristics... We take steps to permanently destroy any biometric data we maintain within the applicable timeframe specified by law or when it is no longer necessary to achieve the purpose for which it was collected or obtained, whichever occurs first.Excerpt from Thomson Reuters's Privacy
1) REGULATORY LANDSCAPE: This provision directly implicates the Illinois Biometric Information Privacy Act (BIPA, 740 ILCS 14), which requires written release prior to collection, a publicly available retention policy, and destruction within three years or …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes biometric data collection and a destruction schedule tied to legal timelines or cessation of purpose, triggering obligations under the Illinois Biometric Information Privacy Act and analogous statutes in Texas, Washington, and other states that impose specific written consent, retention schedule, and destruction requirements before or at the point of collection.
This provision authorizes collection of fingerprints and facial geometry scans and establishes that destruction occurs when the collection purpose ends or within the legally mandated timeframe. Under this clause, individuals whose biometric data is collected should be subject to applicable state-law notice and consent requirements prior to collection, though the statement does not specify the consent mechanism used.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Thomson Reuters.