Suing for Illinois Genetic Information Privacy Act (GIPA) Violations: Compensation & Timelines

While the state's biometric privacy laws dominate the headlines, another powerful statute is silently protecting your most intimate medical data. Suing for Illinois Genetic Information Privacy Act (GIPA) violations is becoming a crucial step for workers whose employers or insurers unlawfully demand their family medical histories. Passed to ensure nobody is discriminated against based on their genetic predispositions, 410 ILCS 513 § 25(c)(1) strictly prohibits companies from soliciting, requesting, or purchasing your genetic information.

Unlike the Biometric Information Privacy Act (BIPA), which focuses on fingerprints and facial scans, GIPA focuses entirely on your DNA and your family's medical history. If an employer asks whether your parents had cancer, heart disease, or diabetes during a hiring process in Chicago, Joliet, or Aurora, they are breaking the law. This guide explains how plaintiffs can recognize a GIPA violation, the massive statutory damages available, and the steps required to file a lawsuit in civil court.

Step-by-Step Process for a GIPA Lawsuit in Illinois

Taking a massive corporation to court requires strategic planning. GIPA provides a private right of action, meaning you do not have to wait for the Attorney General to intervene; you can sue the company directly.

Step 1: Identifying the Illegal Request

The most crucial step is proving that the employer or insurer actually asked for the information. Under GIPA, "genetic information" includes not just raw DNA test results from companies like 23andMe, but also the manifestation of a disease or disorder in family members. If an HR intake form or a company-mandated physical explicitly asks for a "family medical history," that piece of paper is the smoking gun for your lawsuit. Many applicants mistakenly believe that if they are applying for a physically demanding job, the employer has the right to know everything about their family's health. This is a myth. While they can ask about your current physical ability to lift 50 pounds, asking if your father had a heart attack is strictly off-limits.

Step 2: Filing the Civil Complaint

Your attorney will draft a formal complaint detailing the violation. Most of these cases are filed in the county where the corporate headquarters is located or where the violation occurred. For example, if the company is based in Cook County, your lawyer will file the lawsuit at the Circuit Court of Cook County, Chicago, likely submitting Form CCCH 0623, Illinois, Circuit Court of Cook County, Chancery Division Civil Cover Sheet. Because many applicants are subjected to the same illegal intake forms, these lawsuits are frequently filed as class actions.

How GIPA Violations Occur in Specific Niches

Employers and insurance companies rarely ask for a vial of your blood. Instead, GIPA violations usually occur through seemingly routine paperwork during specific phases of employment or underwriting.

Pre-Employment Physicals

Many jobs in manufacturing, law enforcement, and transportation require applicants to pass a pre-employment medical exam. The company hires a third-party clinic to conduct the physical. If the clinic's standard intake questionnaire asks, "Has anyone in your immediate family suffered from high blood pressure or cancer?" that is a direct violation of GIPA. The employer who required the physical is ultimately liable for the illegal collection of that data. The law applies equally to both the hiring manager and the outsourced medical professionals. Do not let a clinic tell you that the questionnaire is standard protocol; standard protocol does not supersede Illinois law.

Life Insurance Underwriting Denials

GIPA also strictly regulates the insurance industry. When you apply for a life insurance policy in Illinois, underwriters assess your risk. However, under 410 ILCS 513 § 20, insurers cannot request or use genetic information or family medical histories to deny coverage, cancel a policy, or hike up your premium rates. If you were denied life insurance after completing a questionnaire about your parents' health, you have strong grounds for a lawsuit.

Mandatory Corporate Wellness Programs

To lower corporate health insurance premiums, many large businesses incentivize employees to participate in "wellness programs." These programs often involve health risk assessments. While asking about your own smoking habits or current weight is legal, asking you to disclose your family's history of Alzheimer's or diabetes as a condition of receiving a discount on your health insurance premium violates GIPA.

Compensation: $2,500 to $15,000 per Violation

The reason GIPA lawsuits are so powerful is the statutory damages provision. You do not need to prove that you were actually fired or denied a job to recover money; you only need to prove that the company illegally asked for the information. Under 410 ILCS 513 § 40, successful plaintiffs can recover:

• $2,500 in liquidated damages for each negligent violation.
• $15,000 in liquidated damages for each reckless or intentional violation.
• Actual damages (if they exceed the liquidated amounts).
• Reasonable attorney's fees and litigation costs.

Because the law mandates that a prevailing plaintiff may recover reasonable attorney's fees and costs, plaintiff attorneys typically handle GIPA claims on a contingency basis, meaning clients generally incur no upfront hourly legal fees.

How Long Does a GIPA Lawsuit Take?

The timeline for a GIPA lawsuit mirrors other complex privacy litigation. The Illinois Supreme Court ruled in Tims v. Black Horse Carriers, Inc., 2023 IL 127801 (IL Supreme Court 2023) that privacy statute violations generally carry a 5-year statute of limitations. This means you can sue a company for a form you filled out up to five years ago.

If the company realizes they made a massive error and agrees to an early class-wide settlement, the case might resolve in 12 to 18 months. If they fight class certification in court, the litigation can drag on for 2 to 4 years. If you believe your privacy rights were violated, search our directory of vetted US Lawyers to find an experienced Illinois privacy attorney.

Frequently Asked Questions (FAQ)