In a 15-page complaint, customers described how they’d periodically call the Walmart customer service line. Walmart’s privacy policy, which was updated on June 18, 2026, states that Walmart collects biometrics, like voiceprints, when a customer contacts them. They brought the class action filed Tuesday under the Illinois Biometric Information Privacy Act, which regulates the collection and use of biometric identifiers. The statute makes it illegal to “collect, capture, purchase, receive through trade, or otherwise obtain a person’s or a customer’s biometric identifiers or biometric information, unless it first: (1) informs the subject … in writing that a biometric identifier or biometric information is being collected or stored; (2) informs the subject … in writing of the specific purpose and length of term for which a biometric identifier or biometric information is being collected, stored, and used; and (3) receives a written release executed by the subject of the biometric identifier or biometric information.” Thus, a breach on employees’ biometrics only occurred the first time they clocked in after the law was passed in 2008.