Update of BIPA requirements for Onfido (Oct 25)

The US BIPA (Biometric Information Privacy Act) requirements are continuously evolving. The latest changes will affect the Onfido Document verification from October 2025. In summary:

• The end-user's location is now mandatory for all process types, including document. Earlier, it was only required for documentSelfie and documentVideo.
• For end-users located in the US (or end-users with no specified location), their privacy consent is required in order to proceed with the Onfido identity verification.

Quote from Onfido:

The U.S. legal landscape regarding the use of biometric data continues to evolve, particularly the breadth of the interpretation of the terms ‘biometric identifier’ and ‘biometric information’ under the Illinois’ Biometric Information Privacy Act (BIPA). BIPA prohibits the processing of biometric identifiers or information without consent. So while the U.S. landscape remains largely unsettled, out of an abundance of caution we are making some changes to Document Verification to ensure that it meets your needs, while maintaining compliance with U.S. laws regarding biometric data.

What you need to do

• If you only use documentSelfie or documentVideo as process types: Nothing has changed since May 2023 and you do not need to do anything.
• If you are using document as process type: Follow the same steps as we suggested in May 2023.