Remote Proctoring and Biometric Privacy in Candidate Testing

Remote proctoring biometric privacy is where two reasonable employer goals collide. You want confidence that the person who passed the test is the person you are hiring, and you want a process that creates no legal exposure. Webcam identity checks, face matching and voice analysis can move a skills test out of ordinary data handling into state biometric privacy statutes, where the obligations attach before you collect anything.

This is a design question more than a legal one. Most cheating risk can be managed without collecting any biometric identifier, and employers who get into trouble switched on every proctoring feature by default.

Key Takeaways

• Face matching, iris or retina scans, fingerprints and voiceprints can count as biometric identifiers under state law. A plain webcam recording generally does not, because Illinois expressly excludes photographs.
• Illinois requires written notice, a stated purpose and length of term, and a signed written release before collection, plus a published retention and destruction policy (740 ILCS 14/15).
• Illinois is the only one of the three main statutes with a private right of action, which is why almost all biometric litigation happens there (740 ILCS 14/20). Texas and Washington are enforced by state officials.
• Item randomization, time limits, realistic work samples and structured follow-up questions cut cheating without collecting biometrics.
• Proctoring rules must bend for candidates who need an accommodation. Requiring someone to hold still or keep their eyes on screen can screen out a disabled applicant for reasons unrelated to the job.

When Webcam Monitoring in Testing Becomes Biometric Collection

Illinois defines a biometric identifier narrowly and by list: a retina or iris scan, a fingerprint, a voiceprint, or a scan of hand or face geometry (740 ILCS 14/10). The same section expressly excludes photographs, writing samples, written signatures, demographic data and physical descriptions.

That distinction drives assessment design. Face-matching identity verification produces a scan of face geometry and sits inside the definition, as does voice analysis that builds a voiceprint. A recorded webcam session reviewed by a person is harder to characterize as a listed identifier, though it remains sensitive personal data with its own handling duties. Keystroke dynamics is the unsettled case: it is not on the Illinois list, but Washington reaches data generated by automatic measurement of biological characteristics, so treat behavioral biometrics as contested rather than safe.

Biometric Consent for a Candidate: What Illinois Requires First

The Illinois Biometric Information Privacy Act puts almost all of its obligations in front of collection, so a defect cannot be fixed afterwards. Under 740 ILCS 14/15(b), a private entity must first tell the individual in writing that a biometric identifier is being collected or stored, state the specific purpose and length of term for which it will be collected, stored and used, and receive a written release from that individual.

Section 15(a) adds a duty many employers miss. Keep a written policy, available to the public, setting a retention schedule and destruction guidelines, and destroy the data once the initial purpose is satisfied or within three years of the person's last interaction with you, whichever comes first. For a candidate you did not hire, that first trigger arrives fast.

The statutory definition of a written release allows an electronic signature, so this can be a clean digital step. What it cannot be is a line buried in a privacy policy, or a checkbox shown after the camera has run.

Why Illinois Draws the Litigation

Illinois is the state to design around because individuals can sue directly. Section 20 gives any person aggrieved by a violation a right of action, with liquidated damages of $1,000 or actual damages for a negligent violation, $5,000 or actual damages for an intentional or reckless violation, plus attorneys' fees, costs and injunctive relief.

That exposure narrowed in 2024. Public Act 103-769, effective August 2, 2024, amended Section 20 so that repeatedly collecting the same identifier from the same person by the same method is a single violation with at most one recovery, where claims had previously been read to accrue on every scan. Per-person exposure is now bounded, but one defective consent flow across a large applicant pool still adds up.

Texas and Washington Work Differently

Texas and Washington both regulate biometric identifiers, and neither gives candidates a private lawsuit. The Texas Capture or Use of Biometric Identifier statute, Texas Business and Commerce Code Section 503.001, requires notice and consent before capture for a commercial purpose and is enforced by the Texas Attorney General. Washington's chapter 19.375 RCW is enforceable solely by the state Attorney General under the Consumer Protection Act, which RCW 19.375.030(2) states directly. That is not permission: state enforcement still brings penalties, other states have added biometric provisions to broader privacy laws, and one process built to the strictest applicable standard beats a per-state matrix.

Proctoring Methods Against Privacy Exposure

• Item randomization from a question bank - Biometric identifier collected?: No; Privacy exposure: Low; Notes: Cuts answer sharing without adding personal data.
• Time limits and per-item timing - Biometric identifier collected?: No; Privacy exposure: Low; Notes: Must stay adjustable for accommodations.
• Work sample or portfolio task - Biometric identifier collected?: No; Privacy exposure: Low; Notes: Hard to fake and usually the strongest job-related evidence.
• Structured live follow-up questions - Biometric identifier collected?: No; Privacy exposure: Low; Notes: Tests whether claimed knowledge is real. Do not run voiceprint analysis on it.
• Recorded webcam session, human review - Biometric identifier collected?: Generally no; Privacy exposure: Medium; Notes: Illinois excludes photographs, but consent, security and retention duties still apply.
• Keystroke or behavioral pattern analysis - Biometric identifier collected?: Contested; Privacy exposure: Medium to high; Notes: Outside the Illinois list; broader state definitions may reach it.
• Face-geometry matching or ID face verification - Biometric identifier collected?: Yes; Privacy exposure: High; Notes: Written notice, purpose, term, release and retention schedule required first.
• Voiceprint or fingerprint verification - Biometric identifier collected?: Yes; Privacy exposure: High; Notes: Same duties. Rarely justified for a pre-hire skills test.

Design the Test So You Do Not Need Biometrics

The lowest-risk approach is a process that never depends on identity biometrics. Cheating is a measurement problem, and measurement problems respond to test design.

Four choices do most of the work. Randomize items from a larger bank so no two candidates see the same paper. Set time limits tight enough that searching for answers costs more than it returns. Use tasks that mirror real work, because someone who cannot do the job cannot fake a realistic deliverable. Then ask the candidate to explain their reasoning in a short structured conversation, the cheapest verification available.

Righteo supports that pattern. Our skill tests library provides role-specific tests you can randomize and time, our AI skill assessments score responses against role requirements, and our automated reference checks add an independent view of past job performance. A verified reference checks an inflated test score and collects no biometric data.

If identity verification is warranted, keep it proportionate: apply it to the final short list only, and delete on your published schedule.

Proctoring and the Duty to Accommodate

Proctoring settings must not disadvantage a candidate who needs an accommodation. Under the Americans with Disabilities Act (ADA.gov), an employer must provide reasonable accommodation during the application and testing process, and must not use selection criteria that screen out people with disabilities unless those criteria are job-related and consistent with business necessity.

The failure modes are predictable. Gaze tracking flags a candidate with a visual impairment or a tic disorder, a no-movement rule penalizes someone with chronic pain who has to shift position, and a fixed timer defeats a candidate entitled to extra time. Face matching also fails unevenly, and an automatic rejection on that signal is not a defensible hiring decision.

Put the accommodation route in the invitation, before the test starts, and keep a human reviewer on every integrity flag. Our guide to Inclusive Design: Accessibility in Skill Assessment Tools covers the settings worth checking.

The Federal Picture Shifted, and Your Records Still Matter

Federal enforcement posture on disparate impact changed in 2026, and the detail matters. A June 9, 2026 Office of Legal Counsel memorandum opinion, implementing Executive Order 14281, concluded that the disparate-impact guidelines, including the Uniform Guidelines on Employee Selection Procedures at 29 CFR Part 1607, are unconstitutional and inconsistent with Title VII. The US Equal Employment Opportunity Commission has aligned its priorities with that view.

What did not happen is the part employers get wrong. The Uniform Guidelines remain codified, and an OLC opinion is executive-branch legal advice: it does not bind courts, amend Title VII, or overrule Griggs v. Duke Power Co., 401 U.S. 424 (1971). Disparate-impact liability is statutory at 42 U.S.C. 2000e-2(k), private plaintiffs keep an independent right to sue, and several states have codified the theory. Exposure has relocated rather than disappeared. Validation evidence and applicant-flow records remain the practical defense and are now also the evidence base for intentional-discrimination claims, so keep validating and keep the records. Templates sit in our HR and pre-employment resources.

Related Resources

Skill Tests LibraryAI AssessmentReference ChecksInclusive Design: Accessibility in Skill Assessment ToolsHR and Pre-Employment Resources and ArticlesADA.gov: Information and Technical Assistance on the Americans with Disabilities ActUS Equal Employment Opportunity Commission

Frequently Asked Questions

Does recording a candidate's webcam during a test count as collecting biometric data?

Not by itself in Illinois, because 740 ILCS 14/10 expressly excludes photographs from the definition of a biometric identifier. The line is crossed when footage is processed into a face-geometry template used to identify the person. The recording is still sensitive personal information, so notice, access controls and a deletion schedule apply.

What does BIPA hiring compliance require before a proctored test?

Three things in writing, all before collection: notice that a biometric identifier is being collected or stored, a statement of the specific purpose and length of term, and a written release signed by the candidate. Section 15(a) also requires a publicly available retention and destruction policy.

Can a candidate sue us over webcam monitoring in testing?

In Illinois, yes. Section 20 gives an aggrieved person a direct right of action with liquidated damages and attorneys' fees. Texas and Washington provide no private right of action; those statutes are enforced by state officials.

Do we still need to validate tests now that federal disparate-impact enforcement has receded?

Yes. The Uniform Guidelines are still codified, Title VII's disparate-impact provision is statutory, private plaintiffs can still sue, and several states have codified the theory independently. Those records also support a defense against intentional-discrimination claims.

This article is general information for US employers and is not legal advice. Confirm your obligations with employment counsel in the states where you hire.

Build to the Illinois Standard Everywhere

Remote proctoring is worth having, but the biometric features are the expensive part and rarely the useful part. Illinois sets the standard to build to, because candidates there can sue directly and every requirement lands before collection, which rules out retrofitting. Ask your assessment vendor in writing which signals it captures and where each is stored, then switch off anything you cannot justify as job-related. If you need identity confidence, reach for better test design and verified references first.