Violation claims over Illinois’ Biometric Information Privacy Act (BIPA) may start rolling into the state’s court systems after Six Flags was hit with a ruling finding it could be required to pay damages over biometrics violations even if the damages aren’t tangible.

BIPA went into effect in 2008 and requires private entities in Illinois to obtain prior written consent before collecting an individual’s fingerprint, voiceprint, iris scan or other biometric. It also requires companies provide a written document notifying consumers of any biometric collection and the length of the data’s storage.