The plaintiff alleges Pepsi violates the Illinois Biometric Information Privacy Act by not obtaining written consent to collect individuals' biometrics and not complying with the law's data retention and destruction policies.
