Sekura v. Krishna Schaumburg Tan, Inc.

Digitally signed by
Reporter of Decisions
Reason: I attest to the
Illinois Official Reports accuracy and
integrity of this
document
Appellate Court Date: 2019.01.07
15:42:35 -06'00'

Sekura v. Krishna Schaumburg Tan, Inc., 2018 IL App (1st) 180175

Appellate Court KLAUDIA SEKURA, Individually and on Behalf of All Others
Caption Similarly Situated, Plaintiff-Appellant, v. KRISHNA
SCHAUMBURG TAN, INC., an Illinois Corporation, Defendant-
Appellee.

District & No. First District, Fourth Division
Docket No. 1-18-0175

Filed September 28, 2018

Decision Under Appeal from the Circuit Court of Cook County, No. 2016-CH-04945;
Review the Hon. David B. Atkins, Judge, presiding.

Judgment Reversed and remanded.

Counsel on Ryan D. Andrews, Roger Perlstadt, and Alexander G. Tievsky, of
Appeal Edelson PC, of Chicago, for appellant.

Daniel P. Costello and R. Andrew Smith, of Daniel P. Costello &
Associates, LLC, of Chicago, for appellee.

Panel JUSTICE GORDON delivered the judgment of the court, with
opinion.
Presiding Justice McBride and Justice Burke concurred in the
judgment and opinion.
 OPINION

¶1 In this appeal, plaintiff Klaudia Sekura appeals the dismissal, pursuant to section 2-615 of
the Code of the Civil Procedure, of one of her causes of action. 735 ILCS 5/2-615 (West
2016).1 Although only one cause of action was dismissed, the trial court made an express
written finding that there was no just reason for delaying an appeal from its order dismissing
count I. Thus, we have jurisdiction to hear this appeal pursuant to Illinois Supreme Court Rule
304(a) (eff. Mar. 8, 2016).2
¶2 In count I, plaintiff Sekura alleged that defendant Krishna Schaumburg Tan, Inc., violated
the Biometric Information Privacy Act (Act) (740 ILCS 14/1 et seq. (West 2016)) by collecting
plaintiff’s fingerprints without providing the statutorily required disclosure concerning its
retention policy and other topics and by disclosing her fingerprints to an out-of-state,
third-party vendor. The purpose of the Act is to provide an “individual” with protections
against his or her biometric information becoming “compromised” (740 ILCS 14/5(c) (West
2016)), and the Act expressly authorizes a suit by “[a]ny person” who has been “aggrieved by
a violation of this Act” (740 ILCS 14/20 (West 2016)).
¶3 Initially, the trial court denied defendant’s motion to dismiss, finding that under the plain
language of the statute plaintiff was a person aggrieved by a violation of the Act. However,
after the Second District found in Rosenbach v. Six Flags Entertainment Corp., 2017 IL App
(2d) 170317, ¶ 28,3 that standing under the Act required an “injury or adverse effect” in
addition to a violation of the Act, the trial court felt compelled to reverse its prior ruling and to
dismiss plaintiff’s claim under the Act.4 Subsequently, a federal district court distinguished
Rosenbach on the ground that disclosure to a third-party vendor, which is also alleged in our
case, constituted such an injury or adverse effect. Dixon v. Washington & Jane Smith
Community-Beverly, No. 17 C 8033, 2018 WL 2445292, at *12 (N.D. Ill. May 31, 2018).
¶4 First, we find that the trial court was initially correct, and that, pursuant to both the plain
language of the statute itself and its legislative history and purpose, plaintiff was a person
aggrieved by a violation of the Act. Second, we find that, even if Rosenbach was correctly
decided, it is distinguishable on the facts of this case, as the Dixon court similarly found,
because disclosure to a third-party vendor is an injury or adverse effect. In addition, the mental
anguish that plaintiff alleges in her complaint also constitutes an injury or adverse effect.

1
See Bogenberger v. Pi Kappa Alpha Corp., 2018 IL 120951, ¶ 23 (“The question presented by a
motion to dismiss a complaint pursuant to section 2-615 of the Code is whether the complaint alleges
sufficient facts that, if proved, would entitle the plaintiff to relief.”).
2
Rule 304(a) provides, in relevant part: “If multiple parties or multiple claims for relief are involved
in an action, an appeal may be taken from a final judgment as to one or more but fewer than all of the
parties or claims only if the trial court has made an express written finding that there is no just reason
for delaying either enforcement or appeal or both.” Ill. S. Ct. R. 304(a) (eff. Mar. 8, 2016).
3
The Illinois Supreme Court granted a petition for leave to appeal in Rosenbach on May 30, 2018.
Rosenbach v. Six Flags Entertainment Corp., No. 123186 (Ill. May 30, 2018).
4
“Under the Illinois rule of stare decisis, a circuit court must follow the precedent of the appellate
court of its district, if such precedent exists; if no such precedent exists, the circuit court must follow the
precedent of other districts.” Schramer v. Tiger Athletic Ass’n of Aurora, 351 Ill. App. 3d 1016, 1020
(2004).

-2-
¶5 For the following reasons, we reverse the trial court’s section 2-615 dismissal of count I
and remand for further proceedings.

¶6 BACKGROUND
¶7 In her complaint, filed April 7, 2016, plaintiff alleges that defendant operates a tanning
salon in Schaumburg, Illinois, as a franchisee of L.A. Tan Enterprises, Inc. (L.A. Tan). When a
customer first purchases services at defendant’s tanning salon, he or she is enrolled in L.A.
Tan’s national membership database, which allows him or her to use his or her membership at
any of L.A. Tan’s locations. To enroll, customers are required to have their fingerprints
scanned. In addition, defendant discloses its customer fingerprint data to an out-of-state third
party vendor, namely, SunLync.
¶8 Specifically, plaintiff alleges that, in April 2015, she purchased a membership with
defendant in order to use its tanning salon and paid defendant on a monthly basis for the
membership. When she purchased the membership with defendant, defendant then enrolled
plaintiff in L.A. Tan’s corporate membership database and “required that she provide it with a
scan of her fingerprint.” Every time she visited defendant’s tanning salon, “she was required to
scan her fingerprint before using its services.”
¶9 Plaintiff alleges (1) that she has never been informed of the specific purposes or length of
time for which defendant collected, stored or used her fingerprints, (2) that she has never been
informed of any biometric data retention policy developed by defendant or whether defendant
will ever permanently delete her fingerprint data, (3) that she has never been provided with nor
signed a written release allowing defendant to collect or store her fingerprints, and (4) that she
has never been provided with nor signed a written release allowing defendant to disclose her
biometric data to SunLync to or any other third party.
¶ 10 Plaintiff further alleges that, in 2013, more than 65% of L.A. Tan’s salons were in
foreclosure and that defendant’s customers have not been advised what would happen to their
biometric data if defendant’s salon went out of business.5
¶ 11 Plaintiff alleges that she becomes emotionally upset and suffers from mental anguish when
she thinks about what would happen to her biometric data if defendant went bankrupt or out of
business or if defendant’s franchisor, L.A. Tan, went bankrupt or out of business, or if
defendant shares her biometric data with others. The allegation of mental anguish appears in
the “Factual Background” section of plaintiff’s complaint. Later, in count I, when plaintiff
makes a specific claim about the Act, she states that she “incorporates the foregoing allegations
as if fully set forth herein.”
¶ 12 Plaintiff alleged three causes of action: (1) violation of the Act, (2) unjust enrichment,
resulting from defendant’s failure to comply with the Act, and (3) negligence. Only the first
count is at issue in this appeal. In this first count, plaintiff alleges that defendant violated the
Act because (1) it collected, used, stored and disclosed biometric information without first
obtaining the written release that the Act requires; (2) it disclosed biometric information to
SunLync, an out-of-state third party vendor; (3) it did not properly inform customers in writing
that their biometric information was being collected and stored or of the specific purpose and
length of time for which it was being collected and stored, as required by the Act; and (4) it did
5
At this early stage in the litigation, we take all well-pleaded facts in the complaint as true.
Bogenberger, 2018 IL 120951, ¶ 23.

-3-
 not provide a publicly available retention schedule or guidelines for permanently destroying its
customers’ biometric information, as required by the Act.
¶ 13 Plaintiff filed her suit as a class action alleging that a numerous class of other customers
suffered from the same practices.
¶ 14 Instead of filing an answer, defendant moved on July 1, 2016, to dismiss plaintiff’s first
and second causes of action, for failing to allege sufficient facts to state a cause of action under
the Act.
¶ 15 On February 9, 2017, the trial court granted defendant’s motion to dismiss count II, the
unjust enrichment claim, but denied the motion with respect to count I, the count alleging
violations of the Act that is the subject of this appeal.
¶ 16 In its memorandum opinion, the trial court observed that defendant had argued that count I
“must be dismissed because the plaintiff is not ‘aggrieved’ as required by the statute itself.” In
response to this argument, the trial court found:
“The language of [the Act] itself in this respect is brief and straightforward: it
provides a cause of action for ‘any person aggrieved by its violation.’ 740 ILCS 14/20
[(West 2016)]. The most natural reading of this language alone is broad, suggesting in
context that any person whose biometric data was mishandled in violation of [the Act]
has a claim based on such violation. The plaintiff directs the court to a long history of
cases which have generally reached a similar conclusion: the Illinois Supreme Court
has long held that ‘[a] person is prejudiced or aggrieved *** when a legal right is
invaded by the act complained of.’ Glos v. People, 259 Ill. 332, 340 (1913); see also
Am. Surety Co. v. Jones, 384 Ill. 222, 229 (1943) (‘We think the words “person who
shall think himself aggrieved” mean a person who is immediately aggrieved *** as by
the refusal of a license *** not one who is only consequently aggrieved.’ [(citing The
King v. The Justices of Middlesex, 3 B. & A. 983 (1833))]. Courts have further applied
this reasoning to privacy-related laws such as the federal Video Privacy Protection Act
[cite omitted], which similarly provides a claim for ‘any person aggrieved by any act of
a person in violation of this section.’ See e.g. Austin-Spearman v. AMC Network
Entertainment L.L.C., 98 F. Supp. 3d 662 (S.D.N.Y. 2015); see also In re Facebook
Internet Tracking Litig., 140 F.Supp. 3d 922 (N.D. Ill. 2015) (applying similar
reasoning and allowing suit under other federal privacy laws without dangers).”
¶ 17 The trial court observed:
“Further, a review of other similar statutes provides further support for the broad
intended reach of [the Act]. As the plaintiff points out in its supplemental brief on
legislative history, both the Genetic Information Privacy Act, 410 ILCS 513/1, et seq.,
[(West 2016)] and the AIDS Confidentiality Act, 410 ILCS 305/1, et seq., [(West
2016)] provide for a substantially identical, ‘any person aggrieved’ right of recovery
and have been interpreted as not requiring actual damages be pled. See e.g. Doe v.
Chand, 335 Ill. App. 3d 809, 822 (5th Dist. 2002). Those statutes were also considered
and amended during the same legislative session as enacted [the Act], suggesting that
the legislature intended to apply a similar framework.”
¶ 18 Thus, on February 9, 2017, the trial court denied defendant’s section 2-615 motion to
dismiss count I. On July 28, 2017, the trial court denied defendant’s motion to certify a
question for immediate interlocutory appeal pursuant to Illinois Supreme Court Rule 308(a)

-4-
 (eff. Jan. 1, 2016). On December 7, 2017, the trial court denied defendant’s motion to
reconsider its denial for Rule 308(a) certification, but the trial court found that, “[i]n light of
the pendency of multiple cases before the Illinois Appellate Court involving the same legal
issues and the interests of judicial economy, *** a temporary stay of proceedings” was
“appropriate.”
¶ 19 On January 5, 2018, defendant filed a motion asking the trial court to reconsider its
February 9, 2017, denial in light of the Second District’s December 21, 2017, opinion in
Rosenbach, 2017 IL App (2d) 170317.
¶ 20 On January 16, 2018, the trial court granted defendant’s motion to reconsider and reversed
its earlier ruling. Since the order is short and it is the order being appealed from, we provide it
here in full:
“This matter coming before the Court on Defendant’s Motion to Reconsider and
adequate notice having been given, and the Court being duly advised in the premises,
IT IS HEREBY ORDERED:
1. For the reasons outlined in Rosenbach v. Six Flags Entertainment Corp., No.
2-17-0317 (2d Dist. 2017), Defendant’s Motion is GRANTED.
2. Count I of Plaintiff’s Complaint are [sic] hereby dismissed with prejudice and
judgment as to Count I entered in Defendant’s favor.
3. Pursuant to Ill. S. Ct. R. 304(a), the Court finds that there is no just reason for
delaying judgment as to Count I nor any just reason for delaying an appeal from this
order or the judgment as to Count I.
4. The stay shall remain in place as to Count III and the Parties shall report how
they wish to proceed within 30 days.”
¶ 21 On January 22, 2018, plaintiff filed a notice of appeal stating that she was appealing “the
Janauary 16, 2018[,] order entering final judgment on Count One of her complaint.” This
appeal then followed.

¶ 22 ANALYSIS
¶ 23 Plaintiff appeals the section 2-615 dismissal of count I of her complaint. For the following
reasons, we reverse and remand for further proceedings.

¶ 24 I. Section 2-615 Motion to Dismiss
¶ 25 “The question presented by a motion to dismiss a complaint pursuant to section 2-615 of
the Code is whether the complaint alleges sufficient facts that, if proved, would entitle the
plaintiff to relief.” Bogenberger v. Pi Kappa Alpha Corp., 2018 IL 120951, ¶ 23. “Such a
motion challenges only the legal sufficiency of the complaint.” Bogenberger, 2018 IL 120951,
¶ 23.
¶ 26 “The critical inquiry is whether the allegations of the complaint, when construed in the
light most favorable to the plaintiff, are sufficient to state a cause of action upon which relief
may be granted.” Bogenberger, 2018 IL 120951, ¶ 23. In making this determination, we must
take all well-pleaded facts in the complaint as true. Bogenberger, 2018 IL 120951, ¶ 23. An
appellate court will review de novo the trial court’s order granting a section 2-615 dismissal.
Bogenberger, 2018 IL 120951, ¶ 23. De novo review means that an appellate court performs

-5-
 the same analysis that a trial judge would perform. People v. Begay, 2018 IL App (1st) 150446,
¶ 34.
¶ 27 The issue in this case rests solely on the complaint, since no discovery has begun and no
answer was filed.

¶ 28 II. Waiver
¶ 29 As a preliminary matter, defendant argues that the only issue properly before this court is
whether a harm or injury, in addition to the violation of the Act itself, is required in order to
have standing to sue under the Act. We agree that this issue is the only issue before us.6
¶ 30 Defendant argues that we should disregard two issues on the ground that plaintiff waived
them by not raising them before the trial court: (1) whether the legislature intended to permit
claims for improper collection or mishandling of biometric data and (2) any arguments
concerning Rosenbach.
¶ 31 First, defendant argues that plaintiff alleges “for the first time on appeal” that defendant
mishandled its customers’ biometric data. However, plaintiff’s complaint repeatedly alleges
that defendant collects, stores, uses, and discloses its customers’ biometric data in violation of
the Act and, in particular, improperly disclosed the data to an out-of-state third-party vendor.
Thus, the allegation of “mishandling” data, i.e., handling it in a way that fails to comport with
the Act, is squarely in front of us, as we consider whether the allegations of plaintiff’s
complaint state a cause of action. Bogenberger, 2018 IL 120951, ¶ 23 (“The question
presented by a motion to dismiss a complaint pursuant to section 2-615 of the Code is whether
the complaint alleges sufficient facts that, if proved, would entitle the plaintiff to relief.”).
¶ 32 Second, defendant argues that, by not filing a brief in response to defendant’s motion to
reconsider in light of the Rosenbach decision, plaintiff has waived any arguments concerning
Rosenbach. However, we could not fully consider the issue that defendant concedes is in front
of us without considering the Rosenbach opinion. Thus, we will conduct our own reading of
that opinion to decide whether we find it persuasive. In addition, while arguments raised for the
first time in a motion to reconsider in the trial court are usually forfeited on appeal (Caywood v.
Gossett, 382 Ill. App. 3d 124, 134 (2008)), a winning party is not required to file a response to
a reconsideration motion, and defendant does not cite a rule or statutory section that requires
one. The law generally does not require a party to file a document that will have no effect, and
in the case at bar, the trial court had no choice but to follow the only available appellate court
decision. “Under the Illinois rule of stare decisis, a circuit court must follow the precedent of
the appellate court of its district, if such precedent exists; if no such precedent exists, the circuit
court must follow the precedent of other districts.” Schramer, 351 Ill. App. 3d at 1020.
¶ 33 Lastly, we observe that no discovery has occurred on this issue or on any other issue in the
case, that no answer has been filed, and that our standard of review is de novo and we owe no
deference to the trial court’s ruling. Thus, defendant suffers no prejudice from arguments
allegedly raised for the first time in plaintiff’s opening appellate brief, concerning the purely

6
At oral argument before this court, defendant tried to raise for the first time an argument that its
use of plaintiff’s fingerprints qualified under a statutory exemption for business transactions. New and
novel arguments cannot be raised for the first time at oral argument. Ill. S. Ct. R. 341(h)(7) (eff. Nov. 1,
2017) (“Points not argued are waived and shall not be raised *** in oral argument, or on petition for
rehearing.”).

-6-
 legal issue that defendant concedes is squarely before us. Begay, 2018 IL App (1st) 150446,
¶ 34 (de novo review means that an appellate court performs the same analysis that a trial judge
would perform).

¶ 34 III. Standing
¶ 35 Defendant claims that, without an injury beyond the statutory violation, plaintiff lacks
standing to pursue a claim under the Act.
¶ 36 “The purpose of the standing doctrine is to ensure that courts are deciding actual, specific
controversies and not abstract ones.” Maschek v. City of Chicago, 2015 IL App (1st) 150520,
¶ 84 (citing In re M.I., 2013 IL 113776, ¶ 32). For example, “[i]f a person cannot demonstrate
that a statute was applied unconstitutionally to himself, then he may not challenge the statute
on the ground that ‘ “it might conceivably be applied unconstitutionally in some hypothetical
case” ’ against someone else.” Maschek, 2015 IL App (1st) 150520, ¶ 84 (quoting In re M.I.,
2013 IL 113776, ¶ 32, quoting People v. Wisslead, 108 Ill. 2d 389, 397 (1985)).
¶ 37 “Under Illinois law, lack of standing is an affirmative defense, which is the defendant’s
burden to plead and prove.” Lebron v. Gottlieb Memorial Hospital, 237 Ill. 2d 217, 252 (2010).

¶ 38 IV. Statutory Interpretation
¶ 39 This appeal requires us to interpret the words of the Act and decide what the Act requires.
¶ 40 “With statutory construction, our primary goal is to ascertain the legislat[ors’] intent, and
the best indication of their intent is the plain and ordinary meaning of the words they chose to
use.” People v. Miles, 2017 IL App (1st) 132719, ¶ 25; State ex rel. Pusateri v. Peoples Gas
Light & Coke Co., 2014 IL 116844, ¶ 8 (citing Citizens Opposing Pollution v. ExxonMobil
Coal U.S.A., 2012 IL 111286, ¶ 23).
¶ 41 “When a statute does not define its own terms, a reviewing court may use a dictionary to
ascertain the plain and ordinary meaning of those terms.” Maschek, 2015 IL App (1st) 150520,
¶ 56 (citing People v. McChriston, 2014 IL 115310, ¶ 15, and People v. Bingham, 2014 IL
115964, ¶ 55); see also People v. Chapman, 2012 IL 111896, ¶ 24 (“When a statute contains a
term that is not specifically defined, it is entirely appropriate to look to the dictionary to
ascertain the plain and ordinary meaning of the term.”). “[C]ourts and lawyers frequently rely
on Black’s Law Dictionary to define terms ***.” Maschek, 2015 IL App (1st) 150520, ¶ 57
(citing McChriston, 2014 IL 115310, ¶ 17).
¶ 42 “When interpreting a statute, we do not read a portion of it in isolation; instead, we read it
in its entirety, keeping in mind the subject it addresses and the drafters’ apparent objective in
enacting it.” Miles, 2017 IL App (1st) 132719, ¶ 25; People v. Chatman, 2016 IL App (1st)
152395, ¶ 30. When considering the drafters’ objective, we examine the problems that the
legislature intended to remedy with the law and the consequences of construing it one way or
the other. People v. Almond, 2015 IL 113817, ¶ 34 (we “consider the reason for the law and the
problems intended to be remedied”); People v. Eppinger, 2013 IL 114121, ¶ 21 (legislative
intent may be ascertained by considering “the statute in its entirety, its nature and object, and
the consequences of construing it one way or the other”).
¶ 43 “In addition, whenever possible, every word, clause, and sentence is to be given reasonable
meaning and shall not be treated as superfluous or rendered void.” Mulry v. Berrios, 2017 IL
App (1st) 152563, ¶ 9; People v. Harmon, 2015 IL App (1st) 122345, ¶ 68 (“one of the

-7-
 principles of statutory interpretation is that we should give effect to every word and section of
the statute”); Speedy Gonzalez Landscaping, Inc. v. O.C.A. Construction, Inc., 385 Ill. App. 3d
699, 701 (2008) (“ ‘If possible, courts must give effect to every word, clause, and sentence and
may not read a statute so as to render any part, inoperative, superfluous, or insignificant.’ ”
(quoting Newland v. Budget Rent-A-Car Systems, Inc., 319 Ill. App. 3d 453, 456 (2001)).
¶ 44 Where the language is plain and unambiguous, we apply the statute without resort to
further aids of statutory interpretation. In re Lance H., 2014 IL 114899, ¶ 11; Krohe v. City of
Bloomington, 204 Ill. 2d 392, 395 (2003); Maschek, 2015 IL App (1st) 150520, ¶ 44 (“If the
statutory language is clear, we must apply it, without resort to any aids of statutory
construction.”). “If, and only if, the statutory language is ambiguous, we may look to other
sources to ascertain the legislature’s intent.” Maschek, 2015 IL App (1st) 150520, ¶ 44 (citing
Krohe, 204 Ill. 2d at 395). “These other sources include primarily the statute’s legislative
history and debates.” Maschek, 2015 IL App (1st) 150520, ¶ 44 (citing Krohe, 204 Ill. 2d at
398). “When interpreting an ambiguous phrase in a statute, our supreme court looks especially
to the remarks of a bill’s sponsor.” Maschek, 2015 IL App (1st) 150520, ¶ 62 (citing Krohe,
204 Ill. 2d at 398); see also In re Pension Reform Litigation, 2015 IL 118585, ¶ 68 (giving
more weight to the remarks of “the chief sponsor of the legislation”); Julie Q. v. Department of
Children & Family Services, 2013 IL 113783, ¶ 31 (quoting the sponsor’s remarks when
interpreting a statute). “The remarks made immediately prior to passage are particularly
important.” Maschek, 2015 IL App (1st) 150520, ¶ 62 (citing Poris v. Lake Holiday Property
Owners Ass’n, 2013 IL 113907, ¶¶ 51-53 (quoting the sponsors’ remarks in order to interpret a
statute and noting that, following these remarks, the bill passed)).
¶ 45 “[W]hile we may turn to other codes, we should only do so when the codes share similar
goals and related subjects.” Maschek, 2015 IL App (1st) 150520, ¶ 71 (citing Carter v. SSC
Odin Operating Co., 2012 IL 113204, ¶ 37). A statute should be “ ‘construed in conjunction
with other statutes touching on the same or related subjects’ ” “ ‘considering the reason and
necessity for the law, the evils to be remedied, and the objects and purposes to be obtained.’ ”
Maschek, 2015 IL App (1st) 150520, ¶ 71 (quoting Carter, 2012 IL 113204, ¶ 37); People v.
Steppan, 105 Ill. 2d 310, 321 (1985) (“Because the statutes under consideration have different
goals and purposes,” they need not be compared.); People v. Williams, 376 Ill. App. 3d 875,
892 (2007) (considering “similar statutes”).
¶ 46 Like section 2-615 dismissals, questions of statutory interpretation are also reviewed
de novo. People v. Schlosser, 2017 IL App (1st) 150355, ¶ 28; Chatman, 2016 IL App (1st)
152395, ¶ 23. As we observed above, “[d]e novo review means that we will perform the same
analysis a trial court would perform.” Trzop v. Hudson, 2015 IL App (1st) 150419, ¶ 63.

¶ 47 V. The Act
¶ 48 At issue in this appeal is the meaning of the word “aggrieved” as used in the Act. The word
“aggrieved” appears in section 20 of the Act. Since section 20 is the section primarily at issue
in this appeal, we provide it below in full:
“Right of Action. Any person aggrieved by a violation of this Act shall have a right of
action in a State circuit court or as a supplemental claim in federal district court against
an offending party. A prevailing party may recover for each violation:
(1) against a private entity that negligently violates a provision of this Act,
liquidated damages of $1,000 or actual damages, whichever is greater;

-8-
 (2) against a private party that intentionally or recklessly violates a provision of
this Act, liquidated damages of $5,000 or actual damages, whichever is greater;
(3) reasonable attorneys’ fees and costs, including expert witness fees and other
litigation expenses; and
(4) other relief, including an injunction, as the State or federal court may deem
appropriate.” 740 ILCS 14/20 (West 2016).

¶ 49 A. Plain Language
¶ 50 The plain language of the Act states that any person “aggrieved by a violation of this Act”
may sue. 740 ILCS 14/20 (West 2016). It does not state that a person aggrieved by a violation
of this Act—plus some additional harm—may sue. If the drafters had intended to limit the pool
of plaintiffs to those plaintiffs who had been both aggrieved by a violation of the Act and
aggrieved by some additional harm or injury, they could have easily stated that. However, they
chose to state only “a violation of this Act.” 740 ILCS 14/20 (West 2016). Thus, the plain
language of the Act supports plaintiff’s right to sue. See, e.g., Miles, 2017 IL App (1st)
132719, ¶ 25 (“the best indication” of the drafters’ intent is “the plain and ordinary meaning of
the words they chose to use”); supra ¶ 40.
¶ 51 The Act, quoted above, also provides for either “liquidated damages” or “actual damages,”
thereby establishing that actual damages are not required to obtain relief under the Act. 740
ILCS 14/20 (West 2016). Thus, the overall structure of the Act also supports plaintiff’s right to
sue. See, e.g., Miles, 2017 IL App (1st) 132719, ¶ 25 (when interpreting a statute, “we read it in
its entirety”); supra ¶ 42.
¶ 52 In Black’s Law Dictionary, the first definition of “aggrieved” is “having legal rights that
are adversely affected.” Black’s Law Dictionary 73 (8th ed. 2004); see, e.g., Maschek, 2015 IL
App (1st) 150520, ¶ 57 (courts “frequently rely on Black’s Law Dictionary”); supra ¶ 41. In
other words, the Act provides plaintiff with “legal rights” that she alleges were “adversely
affected” by the Act’s violation. Defendant quotes this definition in its brief to this court, and
we agree that it is persuasive. But applying the words of this definition to the facts of this case
supports plaintiff’s right to sue.
¶ 53 Similarly, while the first definition in Dictionary.com is “wronged,” the second definition,
which is specifically marked “Law,” is “deprived of legal rights.” http://www.dictionary.com/
browse/aggrieved (last visited Sept. 27, 2018) [https://perma.cc/UBX9-JG7S]; see, e.g.,
Chapman, 2012 IL 111896, ¶ 25 (consulting a dictionary to define a statutory term); Maschek,
2015 IL App (1st) 150520, ¶ 56 (“a reviewing court may use a dictionary to ascertain the plain”
meaning of a word); supra ¶ 41. Plaintiff alleges that the Act provided her with “legal rights,”
and that she was “deprived of [these] legal rights” by defendant’s violation of the Act. Again,
applying the words of this definition supports plaintiff’s right to sue.
¶ 54 Defendant argues that interpreting the Act to require only a violation for standing renders
the word “aggrieved” superfluous. E.g., Mulry, 2017 IL App (1st) 152563, ¶ 9 (no word shall
“be treated as superfluous”); supra ¶ 43. Defendant argues that the use of the word “aggrieved”
shows that the Act requires something more than just a violation. However, defendant’s
interpretation requires a tortured reading of the following sentence: “[a]ny person aggrieved by
a violation of this Act shall have a right of action.” 740 ILCS 14/20 (West 2016). The word
“aggrieved” is what connects “person” to the “Act” and, thus, it is not superfluous. In other

-9-
 words, it cannot be that any person, who finds a violation of the Act, may sue. Instead, it must
be a person whose privacy rights under the Act were “aggrieved by” the violation. Thus, we are
not persuaded by defendant’s argument that the word “aggrieved” is superfluous unless we
require additional harm.
¶ 55 Defendant argues that “the status of ‘a person aggrieved’ is separate from the ‘violation’ of
the statute.” Defendant argues that section 20 “separates a violation from the status of a subject
being a ‘person aggrieved’ by that violation.” Again, defendant’s argument requires a tortured
reading of the following, fairly simple sentence: “Any person aggrieved by a violation of this
Act shall have a right of action.” 740 ILCS 14/20 (West 2016). The words “aggrieved by”
connect “person” to the “violation,” rather than separate them. This can be easily found if you
try to remove the words “aggrieved by” from the sentence. If you removed the words
“aggrieved by,” you would have to replace them with something. You could not state: “Any
person *** a violation of this Act shall have a right of action.” 740 ILCS 14/20 (West 2016).
That line would make no sense. You would have to replace the words “aggrieved by” with
another phrase connecting “person” to “violation,” such as “subjected to.” Thus, the words
“aggrieved by” are neither superfluous nor a divider.

¶ 56 B. Legislative Purpose and History
¶ 57 If the words of a statute are ambiguous, and only if they are ambiguous, may we turn to
other aides, such as legislative history. E.g., Maschek, 2015 IL App (1st) 150520, ¶ 44; see also
supra ¶ 44. While we do not find that the words were ambiguous, we do find that the legislative
purpose and history further supports our conclusion that plaintiff has standing to sue under the
Act.
¶ 58 The legislative purpose is easy to discern because the legislators provided a section in the
Act entitled: “Legislative findings; intent.” 740 ILCS 14/5 (West 2016). In this section, the
drafters explained that “[a]n overwhelming majority of the public” are apprehensive about the
use of biometric identifiers and, as a result, they are “deterred from partaking in biometric
identifier-facilitated transactions.” 740 ILCS 14/5(d) (West 2016). Acknowledging the
reasonableness of these fears, the drafters found that “[t]he full ramifications of biometric
technology are not fully known.” 740 ILCS 14/5(f) (West 2016). A biometric identifier, “once
compromised,” leaves an individual with no replacement options and, thus, “no recourse.” 740
ILCS 14/5(c) (West 2016). Thus, the drafters concluded that the public would “be served by
regulating the collection, use, safeguarding, handling, storage, retention and destruction of
biometric identifiers and information.” 740 ILCS 14/5(g) (West 2016). Putting these
regulations in place would further the selection by “[m]ajor national corporations” of “the City
of Chicago and other locations in this State as pilot testing sites for new applications of
biometric-facilitated financial transactions, including finger-scan technologies.” 740 ILCS
14/5(b) (West 2016).
¶ 59 Based on the above findings, defendant argues that the Act provides redress only once a
person’s biometric data has actually been compromised and that a person may then sue for the
“resulting harm.” However, the whole purpose of the Act is to prevent any harm from
occurring in the first place, thereby reassuring the public, who will then be willing to
participate in this new technology. Waiting until the harm has already occurred is too late
because, as the drafters found, once a person’s biometric identifiers have been compromised,
there is simply “no recourse” for prevention. 740 ILCS 14/5(c) (West 2016). A person cannot

- 10 -
 obtain new DNA or new fingerprints or new eyeballs for iris recognition, at least not easily or
not at this time. Replacing a biometric identifier is not like replacing a lost key or a misplaced
identification card or a stolen access code. The Act’s goal is to prevent irretrievable harm from
happening and to put in place a process and rules to reassure an otherwise skittish public.
Forcing a member of the public to wait until after an irretrievable harm has already occurred in
order to sue would confound the very purpose of the Act. Thus, the stated findings of the
drafters do not support defendant’s claims and argument.
¶ 60 In addition, the trial court ordered the parties on December 8, 2016, to file supplemental
briefs specifically “concerning the legislative history” of the Act, and both parties complied.
Thus, the issue of legislative history has been thoroughly briefed and argued on the record
before us.
¶ 61 In its supplemental brief to the trial court, defendant observed that “the legislative history is
notably silent on the intent and purpose of Section 20,” which provides the right to sue and
contains the disputed “aggrieved by” language. Similarly, in her supplemental brief to the trial
court, plaintiff agreed that section 20 “received little to no comment in the floor debates on the
bill.”
¶ 62 In their supplemental briefs, both parties paid particular attention to the remarks of
Representative Kathleen Ryg, the House sponsor, immediately before the House’s passage of
the Act. E.g., Maschek, 2015 IL App (1st) 150520, ¶ 62 (a reviewing court pays particular
attention to the remarks of a bill’s sponsor and to the remarks immediately prior to passage);
see also supra ¶ 44.
¶ 63 Representative Ryg explained that the Act “sets collection and retention standards while
prohibiting the sale of biometric information.” 95th Ill. Gen. Assem., House Proceedings, May
30, 2008, at 249 (statement of Representative Ryg). She explained the impetus for the Act as
follows:
“This Bill is especially important because one of the companies that has been piloted in
Illinois, Pay By Touch, is the largest fingerprint scan system in Illinois and they have
recently filed for bankruptcy and wholly stopped providing verification services in
March of 2008. This pullout leaves thousands of customers from Albertson’s, Cub
Foods, Farm Fresh, Jewel Osco, Shell, and Sunflower Market, wondering what will
become of their biometric and financial data. The California Bankruptcy Court recently
approved the sale of their Pay By Touch database. So, we are in very serious need of
protections for the citizens of Illinois when it comes to biometric information. I know
of no opposition to the legislation and I’ll attempt to answer any questions.” 95th Ill.
Gen. Assem., House Proceedings, May 30, 2008, at 249 (statement of Representative
Ryg).
There were no questions and no discussion. The bill proceeded immediately to a vote and
passed the House. It was subsequently passed by the Senate on July 10, 2008, and signed into
law by the governor on October 3, 2008.
¶ 64 Representative Ryg’s remarks establish that the primary impetus behind the bill was to
alleviate the fears of “thousands of customers *** wondering what will become of their
biometric and financial data” and to provide them with protections. 95th Ill. Gen. Assem.,
House Proceedings, May 30, 2008, at 249 (statement of Representative Ryg). Similarly,
plaintiff’s complaint alleges that plaintiff “experiences mental anguish and injury when
thinking about what would happen to her biometric data” if defendant went bankrupt or shared

- 11 -
 her biometric data. Thus, plaintiff’s allegations, which we must accept as true at this early
stage of the litigation, are similar to the fears that the Act’s sponsor sought to allay with the
Act’s passage. See Bogenberger, 2018 IL 120951, ¶ 23 (when determining whether the
allegations of the complaint, when construed in the light most favorable to the plaintiff, are
sufficient to state a cause of action, we must take all well-pleaded facts in the complaint as
true).
¶ 65 Defendant argues that Representative Ryg’s remarks establish that the drafters’ primary
concern was the sale of biometric data and that, since plaintiff has not alleged “the use of
biometric data by unintended parties,” she lacks the type of injury needed for suit. Although
plaintiff has not alleged a sale, she has alleged that defendant disclosed its customers’
biometric data to a third-party out-of-state vendor. Thus, even if we were persuaded by
defendant’s argument, we must find that plaintiff’s allegations of disclosure, which defendant
has yet to deny, satisfied that concern.

¶ 66 C. Other Statutes
¶ 67 The parties cite other statutes that use the term “aggrieved.” However, most of these
statutes do not share similar goals or related subjects. “[W]hile we may turn to other codes, we
should only do so when the codes share similar goals and related subjects.” Maschek, 2015 IL
App (1st) 150520, ¶ 71 (a statute should be “ ‘construed in conjunction with other statutes
touching on the same or related subjects’ ” “ ‘considering the reason and necessity for the law,
the evils to be remedied, and the objects and purposes to be obtained’ ” (quoting Carter, 2012
IL 113204, ¶ 37)); Steppan, 105 Ill. 2d at 321 (“Because the statutes under consideration have
different goals and purposes,” they need not be compared); Williams, 376 Ill. App. 3d at 892
(considering “similar statutes”).
¶ 68 Of the various statutes, the closest one for comparison’s sake is the AIDS Confidentiality
Act (410 ILCS 305/1 et seq. (West 2016)). Its “Right of Action” section (410 ILCS 305/13
(West 2016)) is virtually identical to the “Right of Action” section, or section 20, in the Act at
issue (740 ILCS 14/20 (West 2016)). Section 13 in the AIDS Confidentiality Act provides in
full:
“Any person aggrieved by a violation of this Act or of a regulation promulgated
hereunder shall have a right of action in the circuit court and may recover for each
violation:
(1) Against any person who negligently violates a provision of this Act or the
regulations promulgated hereunder, liquidated damages of $2,000 or actual damages,
whichever is greater.
(2) Against any person who intentionally or recklessly violates a provision of this
Act or the regulations promulgated hereunder, liquidated damages of $10,000 or actual
damages, whichever is greater.
(3) Reasonable attorney fees.
(4) Such other relief, including an injunction, as the court may deem appropriate.”
410 ILCS 305/13 (West 2016).
¶ 69 In comparing section 13 of the AIDS Confidentiality Act with section 20 (quoted supra
¶ 48), we observe that the two sections are quite similar. Both sections provide a right of action
to “[a]ny person aggrieved by a violation of this Act.” 410 ILCS 305/13 (West 2016); 740

- 12 -
 ILCS 14/20 (West 2016). Both sections provide recovery against a person who “negligently
violates a provision of this Act” or “intentionally or recklessly violates a provision of this Act.”
410 ILCS 305/13(1), (2) (West 2016); 740 ILCS 14/20(1), (2) (West 2016). Both provide for
liquidated or actual damages, “whichever is greater.” 410 ILCS 305/13(1), (2) (West 2016);
740 ILCS 14/20(1), (2) (West 2016). Both sections provide for reasonable attorney fees, as
well as “other relief, including an injunction.” 410 ILCS 305/13(3), (4) (West 2016); 740 ILCS
14/20(3), (4) (West 2016).
¶ 70 In addition, the two statutes have similar purposes. Like the Act at issue in our case, the
AIDS Confidentiality Act also has a section stating its purpose and legislative findings. 410
ILCS 305/2 (West 2016). The purpose of the AIDS Confidentiality Act is to relieve the fears of
people about being tested for AIDS and to protect against unauthorized disclosure (410 ILCS
305/2 (West 2016) (members of the public “fear that test results *** will be disclosed without
their intent)); similarly, the purpose of the Act at issue is to relieve the fears of people in using
and relying on new technology and to protect against unauthorized disclosure (740 ILCS 14/5
(West 2016); supra ¶¶ 58-59). In both situations, disclosure can create irreparable harm.
¶ 71 Faced with a similar “right of action” section, the appellate court found that, in a suit under
the AIDS Confidentiality Act, a person could recover liquidated damages without proof of
actual damages. Doe v. Chand, 335 Ill. App. 3d 809, 822 (2002). In the 2 to 1 decision, all three
justices agreed on that point. The only point of difference was, if a plaintiff claimed actual
damages, whether those actual damages had to be shown by evidence such as “medical bills,
lost wages, or other out-of-pocket expenses” (Chand, 335 Ill. App. 3d at 822) or whether actual
damages could include compensation “for the mental anguish” caused by the unauthorized
disclosures (Chand, 335 Ill. App. 3d at 823 (Kuehn, J., concurring in part and dissenting in
part)). However, the panel unanimously agreed that a person could recover liquidated damages
without proof of actual damages. Chand, 335 Ill. App. 3d at 824 (Kuehn, J., concurring in part
and dissenting in part) (“I concur in all other aspects of the majority opinion.”).
¶ 72 Thus, our review of a statute that is similar in purpose and wording to the Act at issue
further supports our finding that plaintiff may sue for a violation of the Act without proving
additional harm.

¶ 73 VI. Rosenbach
¶ 74 To date, the only Illinois state appellate court panel to discuss the meaning of “aggrieved
by” in section 20 of the Act is the Second District case of Rosenbach. In Rosenbach, plaintiff
alleged that, when her minor son purchased a season pass for a Great America theme park,
defendant Six Flags Entertainment Corporation fingerprinted him without obtaining any
consent or disclosing its plan for the collection, storage, use or destruction of its customers’
biometric identifiers. Rosenbach, 2017 IL App (2d) 170317, ¶ 1. Plaintiff alleged that, if she
had known, she would not have allowed her son to purchase the pass. Rosenbach, 2017 IL App
(2d) 170317, ¶ 1. The trial court in Rosenbach denied defendant’s motion to dismiss but then
certified questions for review that asked whether a person aggrieved by a violation of the Act
must allege an injury or harm in addition to the violation of the Act. Rosenbach, 2017 IL App
(2d) 170317, ¶ 15. The Rosenbach court found that it had to find that an additional harm was
required; otherwise the word “aggrieved” in the Act would be rendered superfluous.
Rosenbach, 2017 IL App (2d) 170317, ¶ 23. We already examined this argument above (supra
¶¶ 54-55) and found it unpersuasive.

- 13 -
¶ 75 The Rosenbach court concluded: “If a person alleges only a technical violation of the Act
without alleging any injury or adverse effect, then he or she is not aggrieved and may not
recover under any of the provisions in section 20. We note, however, that the injury or adverse
effect need not be pecuniary.” Rosenbach, 2017 IL App (2d) 170317, ¶ 28; see Chand, 335 Ill.
App. 3d at 823 (Kuehn, J., concurring in part and dissenting in part) (actual damages may
include compensation “for the mental anguish” caused by unauthorized disclosures).
¶ 76 Even if we were persuaded by Rosenbach’s finding, we would still conclude that plaintiff’s
allegations in the case at bar were sufficient to support a cause of action. Unlike the plaintiff in
Rosenbach, plaintiff in our case did allege an “injury or adverse effect,” as Rosenbach
required. Rosenbach, 2017 IL App (2d) 170317, ¶ 28. Specifically, she alleged (1) an injury to
her legal right to privacy of her own biometric information by the disclosure of this
information to an out-of-state third party vendor and (2) mental anguish.
¶ 77 As to the first, the Act safeguards an individual’s right to privacy with respect to biometric
information, by prohibiting private entities from obtaining such information without a written
release from the subject. 740 ILCS 14/15(b) (West 2016). As we discuss in further detail below
(infra ¶ 79), a federal district court found both that the Act “create[d] a legal right to privacy in
personal biometric data” (Dixon, 2018 WL 2445292, at *9) and that the disclosure to a
third-party out-of-state vendor constituted an injury to this right and thereby conferred
standing, even under Rosenbach (Dixon, 2018 WL 2445292, at *10, 12). To be clear, we find
that the statutory violations to plaintiff’s privacy constituted harm even without disclosure, but
the disclosure in the case at bar makes it distinguishable from Rosenbach.
¶ 78 As to the second, plaintiff specifically alleged mental anguish in her complaint:
“As a result of [defendant]’s conduct, [plaintiff] has suffered emotional upset,
mental anguish, and mental injury. For example, [plaintiff] experiences mental anguish
and injury when thinking about what would happen to her biometric data if [defendant]
goes bankrupt, if [defendant]’s franchisor, L.A. Tan Enterprises, Inc., goes bankrupt,
whether [defendant] will ever delete her biometric data, and whether (and to whom)
[defendant] shares her biometric data.”
Cf. Chand, 335 Ill. App. 3d at 823 (Kuehn, J., concurring in part and dissenting in part) (actual
damages may include “mental anguish”); Dixon, 2018 WL 2445292, at *10 (since the court
found that harm to the plaintiff’s “right to privacy in her biometric data” constituted a
“concrete injury,” it did not “address” whether her claim of mental anguish also constituted an
additional injury).7 Thus, even if we were persuaded by Rosenbach, we would have to find
that it is distinguishable from the facts of the instant case, and therefore it does not control the
outcome here.

7
In Gubala v. Time Warner Cable, 846 F.3d 909, 913 (7th Cir. 2017), Justice Posner observed
about the plaintiff in front of him: “Maybe what he’s trying to say is that he fears [the defendant] will
give away the [plaintiff’s personal] information and it will be used to harm him ***. But he hasn’t said
any of that.” (Emphasis omitted.) As a result, the Seventh Circuit found that the plaintiff failed to allege
an article III injury needed to sue under the federal Cable Communications Policy Act (47 U.S.C.
§ 551(e) (2012)). Gubala, 846 F.3d at 910, 913. By contrast, in the case at bar, plaintiff has alleged her
fears and resulting mental anguish.

- 14 -
¶ 79 After Rosenbach was decided, an Illinois federal district court distinguished it, for virtually
the same reasons that we do here.8 In Dixon, 2018 WL 2445292, at *1, the plaintiff alleged that
her employer required her to clock in and out of work by scanning her fingerprints into a
biometric timekeeping device. As in the case at bar, the defendant disclosed her biometric
identifiers to an out-of-state third party vendor without her consent or knowledge. Dixon, 2018
WL 2445292, at *12. Before considering whether plaintiff had standing under the Act, the
federal district court first considered whether she had alleged “an injury in fact sufficient for
[federal] Article III standing.” Dixon, 2018 WL 2445292, at *8. After examining the Act’s
stated legislative findings and substantive provisions, the federal court concluded that the
Illinois legislature intended “to create a legal right to privacy in personal biometric data.”
Dixon, 2018 WL 2445292, at *9.
¶ 80 Turning to the case before it, the federal court observed that the plaintiff had “alleged that
[defendant] disclosed her fingerprint data to [the third-party vendor] without her knowledge”
and, thus, “violated her right to privacy in her biometric information—the very right that the
drafters of [the Act] sought to protect.” Dixon, 2018 WL 2445292, at *9. The federal court
found that “this alleged violation of the right to privacy in and control over one’s biometric
data, despite being an intangible injury, is sufficiently concrete to constitute an injury in fact
that supports [federal] Article III standing.” Dixon, 2018 WL 2445292, at *10. The federal
court then found that Rosenbach was distinguishable for the same reason, namely, that the
plaintiff in the case before it, unlike the Rosenbach plaintiff, had alleged an actual injury,
specifically “an injury to a privacy right.” Dixon, 2018 WL 2445292, at *12. The federal court
explained that, since “obtaining or disclosing a person’s biometric data without her consent or
knowledge constitutes an actual and concrete injury because it infringes on the right to privacy
in that data, this case is distinguishable from Rosenbach.” Dixon, 2018 WL 2445292, at *12. In
this regard as well, plaintiff’s claim here is also distinguishable.
¶ 81 The federal court also found that other cases cited by the defendant were distinguishable
for this reason as well. The federal court stated that the plaintiff had “alleged what the plaintiffs
in McCollough [v. Smarte Carte, Inc., No. 16 C 03777, 2016 WL 4077108 (N.D. Ill. Aug. 1,
2016)], Vigil [v. Take-Two Interactive Software, Inc., 235 F. Supp. 3d 499 (S.D.N.Y. 2017)9]
and Gubala[, 846 F.3d at 913] did not. Specifically, she has alleged that [the defendant]
disclosed her fingerprint scan to [a third-party out-of-state vendor] without informing her or
obtaining her consent to do so.” Dixon, 2018 WL 2445292, *10. In the case at bar, defendant

8
While decisions from lower federal courts are not binding, we may consider whether we find
persuasive the logic and reasoning expressed therein. Rosenbach, 2017 IL App (2d) 170317, ¶ 21.
However, when reading a federal decision, we must keep in mind the differences, such as that federal
courts are subject to article III in the federal constitution, while state courts are not. “Under Illinois law,
lack of standing is an affirmative defense, which is the defendant’s burden to plead and prove.” Lebron,
237 Ill. 2d at 252. By contrast, in federal court, the injury conferring standing may also be needed to
confer article III subject-matter jurisdiction, and without it, a federal court may have no power to act.
E.g., Santana v. Take-Two Interactive Software, Inc., 717 Fed. App’x 12, 17-18 (2d Cir. 2017).
9
Vigil was affirmed in part, vacated in part, and remanded by summary order in Santana, 717 Fed.
App’x. at 18. The Second Circuit vacated the part where the district court held that the plaintiffs lacked
standing under the Act. Santana, 717 Fed. App’x. at 18. However, the Second Circuit vacated that part
only because, without an article III injury, the district court lacked the subject-matter jurisdiction
needed to consider any substantive issues. Santana, 717 Fed. App’x at 17.

- 15 -
 also cites McCollough and Vigil, and we do not find them persuasive for the same reason as the
Dixon court.

¶ 82 CONCLUSION
¶ 83 For the foregoing reasons, we reverse the trial court’s section 2-615 dismissal of count I of
plaintiff’s complaint and remand for further proceedings consistent with this opinion.
¶ 84 First, we find that the trial court was initially correct and that, pursuant to both the plain
language of the statute itself and its legislative history and purpose, the Act does not require a
harm in addition to a violation of the Act in order to file suit. The Act states, very simply, that
any person “aggrieved by a violation of this Act” may sue. 740 ILCS 14/20 (West 2016). It
does not state that a person aggrieved by a violation of this Act—plus some additional
harm—may sue.
¶ 85 Second, we find that, even if Rosenbach was correctly decided and an additional “injury or
adverse effect” is required, Rosenbach is distinguishable from this case, in the following two
ways. Rosenbach, 2017 IL App (2d) 170317, ¶ 28 (requiring an “injury or adverse effect,” in
addition to violation of the Act). First, as the federal district court similarly found, disclosure to
an out-of-state third-party vendor constitutes an injury or adverse effect, and plaintiff in the
instant case alleged such a disclosure, while the Rosenbach plaintiff did not. Dixon, 2018 WL
2445292, *10, 12. Second, the mental anguish that plaintiff alleges in her complaint also
constitutes an injury or adverse effect. E.g., Chand, 335 Ill. App. 3d at 823 (Kuehn, J.,
concurring in part and dissenting in part) (actual damages may include “mental anguish”). For
these reasons, we must reverse and remand.
¶ 86 “We note, in closing, that the legislature has broad latitude and discretion in drawing
statutory classifications to benefit the general welfare. [Citation.] The responsibility for the
wisdom of legislation rests with the legislature, and courts may not rewrite statutes to make
them consistent with the court’s idea of orderliness or public policy. [Citation.] Whether a
windfall results in this circumstance—and it is far from clear that it does ***—is not for us to
decide. Our function is to ascertain the intent of the legislature as expressed in the language and
framework of its statutory enactments. If this interpretation is not what the legislature intended,
we urge legislators to revisit this issue and make their intent manifest.” (Emphasis in original.)
Citibank, N.A. v. Illinois Department of Revenue, 2017 IL 121634, ¶ 70.

¶ 87 Reversed and remanded.

- 16 -