Charlotte Tilbury, a renowned online cosmetics brand, has agreed to a $2.925 million settlement in a class action lawsuit alleging violations of the Illinois Biometric Information Privacy Act (BIPA). The lawsuit accused Charlotte Tilbury of several privacy infringements, including collecting and storing users' facial geometry scans without informed written consent, failing to disclose data collection and retention policies, and sharing users' biometric information with third parties without notification. These allegations underline the importance of privacy laws in the context of new technologies such as virtual "try-on" tools. This settlement signifies a critical turning point in the intersection of consumer privacy, data protection, and the burgeoning beauty tech industry. While Charlotte Tilbury denies the allegations, the company has agreed to comply with BIPA and compensate affected Illinois residents. This case could potentially influence other companies that use similar technologies to review and revise their privacy policies, and serves as a reminder of the importance of transparency and consent in data collection practices. The case also underscores the significance of BIPA, a state law that has been at the forefront of consumer privacy and data breach class actions, and may inspire similar legislation in other states.