Steak 'n Shake sued for alleged facial biometric violations
Steak 'n Shake is facing a class action lawsuit for allegedly violating the Biometric Information Privacy Act (BIPA). The suit claims the company illegally collected facial biometric data from customers using PopID kiosks.
The chain is alleged to have illegally collected face biometrics at its ordering kiosks.
Key facts
- What
- Steak 'n Shake is facing a class action lawsuit for allegedly violating the Biometric Information Privacy Act (BIPA).
- Incident date
- Jan 1, 2022
- Who
- Steak 'n Shake
- Failure mode
- Policy Violation
- AI surface
- Computer Vision
- Severity
- Medium
What happened
Steak 'n Shake deployed self-service ordering kiosks using PopID's facial recognition technology. A class action lawsuit was filed alleging that the company illegally collected facial biometric information from Illinois residents without proper consent. The lawsuit claims these actions violated the Biometric Information Privacy Act (BIPA).
What broke inside the model
- 01 · TriggerA prompt pushes against a deployment boundary.
- 02 · Model stepThe model produces the disallowed output.
- 03 · Control gapNo enforcement blocks it at generation time.
- 04 · FailureThe output crosses the policy line.
- 05 · ConsequenceA limit the business set is breached in public.
The output crosses a policy boundary the deployment had defined.
The lawsuit alleges the company did not implement a legally compliant consent and notice mechanism for the collection of facial biometric data, which the suit says resulted in the capture of biometric identifiers without the required authorization from customers.
What it cost
Sources
- PressSteak 'n Shake face pay kiosks from PopID draw BIPA class actionbiometricupdate.com
- PressSteak 'n Shake class action alleges ordering kiosks collect biometric datatopclassactions.com
Cite this entry
https://failureindex.ai/failures/steak-shake-sued-alleged-facial-biometricAI Failure Index. "Steak 'n Shake sued for alleged facial biometric violations" (FI-0546). Realm Labs. https://failureindex.ai/failures/steak-shake-sued-alleged-facial-biometric (indexed Jun 16, 2026).Data fields CC-BY 4.0, prose citation permitted. Incident ID FI-0546. Full dataset at /data.
Note from Realm Labs, the Index steward
How Realm fits
- Prism
- OmniGuard
This entry sits in the index's predictive wing: a system that scores, ranks, perceives, or steers rather than generates. Realm's runtime layer is built for the generative and agentic systems now moving into these same decision seats, where it watches a model's internal state and holds an unsupported claim or an unchecked action before it commits. The control gap on this record, an automated decision that reached people with no runtime check in front of it, is the same gap. The index keeps predictive failures on the record because the pattern carries straight into the systems shipping today.