What a Lawyer Should Take From This Case Right Now

  • Status: anchor-backed draft. This page now pulls context from the LawZeee module anchors, but final posture, money, and latest docket movement still need primary-source verification.
  • Anchor modules: U.S. State Privacy Law: CCPA/CPRA and the State Patchwork
  • Core case point: Cothron v. White Castle System, Inc. — The Per-Scan Rule The Illinois Supreme Court's 2023 decision in Cothron v. White Castle System, Inc., 2023 IL 128004, resolved a critical question: does a BIPA cause of action accrue once — when the first violation occurs — or every time a biometric identifier is collected without compliant authorization? Holding: A separate BIPA cause of action accrues each time a private entity scans or transmits a biometric identifier without complying with the statute. This is the "per-scan" rule.
  • Why this matters: this case sits at the intersection of CCPA, CPRA, California Consumer Privacy Act, California Privacy Rights Act, Cal. Civ. Code 1798.100, which is why it keeps showing up in argument, advice, and training.

Non-Lawyers Summary

In the current LawZeee workspace, Cothron v. White Castle System, Inc., 2023 IL 128004 (Ill. 2023) is not being tracked as a dead citation. It is being used to teach a live legal consequence that flows from a specific technical or procedural fact pattern.

The anchor explanation currently says: "Cothron v. White Castle System, Inc. — The Per-Scan Rule The Illinois Supreme Court's 2023 decision in Cothron v. White Castle System, Inc., 2023 IL 128004, resolved a critical question: does a BIPA cause of action accrue once — when the first violation occurs — or every time a biometric identifier is collected without compliant authorization? Holding: A separate BIPA cause of action accrues each time a private entity scans or transmits a biometric identifier without complying with the statute. This is the "per-scan" rule." That is the bridge this tracker is supposed to preserve: what happened technically, why that mattered legally, and how the case gets used in practice.

What This Case Is Usually Cited For

  • U.S. State Privacy Law: CCPA/CPRA and the State Patchwork: Cothron v. White Castle System, Inc. — The Per-Scan Rule The Illinois Supreme Court's 2023 decision in Cothron v. White Castle System, Inc., 2023 IL 128004, resolved a critical question: does a BIPA cause of action accrue once — when the first violation occurs — or every time a biometric identifier is collected without compliant authorization? Holding: A separate BIPA cause of action accrues each time a private entity scans or transmits a biometric identifier without complying with the statute. This is the "per-scan" rule. (anchor module)
  • Technical or factual hinge: CCPA
  • Legal consequence: lawyers tend to cite this case when arguing about CCPA, CPRA, California Consumer Privacy Act, California Privacy Rights Act, Cal. Civ. Code 1798.100.
  • Controlling doctrine currently attached in the workspace: Cal. Civ. Code § 1798.100, Cal. Civ. Code § 1798.105, Cal. Civ. Code § 1798.106, Cal. Civ. Code § 1798.110
  • Why the bridge matters: the useful question is not "what is the case name," but "what technical boundary, procedural posture, or injury problem made the outcome move."

Filing-to-Judgment Timeline

StageWhat is already in the workspaceWhat to verify nextWhy it matters
Anchor coverageU.S. State Privacy Law: CCPA/CPRA and the State Patchwork already cite and explain the case.Pull the operative opinion, docket entry, or official case page.This turns a teaching citation into a usable working tracker.
Procedural postureThe module anchor explains why the case matters doctrinally.Confirm exact posture, court, date, and whether the cited point is holding, dicta, or procedural outcome.Prevents overreading a case beyond what it actually decided.
Outcome / moneyNo final money or relief data is assumed here unless verified from a primary source.Add any judgment, settlement, injunction, fee, or damages record only after source check.Keeps the page from turning allegations into outcomes.

Update Ledger

  • [verified] [2026-04-22] Replaced the blank tracker shell with anchor-module context for Cothron v. White Castle System, Inc., 2023 IL 128004 (Ill. 2023).
  • [update-needed] [future date] Add the primary-source opinion, docket, or official case page for the exact proposition this tracker is teaching.
  • [update-needed] [future date] Add exact posture, dates, and any money or remedy fields only after source verification.

What Is Already True Now

  • [verified] This case is currently anchored in the LawZeee modules: U.S. State Privacy Law: CCPA/CPRA and the State Patchwork.
  • [verified] The workspace already uses it for a specific doctrinal reason, not just as background color.
  • [verified] The page now reflects anchor-module context instead of blank placeholder prompts.

What Still Needs Verification

  • [verified] Exact filing-to-judgment chronology from a primary source.
  • [verified] Exact current posture and any later appellate or remedial developments.
  • [verified] Any money, injunction, restitution, fee, or settlement amount.
  • [inferred] Whether later cases narrowed, expanded, or distinguished the point for which this case is commonly cited.

How to Use This Case

  • Lawyer use: explain the doctrinal point quickly without losing the underlying technical fact pattern.
  • In-house use: identify whether your fact pattern really matches the technical or procedural hinge that made this case matter.
  • Bench / clerk / student use: separate the actual holding from the broader story lawyers like to tell around the case.
  • Training use: use the case as a compact lesson in how a specific technical event changes legal consequences.

Questions to Ask Before Citing It

  • What exact technical or procedural fact made the court care?
  • Is the proposition you want to cite actually the holding, or just a common gloss on the case?
  • Has later authority limited the point?
  • Are you using the case for a posture it did not actually reach?

Source Drill

  • What the anchor modules prove: why LawZeee currently teaches this case and what doctrinal job it is doing.
  • What the anchor modules do not prove: latest posture, finality, money, or later doctrinal erosion.
  • Next primary source to add: the operative opinion, docket, agency release, or official case page tied to the cited proposition.

Current Status / Final Outcome

This page is now stronger than the earlier blank draft, but it remains an anchor-backed tracker until a primary-source opinion, docket, or official case page is linked directly into the timeline and source notes.

Money / Penalties / Damages

ItemAmountStatusNotes
Claimed damages or requested reliefNot yet verified for this trackerunknownAdd only after a primary-source check.
Final verdict / settlement / fine / penaltyNone verified in this tracker yetunknownDo not infer a money result from the module anchor alone.
Fees / costs / restitution / other monetary reliefNone verified in this tracker yetunknownNeeds opinion or docket support.

Practical Takeaways

  • Facts alone are commodity; the asset is knowing which fact in the case changes the legal consequence.
  • Before citing the case, identify the actual hinge: access boundary, venue, standing, immunity, privacy injury, or another procedural or technical pivot.
  • Use the anchor modules as the starting point, not the stopping point.
  • Upgrade this page with the primary source before treating it as publication-ready.

Sources and Verification Notes

  • [verified] Module anchor(s): artifacts/modules/02f-state-privacy-laws-ccpa-cpra.md
  • [verified] Anchor modules: U.S. State Privacy Law: CCPA/CPRA and the State Patchwork
  • [verified] Current anchor context:
  • U.S. State Privacy Law: CCPA/CPRA and the State Patchwork: Cothron v. White Castle System, Inc. — The Per-Scan Rule The Illinois Supreme Court's 2023 decision in Cothron v. White Castle System, Inc., 2023 IL 128004, resolved a critical question: does a BIPA cause of action accrue once — when the first violation occurs — or every time a biometric identifier is collected without compliant authorization? Holding: A separate BIPA cause of action accrues each time a private entity scans or transmits a biometric identifier without complying with the statute. This is the "per-scan" rule. (anchor module)
  • [uncertain] Primary-source opinion, docket, or official case page still needs to be linked for full tracker confidence.