(NewsNation) — A new lawsuit claims retail giant Target is secretly collecting customers’ biometric data through facial recognition software when shoppers enter and exit stores.

Allegations against Target

The class action lawsuit filed in Illinois last month alleges the company is violating state privacy laws and is collecting the data without customers’ knowledge, potentially putting them at risk of identity theft.

The woman alleges in her lawsuit that Target collected and stored her and other customers’ biometric data, including face and fingerprint scans, without their consent. It also alleges Target is equipped with state-of-the-art facial recognition technology in all of its stores as part of its antitheft efforts.

But the lawsuit claims Target’s surveillance system goes way beyond preventing theft.

Surveillance system concerns

The lawsuit even details TikTok accounts dedicated to customers and ex-employees discussing their concerns about the company’s surveillance systems.

The lawsuit contends that biometric data is biologically unique and could pose risks of identity theft if compromised.

Data privacy legislation

According to the Illinois Biometric Information Privacy Act (BIPA) passed in 2008, companies doing business in the state can’t collect or store biometric data without proper notice and consent. Texas, New York, Vermont and Washington also have similar laws in place.

BIPA gives Illinoisans the right to sue over violations, with damages ranging from $1,000 to $5,000 per violation.

The lawsuit wants Target to pay as much as $5,000 for every violation.

Target did not immediately responded to a request for comment. The next court date has been set for July.

NewsNation affiliate WGN contributed to this report.