Illinois ruling highlights risks of biometric identifier use