A Walmart biometric voiceprint lawsuit filed in Illinois on 6 July 2026 alleges the retailer illegally captured and stored customers’ voice data during routine calls to its customer service lines, without meeting the disclosure requirements set out under state law. The case, assigned case number 1:26cv7861, has drawn attention across the travel and retail sectors, where AI-powered customer service is increasingly the norm.
What the Walmart Biometric Voiceprint Lawsuit Alleges
The 15-page filing was brought by Illinois residents Carol Krupke and Jeanne Thomas, who say they contacted Walmart customer service on multiple occasions between 2025 and 2026. According to Biometric Update, Krupke called the Freeport Walmart on 18 February and 2 July 2025, and again on 1 May 2026, responding verbally to prompts rather than selecting options via telephone keypad. The plaintiffs argue it is precisely this kind of spoken interaction that fed Walmart’s alleged AI system.
According to Courthouse News Service, the filing alleges that Walmart uses an artificial intelligence system that records audio from customer calls and analyses distinguishing characteristics of a caller’s voice, including pitch, cadence, tone and frequency patterns. That analysis allegedly produces a unique mathematical template, referred to in the complaint as a voiceprint or biometric identifier, which can then be used to recognise the individual during future calls.
‘Walmart creates a voiceprint or biometric identifier which can be used to identify them in the future,’ the plaintiffs state in their complaint. The filing also describes what the plaintiffs call ’emotional tracking,’ alleging the system analyses speech patterns and volume to gauge customer frustration or urgency. Walmart has not been found liable, and the allegations have not been proven in court.
The plaintiffs argue they were not made adequately aware of any of this. The only disclosure they received, they say, was an automated message stating: ‘This call and your voice may be recorded for business purposes, including fraud prevention.’ The complaint contends that message does not explain how voiceprints are created, how they are stored, or how they may be used beyond that narrow stated purpose.
Illinois BIPA and the Privacy Standard at Stake
Central to the case is the Illinois Biometric Information Privacy Act (BIPA), passed in 2008 to regulate how companies collect, store and use biometric data. The law was created in response to concerns that biometric identifiers, unlike passwords or account numbers, cannot be changed if they are compromised. Under BIPA, a company gathering biometric information must provide written notice, explain the specific purpose and retention period, and obtain written consent before collection takes place.
The plaintiffs argue Walmart satisfied none of those requirements. The complaint further highlights that Walmart’s privacy policy was updated on 18 June 2026 and does acknowledge that the company collects biometrics, including voiceprints, when customers contact it. However, the filing contests that referencing a general privacy policy does not substitute for the specific, individualised disclosures BIPA demands before data is captured.
As ClassAction.org notes, the case sits alongside a broader wave of BIPA litigation in Illinois that has previously targeted fingerprint scanners, facial recognition systems and other biometric identifiers used by large employers and retailers. Unlike those earlier disputes, which were often rooted in workplace timekeeping, this action focuses on the customer service channel, a touchpoint that millions of travellers and consumers rely on every day.
‘Defendant’s collection and storage of biometric identifiers and/or biometric information exposes consumers to serious and irreversible privacy risks,’ the plaintiffs state in the complaint.
Implications for Travel Industry Customer Service
For the travel trade, the case carries specific relevance. Airlines, hotel groups, car rental companies and online travel agencies all operate telephone customer service lines that handle high volumes of calls from passengers and guests managing bookings, cancellations and last-minute changes. AI-assisted call handling has become standard across much of the sector, with carriers and hotel operators deploying voice recognition systems for purposes ranging from identity verification to fraud prevention.
Whether those deployments comply with state-level biometric privacy statutes, particularly in jurisdictions with BIPA-style frameworks, is a question the Walmart case now places squarely in front of the courts. Travel businesses operating call centres that serve Illinois residents may find the outcome directly relevant to how they structure automated disclosures and consent flows.
The next substantive stage in the case will be determined by the federal court in Illinois, where the filing was lodged under case number 1:26cv7861 on 6 July 2026.
