They are. BIPA is top rate. I looked at the statute, which excludes Illinois state and local government entities, but does not talk of federal bodies. I don't know enough about the supremacy of federal statutes to know how that works, and most discussions note that the statute excludes "the government" which is not totally accurate.

https://en.wikipedia.org/wiki/Biometric_Information_Privacy_...