A federal judge in California has ruled that Facebook can be sued in a class-action lawsuit brought by users in Illinois who say the social network improperly used facial recognition technology on their uploaded photographs.

The plaintiffs are three Illinois Facebook users who sued under a state law that says a private entity such as Facebook can’t collect and store a person’s biometric facial information without their written consent. The law, known as the Biometric Information Privacy Act, also says that information that uniquely identifies an individual is, in essence, their property. The law prohibits a private entity from selling, leasing, trading or otherwise profiting from a person’s biometric information.

U.S. District Judge James Donato ruled that the lawsuit can proceed as a class action representing potentially millions of Facebook users in Illinois. The judge is based in San Francisco where the case had been moved at Facebook’s request.

Read the post on NPR