If a company runs afoul of the law and racks up penalties for doing so, the answer should not be to throw out a good law.
Illinois has a good law in the Biometric Information Privacy Act, BIPA. It is designed to prevent companies from quietly collecting such personal information as fingerprints, voice prints and retinal images and then sharing that information with third parties. If private biometric information gets onto the dark web, it can become another part of the surveillance state and can be accessed by criminals through data breaches.