Question 1

What is Verafi and how does it help businesses with compliance?

Accepted Answer

Verafi is an AI-powered business compliance platform that helps companies protect against labor law and privacy violations across multiple jurisdictions. It monitors for PAGA (California labor law), GINA (federal genetic privacy), GIPA (Illinois genetic privacy), and BIPA (Illinois biometric privacy) violations using artificial intelligence to detect risks before they become lawsuits. The platform provides automated violation detection, real-time exposure calculation, pattern recognition across departments, and actionable compliance recommendations.

Question 2

Which compliance laws does Verafi cover?

Accepted Answer

Verafi covers four major compliance areas: (1) PAGA — California's Private Attorneys General Act covering meal breaks, rest breaks, overtime, wage statements, and other labor code violations; (2) GINA — the federal Genetic Information Nondiscrimination Act protecting against genetic discrimination in employment; (3) GIPA — Illinois' Genetic Information Privacy Act with stricter genetic data protections; and (4) BIPA — Illinois' Biometric Information Privacy Act covering fingerprints, facial recognition, and other biometric data. The platform monitors all four simultaneously.

Question 3

How does AI improve compliance monitoring compared to manual audits?

Accepted Answer

AI-powered compliance monitoring like Verafi's provides several advantages over manual audits: (1) Real-time detection — violations are flagged as they occur, not months later during an audit; (2) Pattern recognition — AI identifies systemic issues across departments and locations that manual reviewers miss; (3) Comprehensive coverage — every employee record is analyzed, not just a sample; (4) Predictive risk scoring — AI models predict which areas are most likely to generate claims; and (5) Continuous monitoring — 24/7 automated scanning versus periodic manual reviews. Studies show AI compliance monitoring reduces violation exposure by over 90%.

Question 4

Is Verafi's compliance exposure analysis really free?

Accepted Answer

Yes, Verafi offers a completely free compliance exposure analysis. Business owners can input their company details — including employee count, industry, and location — to receive an instant assessment of their potential liability across PAGA, GINA, GIPA, and BIPA. The free analysis includes estimated financial exposure, risk level assessment, and recommended next steps. There is no obligation to purchase, and the analysis takes less than 5 minutes to complete.

Question 5

How quickly can Verafi detect compliance violations?

Accepted Answer

Verafi's AI engine detects potential compliance violations in real-time as data is processed. For timekeeping-related PAGA violations (meal breaks, rest breaks, overtime), detection occurs within minutes of the data being ingested. For policy-based violations like BIPA consent requirements or GINA/GIPA genetic information handling, the platform flags issues during the initial compliance scan and continuously monitors for new risks. Critical violations trigger immediate alerts to compliance administrators.

Question 6

What is PAGA and how does it affect California employers?

Accepted Answer

PAGA (Private Attorneys General Act) is a California law that allows employees to file lawsuits on behalf of the state for labor code violations. It affects all California employers because any current or former employee can bring a PAGA claim for violations like missed meal breaks, rest period violations, wage statement errors, and unpaid overtime. Average PAGA settlements exceed $2 million, making compliance monitoring essential.

Question 7

What are the most common PAGA violations?

Accepted Answer

The most common PAGA violations include: (1) meal break violations under Labor Code §512 — failing to provide a 30-minute uninterrupted meal period for shifts over 5 hours; (2) rest break violations — not providing 10-minute rest periods for every 4 hours worked; (3) wage statement violations under §226 — inaccurate or incomplete pay stubs; (4) overtime violations — failure to pay proper overtime rates; and (5) waiting time penalties under §203 — not paying final wages promptly upon termination.

Question 8

How much do PAGA lawsuits cost employers?

Accepted Answer

PAGA lawsuits are extremely costly for employers. The average PAGA settlement exceeds $2 million. Penalties are $100 per employee per pay period for initial violations and $200 for subsequent violations, and these compound rapidly across all affected employees. Additionally, employers face attorney's fees, litigation costs, and significant operational disruption. With California's large workforce, even a single PAGA violation type can generate millions in liability.

Question 9

What is the PAGA notice and cure period?

Accepted Answer

Before filing a PAGA lawsuit in court, an employee must first provide written notice to both the employer and the California Labor and Workforce Development Agency (LWDA). The employer then has a 65-day cure period to correct the alleged violations. If the employer fully cures the violations within this period and notifies the employee, the PAGA claim may be dismissed. Effective use of the cure period requires immediate action — identifying affected employees, calculating correct payments, implementing policy changes, and documenting all corrections.

Question 10

How can AI help with PAGA compliance?

Accepted Answer

AI-powered compliance platforms like Verafi help with PAGA compliance by: automatically scanning timekeeping data to detect meal and rest break violations before they become lawsuits; calculating real-time financial exposure across all employees; identifying violation patterns and high-risk departments; monitoring the 65-day notice and cure timeline; generating audit-ready compliance reports; and providing early warning alerts when new violation trends emerge. This proactive approach typically reduces PAGA exposure by 90% or more compared to manual compliance reviews.

Question 11

What is GINA and what does it prohibit?

Accepted Answer

GINA (Genetic Information Nondiscrimination Act) is a federal law that prohibits employers from using genetic information in employment decisions. Title II of GINA specifically covers employment and prohibits discrimination in hiring, firing, job assignments, promotions, and any other terms of employment based on genetic information. Employers also cannot request, require, or purchase genetic information about employees or their family members, except in very limited circumstances.

Question 12

What qualifies as genetic information under GINA?

Accepted Answer

Under GINA, genetic information includes: (1) an individual's genetic tests; (2) genetic tests of family members; (3) family medical history (any disease or disorder in family members); (4) requests for or receipt of genetic services by an individual or family member; and (5) genetic information of a fetus or embryo. Importantly, family medical history is considered genetic information, which means even casual conversations about a family member's health could create GINA liability if that information influences employment decisions.

Question 13

What are the penalties for GINA violations?

Accepted Answer

GINA violations can result in significant penalties enforced by the EEOC. Compensatory and punitive damages can reach up to $300,000 per violation depending on employer size. Employers may also face injunctive relief (court orders to change practices), back pay and front pay awards, attorney's fees and court costs, and required policy changes and training programs. Repeat violations or patterns of noncompliance can result in substantially higher penalties.

Question 14

Do wellness programs violate GINA?

Accepted Answer

Employer wellness programs can violate GINA if they request genetic information (including family medical history) as a condition of participation or if they require genetic testing. Under GINA's safe harbor provision, wellness programs may offer health risk assessments that include family medical history questions only if participation is truly voluntary, individually identifiable genetic information is not disclosed to the employer, and there are no penalties for refusing to provide genetic information. Verafi helps employers audit their wellness programs for GINA compliance.

Question 15

What is GIPA and how is it different from GINA?

Accepted Answer

GIPA (Genetic Information Privacy Act), codified as 410 ILCS 513, is an Illinois state law that provides additional protections for genetic information beyond federal GINA. While GINA focuses on employment discrimination, GIPA has broader scope — it restricts how any entity (employers, insurers, and others) can collect, use, retain, and disclose genetic information. GIPA provides a private right of action with penalties up to $15,000 per violation, making Illinois one of the strictest states for genetic privacy.

Question 16

What are the penalties for GIPA violations in Illinois?

Accepted Answer

GIPA provides for substantial penalties: up to $15,000 per violation in statutory damages, plus actual damages, attorney's fees, and court costs. Unlike GINA which is enforced primarily through the EEOC, GIPA includes a private right of action allowing individuals to sue directly. For employers with many employees, violations can compound quickly — a single illegal policy affecting 100 employees could result in $1.5 million in potential liability.

Question 17

What must Illinois employers do to comply with GIPA?

Accepted Answer

Illinois employers must: (1) not request, require, or administer genetic tests as a condition of employment; (2) not use genetic information in hiring, firing, or promotion decisions; (3) protect the confidentiality of any genetic information they lawfully possess; (4) not retaliate against employees who refuse to provide genetic information; (5) properly segregate genetic information from general personnel files; and (6) audit all wellness programs and health screenings to ensure genetic information collection is lawful and voluntary.

Question 18

What is BIPA and why is it important?

Accepted Answer

BIPA (Biometric Information Privacy Act), codified as 740 ILCS 14, is an Illinois law that regulates how companies collect, store, and use biometric data such as fingerprints, facial recognition, iris scans, and voiceprints. BIPA is considered the most stringent biometric privacy law in the United States because it provides a private right of action — individuals can sue directly for violations. Landmark verdicts have exceeded $200 million, making BIPA compliance critical for any organization operating in Illinois or handling Illinois residents' biometric data.

Question 19

What biometric data does BIPA protect?

Accepted Answer

BIPA protects 'biometric identifiers' which include: fingerprints, voiceprints, retina or iris scans, scans of hand or face geometry, and any biometric information based on these identifiers. Common workplace uses that trigger BIPA include: fingerprint time clocks, facial recognition attendance systems, hand-geometry scanners for secure areas, voice-activated systems that create voiceprints, and photo-based identity verification systems using facial geometry analysis.

Question 20

What are BIPA's consent and notice requirements?

Accepted Answer

Before collecting any biometric data, BIPA requires employers to: (1) provide written notice informing the individual that biometric data will be collected or stored; (2) state the specific purpose and length of time for collection, storage, and use; (3) obtain a written release from the individual; and (4) publish a publicly available written policy establishing a retention schedule and guidelines for permanent destruction. The written consent must be obtained BEFORE any collection occurs — retroactive consent is not compliant.

Question 21

How much can BIPA violations cost an employer?

Accepted Answer

BIPA violations carry significant financial penalties: $1,000 per violation for negligent violations and $5,000 per violation for intentional or reckless violations, plus attorney's fees and costs. Critically, the Illinois Supreme Court ruled that each individual scan (not just initial collection) can constitute a separate violation. This means a company using fingerprint time clocks without proper consent could face $5,000 per employee per scan — a company with 500 employees scanning twice daily for a year faces potential liability exceeding $1.8 billion.

Question 22

Who needs to comply with BIPA?

Accepted Answer

Any private entity that collects, captures, purchases, receives through trade, or otherwise obtains biometric identifiers or biometric information from Illinois residents must comply with BIPA. This includes: employers using biometric time clocks or security systems; technology companies providing biometric-based services; retailers using facial recognition; healthcare organizations using biometric authentication; and any company whose apps or services process biometric data of Illinois residents — even if the company is headquartered outside Illinois.

Compliance Questions, Expert Answers

Verafi Platform

PAGA Compliance

GINA Compliance

GIPA Compliance

BIPA Compliance

Still Have Questions?