Johnson & Johnson’s consumer health spinoff Kenvue Inc. has agreed to pay $4.7 million to settle a class action lawsuit alleging that its Neutrogena Skin360 app illegally collected facial biometric data from roughly 11,000 Illinois residents without their consent. The settlement, filed for preliminary approval on February 17, 2026, in U.S. District Court for the District of New Jersey before Judge Michael A.
Shipp, resolves claims that the skincare assessment tool violated the Illinois Biometric Information Privacy Act by scanning and storing users’ unique facial geometries every time they snapped a selfie to get product recommendations. If you used the Neutrogena Skin360 app, the Neostrata Skin360 app, or any related co-branded variant between December 9, 2019 and May 5, 2023, and you are an Illinois resident, you may be entitled to a cash payment potentially worth hundreds of dollars. The case, *Melzer v. Kenvue Inc.*, is the latest in a long line of BIPA enforcement actions that have cost companies billions of dollars collectively and forced real changes in how businesses handle biometric information. This article breaks down what the app actually did, who qualifies, what the payout looks like, and what broader implications this settlement carries for consumer privacy.
Table of Contents
- Why Is Johnson & Johnson Paying $4.7 Million Over the Neutrogena Skin360 Biometric Data Lawsuit?
- Who Qualifies for the Neutrogena Skin360 Settlement and What Are the Limitations?
- What Kenvue Must Do Beyond Paying the $4.7 Million
- How to File a Claim and What to Expect From the Payout
- The Broader BIPA Landscape and Why Companies Keep Losing These Cases
- What Happened to the Neutrogena Skin360 App?
- What This Settlement Means for Biometric Privacy Going Forward
- Conclusion
- Frequently Asked Questions
Why Is Johnson & Johnson Paying $4.7 Million Over the Neutrogena Skin360 Biometric Data Lawsuit?
The Neutrogena Skin360 app was marketed as a convenient skin assessment tool. Users pointed their phone cameras at their faces, the app analyzed their skin conditions, and then it recommended Neutrogena skincare products. What users were not told, according to the lawsuit, is that the app was simultaneously scanning, collecting, capturing, and storing digital copies of their unique facial geometries. Under Illinois bipa, companies must obtain informed written consent before collecting biometric identifiers like facial geometry, fingerprints, or iris scans. The plaintiffs alleged that Johnson & Johnson never provided that notice or obtained that consent. Kenvue, which inherited the Neutrogena brand when J&J spun off its consumer health division, attempted to dodge the case by arguing that the Skin360 app fell under a healthcare-related BIPA exemption.
In March 2025, Judge Shipp rejected that argument outright, ruling that the app does not involve licensed healthcare professionals and therefore does not qualify for the exemption. That ruling was significant because it closed off a defense strategy that other health-adjacent tech companies might have tried to exploit. By August 2025, Judge Shipp ordered the case closed within 60 days following settlement negotiations, leading to the $4.7 million deal filed in February 2026. The settlement amount may sound modest compared to some BIPA verdicts, but divided among an estimated 11,000 class members, the per-person payout could reach into the hundreds of dollars after deductions for legal fees and administrative costs. Compare that to the Facebook BIPA settlement from 2022, which paid out roughly $397 per person from a $650 million fund split among 1.6 million claimants. Smaller class sizes often mean better individual payouts, and this case is a clear example.
Who Qualifies for the Neutrogena Skin360 Settlement and What Are the Limitations?
The class covers Illinois residents who used the Neutrogena Skin360, Neostrata Skin360, or any related co-branded variant of the skin assessment tool between December 9, 2019 and May 5, 2023. This includes both mobile app users and those who accessed the tool through a web browser. The geographic limitation to Illinois residents is not arbitrary — BIPA is an Illinois state law, and only residents of that state have standing to bring claims under it. However, if you used the app but lived in another state during the class period, you are not eligible for this settlement regardless of how much data was collected from you. This is a significant limitation and one that frustrates consumers in states without comparable biometric privacy laws. Texas and Washington have biometric privacy statutes, but neither provides the private right of action that makes BIPA so effective as an enforcement tool.
Several other states have passed or are considering biometric privacy legislation, but none yet match Illinois in terms of individual enforcement power. There is another practical limitation worth noting. Because the settlement was only filed for preliminary approval on February 17, 2026, the claim form deadlines and the official settlement website may not yet be publicly available. If you believe you qualify, keep an eye on court filings in *Melzer v. Kenvue Inc.* in the District of new Jersey. Do not pay anyone who contacts you claiming to file your claim for a fee — legitimate class action settlements never require upfront payment from claimants.
What Kenvue Must Do Beyond Paying the $4.7 Million
The money is only part of the settlement. Kenvue is also required to take specific structural steps to prevent future violations. The company must delete all facial images collected from Skin360 assessments during the class period. This is not a minor technical task — it means purging biometric data that may be stored across multiple servers, backup systems, and potentially third-party processors. Going forward, Kenvue must create a written consent form and user notice for the Skin360 tool, ensuring that users are explicitly informed before any biometric data is collected.
The company must also adopt a formal written policy governing the retention and destruction of biometric data. These requirements mirror the core mandates of BIPA itself, which means Kenvue is essentially being ordered to comply with the law it allegedly violated in the first place. That may sound redundant, but court-ordered compliance carries the threat of contempt sanctions if violated, giving the requirements real teeth. For comparison, when Google settled its Illinois BIPA case over Google Photos facial recognition in 2022 for $100 million, it similarly agreed to enhanced consent mechanisms. The pattern is consistent: BIPA settlements do not just extract money, they force companies to build the privacy infrastructure they should have had from the start.
How to File a Claim and What to Expect From the Payout
Eligible class members who submit valid claim forms will receive a one-time, pro-rated cash payment. The term “pro-rated” means the actual dollar amount depends on how many people file claims. If only a fraction of the estimated 11,000 class members submit claims, individual payouts could be substantially higher than average projections. Conversely, if nearly everyone files, the per-person amount drops. This is the fundamental tradeoff of class action settlements — broad participation dilutes individual recovery.
Based on the $4.7 million total, after typical deductions for attorney fees (usually around one-third) and administrative costs, the net fund available for distribution might land somewhere around $2.8 to $3.2 million. Divided among 11,000 claimants, that yields roughly $250 to $290 per person if everyone participates. But class action claim rates are often below 10 percent, which could push individual payouts significantly higher for those who do file. Because the settlement was just recently filed for preliminary approval, the exact process for submitting claims has not been finalized. Typically, the court will set a claims deadline several months after granting preliminary approval, and a settlement administrator will send notice to class members by mail, email, or both. Watch for official communications and verify any correspondence through the court docket rather than trusting unsolicited emails or texts.
The Broader BIPA Landscape and Why Companies Keep Losing These Cases
Illinois BIPA remains the most powerful biometric privacy law in the country, and companies continue to underestimate its reach. Since the Illinois Supreme Court’s landmark 2019 ruling in *Rosenbach v. Six Flags*, which held that plaintiffs do not need to show actual harm to sue under BIPA, the floodgates have opened. Facebook, Google, TikTok, Clearview AI, and now Johnson & Johnson have all paid substantial settlements. One warning for consumers: not every BIPA case results in meaningful payouts.
Some settlements are structured to benefit lawyers far more than class members, with coupon-based remedies or payouts so small they barely cover the cost of a stamp. The Neutrogena settlement appears more favorable because of the relatively small class size and the all-cash payment structure, but the final numbers will depend on court approval and the claims rate. Companies operating in Illinois should also take note of the failed healthcare exemption defense in this case. Judge Shipp’s ruling that a consumer skincare app does not qualify as a healthcare tool under BIPA narrows the exemption significantly. Any company building an app that touches facial recognition, skin analysis, or similar biometric features needs to treat BIPA compliance as a baseline requirement, not an afterthought.
What Happened to the Neutrogena Skin360 App?
The Neutrogena Skin360 app had a relatively short commercial lifespan. Launched as a way to blend skincare recommendations with augmented reality-style facial analysis, it was part of a broader push by consumer health companies to integrate tech into personal care. The class period ending on May 5, 2023 suggests the app’s biometric features were either discontinued or significantly modified around that time, likely in response to the litigation.
This pattern is common in BIPA cases. Companies launch products with biometric features, face lawsuits, and then either shut down the offending features or retrofit consent mechanisms. The cost of litigation and settlements often dwarfs whatever revenue the biometric feature generated, making it a losing proposition from a pure business standpoint.
What This Settlement Means for Biometric Privacy Going Forward
The Neutrogena Skin360 settlement adds to a growing body of evidence that BIPA enforcement is not slowing down, even as some industry groups push for legislative amendments to weaken the law. Several bills have been introduced in the Illinois legislature over the years to limit damages or narrow the private right of action, but none have succeeded in gutting the statute’s core protections.
Looking ahead, the real question is whether other states will adopt BIPA-style laws with private enforcement rights. If they do, companies that collect biometric data nationally could face simultaneous litigation across multiple jurisdictions, dramatically increasing their exposure. For consumers, the Neutrogena case is a reminder that the free apps on your phone may be collecting far more data than you realize, and that in at least one state, you have real legal recourse when they do.
Conclusion
The $4.7 million settlement in *Melzer v. Kenvue Inc.* is a straightforward case of a major company collecting sensitive biometric data without telling users or getting their consent. Johnson & Johnson, through its Kenvue spinoff, will pay cash to an estimated 11,000 Illinois residents who used the Neutrogena Skin360 app and related tools between December 2019 and May 2023.
Beyond the money, the company must delete collected facial images and implement proper consent and data retention policies. If you are an Illinois resident who used the Skin360 app during the class period, monitor court filings for the official claims process. The settlement was filed for preliminary approval in February 2026, so deadlines and the settlement website should be available in the coming months. Do not ignore the notice when it arrives — BIPA settlements with small class sizes tend to offer some of the better per-person payouts in consumer privacy litigation.
Frequently Asked Questions
How much money will I get from the Neutrogena Skin360 settlement?
Eligible claimants will receive a one-time, pro-rated cash payment. The exact amount depends on how many people file claims, but estimates suggest payouts could reach hundreds of dollars per person after deductions for legal fees and administrative costs.
Who is eligible for the Neutrogena Skin360 BIPA settlement?
Illinois residents who used the Neutrogena Skin360, Neostrata Skin360, or related co-branded skin assessment tools (via mobile app or web browser) between December 9, 2019 and May 5, 2023.
How do I file a claim for the Neutrogena Skin360 settlement?
The settlement was filed for preliminary approval on February 17, 2026, and the official claims process, including deadlines and the settlement website, may not yet be publicly available. Watch for official court notices or check the docket in *Melzer v. Kenvue Inc.* in the U.S. District Court for the District of New Jersey.
Why does this settlement only cover Illinois residents?
The lawsuit is based on the Illinois Biometric Information Privacy Act, which is a state law that only applies to Illinois residents. Other states generally lack comparable laws with private enforcement rights, though some are considering similar legislation.
What is Kenvue and how is it related to Johnson & Johnson?
Kenvue Inc. is Johnson & Johnson’s consumer health spinoff company. It now owns the Neutrogena brand and is the named defendant in this case as the successor to J&J’s consumer health division.
Did Johnson & Johnson admit wrongdoing in this settlement?
Settlements typically do not include admissions of wrongdoing. However, the court’s March 2025 ruling rejecting Kenvue’s motion to dismiss — specifically its healthcare exemption defense — was a significant legal defeat that likely motivated the company to settle.