You probably installed your smart doorbell for convenience — package alerts, a quick glance at who’s ringing, maybe a little extra peace of mind. But a federal lawsuit filed in June 2026 suggests that feature you barely think about could be creating legal exposure for you and your neighbors. Virginia resident Charles Sigwalt filed a proposed class action against Amazon’s Ring, alleging that its Familiar Faces facial recognition feature collects and stores biometric data from millions of people — including delivery drivers, neighbors, and passersby — without their knowledge or consent. The case raises a question every smart doorbell owner should consider: if your device is scanning faces, whose legal problem is that?
Facial Recognition
Homeowner Liability
Biometric Data
The Difference Between a Recording and a Faceprint
Ordinary video footage shows you where someone was and when they arrived. It’s essentially a time-stamped image. Facial recognition adds something else entirely: a persistent identifier. The Familiar Faces feature creates what some legal analysts call a “faceprint” — a digital map of unique facial geometry that the system uses to recognize the same person across multiple visits, even across different cameras. According to the lawsuit, Ring’s software can capture residents, invited visitors, and people who simply walk past a home, and then classify them as familiar or unknown without their knowledge.
This distinction matters under the law. Biometric data, unlike a photo, is considered sensitive personal information in several states. Illinois, Texas, Washington, and California have enacted laws that treat the collection of faceprints as a higher-risk activity, often requiring explicit consent before scanning can happen. The Electronic Frontier Foundation warned in 2025 that biometric collection through Ring devices could expose Amazon to legal risk under these state laws. The current lawsuit leans heavily on that argument, alleging that millions of Americans have been scanned without any meaningful chance to opt out.
Most of what’s documented here comes from the legal complaint and reporting by Reuters and classaction.org. The core tension is straightforward: you might see the feature as a convenience, but the person walking their dog past your house never agreed to have their face analyzed and stored. That asymmetry — one person’s opt-in becoming another person’s involuntary scan — is what privacy advocates and plaintiffs’ attorneys are challenging.
Who’s Responsible When a Neighbor’s Face Gets Scanned?
The lawsuit names Amazon as the defendant, not individual homeowners. For now, the legal arrows are aimed at the company that designed and deployed the feature. But that doesn’t mean a homeowner is automatically off the hook. The question of consent — who is supposed to obtain it — is still open. If a court finds that enabling Familiar Faces amounts to unlawful collection of biometric data, homeowners who activated the feature could face claims from neighbors or delivery workers whose faceprints ended up in Ring’s cloud.
Amazon already blocks Familiar Faces in Illinois, Texas, and Portland, Oregon — jurisdictions with stricter biometric privacy laws. That selective compliance suggests the company knows the feature creates legal exposure in certain states. For homeowners outside those areas, the risk is less clear-cut but not zero. The Illinois Biometric Information Privacy Act (BIPA) is often cited as the strictest standard, and it has already produced multibillion-dollar settlements against companies like Meta and Google. If a similar case were brought against a homeowner who knowingly enabled facial recognition, the legal costs alone could be significant.
Homeowners may assume the manufacturer bears all legal risk, and the current lawsuit does target Amazon. But the outcome could influence how courts view individual responsibility — especially if the feature is marketed as optional and the homeowner actively turns it on. Checking your device’s settings now is cheaper than defending a lawsuit later.
What Your Doorbell Might Be Storing Without You Knowing
Ring says that Familiar Faces profiles are encrypted and stored in the cloud, with unnamed profiles automatically removed after 30 days and all profiles deleted after 180 days of no recognition. But the lawsuit alleges that the collection itself — not just the storage — violates privacy laws. And there’s a broader data-security angle: between January 2019 and March 2020, more than 55,000 U.S. customers had Ring devices compromised by hackers, according to the Federal Trade Commission. The FTC also charged Ring with allowing employees and contractors to access private customer videos without proper authorization, resulting in a $5.8 million settlement in 2023.
If a hacker gains access to your doorbell’s cloud account, they could obtain not just video clips but the facial recognition profiles of everyone who has appeared on your porch. Unlike a password, a faceprint cannot be changed. Privacy advocates argue that this permanence makes biometric data especially risky when stored by consumer devices with varying security standards.
For anyone working from home — where your doorbell camera might also capture clients, contractors, or remote team members who visit — the data-privacy stakes are even higher. A breach could expose professional contacts’ biometric information alongside your own. That’s one reason to treat your smart doorbell’s privacy settings as part of your home office risk assessment.
When Police Want Your Footage — and Neighbors Find Out
Ring’s Neighbors app and law enforcement partnerships have drawn scrutiny for years. Police departments can request footage from doorbell owners, and while the owner decides whether to share, critics argue the arrangement normalizes warrantless surveillance. In the past, Ring provided police with statistics about which users declined requests, a practice the company says it ended.
Sharing footage voluntarily can also create legal exposure for the homeowner. Attorneys Hugo Rodriguez and Robin D. Perry note that posting doorbell video online with identifiable subjects can lead to defamation or invasion-of-privacy claims, especially if the footage includes audio or captures someone in a false light. If your video ends up in a neighbor’s lawsuit — say, as evidence of a dispute — you could be drawn into litigation even if you weren’t involved in the original conflict.
Generally, no — without a warrant, police cannot compel you to hand over footage from your own camera. However, they can ask, and many homeowners comply voluntarily. If you refuse, you are not breaking the law. The exception is if law enforcement obtains a subpoena or court order, which would require you to produce the footage. At that point, consulting a lawyer is wise, especially if the footage contains images of neighbors or bystanders who haven’t consented to being recorded.
The State You Live In Changes Everything
Because the U.S. has no federal biometric privacy law, the legal landscape is a patchwork. What’s perfectly legal in one state could be a violation in another. The table below covers the key differences for smart doorbell facial recognition.
Illinois has the Biometric Information Privacy Act (BIPA), often called the strictest biometric law in the country. It requires written consent before collecting biometric data and gives individuals a private right to sue. Amazon blocks Familiar Faces in Illinois entirely.
Texas has a biometric privacy law that also requires notice and consent before capturing faceprints. It allows the state attorney general to bring enforcement actions. Amazon similarly restricts Familiar Faces in Texas.
California’s Consumer Privacy Act (CCPA) and Privacy Rights Act (CPRA) treat biometric data as sensitive personal information. Consumers have the right to opt out of its collection and sale. The state does not have a private right to sue for most violations, but the attorney general can enforce.
Virginia’s Consumer Data Protection Act (CDPA) classifies biometric data as sensitive, requiring opt-in consent before processing. It provides a private right of action only in limited circumstances. The current lawsuit was filed by a Virginia resident, so the state’s law is directly relevant to the case.
If you live in a state without a specific biometric statute, that doesn’t mean you’re in the clear — general privacy torts and consumer protection laws could still apply. The safest approach is to assume that scanning a neighbor’s face without their knowledge carries some legal risk, regardless of where you live.
What You Can Do Right Now to Lower Your Risk
You don’t need to rip the doorbell off your wall. A few practical steps can substantially reduce your exposure — both to lawsuits and to the kind of data breach that could turn your footage into someone else’s legal problem.
- Disable any facial recognition or “familiar faces” feature in your doorbell’s app settings. If the option is on by default, turn it off immediately.
- Adjust camera angles and set privacy zones so the lens captures only your porch or entryway — not your neighbor’s windows, backyard, or the public sidewalk.
- Review the manufacturer’s privacy policy for data retention periods, third-party sharing, and whether footage is used for AI training. If the policy is vague, consider it a red flag.
- Enable two-factor authentication on your doorbell account and use a strong, unique password. This helps prevent the kind of account takeover that led to the 55,000+ compromised devices.
- Check your HOA or landlord rules before installing or keeping a doorbell camera. Some HOAs have fined homeowners thousands of dollars for unauthorized exterior cameras.
- If you’re especially concerned, consult a lawyer familiar with privacy law in your state. A short conversation can clarify whether your specific setup creates liability.
These steps also support the broader data-privacy habits that matter for anyone working from home. For more on keeping your home office secure, see our guides on extra identity verification and simple home office security tips.
Smart doorbells are here to stay, but the rules around them are still being written. You don’t have to wait for a lawsuit to land on your doorstep to take stock of what your device is doing. A few settings changes and an honest look at your privacy policy can go a long way. That’s not paranoia — it’s just being a good neighbor in a world where the doorbell is watching both ways.