Bill > S01203

This bill establishes the Biometric Privacy Act, which requires private entities in possession of biometric identifiers (such as fingerprints, facial scans, or voice recordings) or biometric information to develop a written policy for retaining and destroying this data. The bill sets guidelines, including that biometric data must be destroyed within three years of the individual's last interaction with the private entity or when the initial purpose for collecting the data has been satisfied, whichever comes first. The bill also outlines requirements for obtaining written consent before collecting biometric data, restrictions on selling or disclosing biometric data, and provisions for individuals to take legal action against private entities that violate the law.