Bill > S01933

This bill establishes the Biometric Privacy Act, which requires private entities in possession of biometric identifiers (such as fingerprints or facial scans) or biometric information to develop a written policy for retaining and permanently destroying such data. The bill mandates that private entities inform individuals in writing about the collection and use of their biometric data, obtain written consent, and prohibits them from selling, leasing, or profiting from this information. It also provides individuals the right to sue for violations, with the potential to recover liquidated damages and legal fees. The bill includes exceptions for certain entities and contexts, such as healthcare and financial institutions, and ensures it does not conflict with federal laws like the Health Insurance Portability and Accountability Act (HIPAA).