Bill > SB0339

This bill enacts the "Consumer Biometric Data Protection Act" in Tennessee. The key provisions of the bill include: 1. Requiring private entities to obtain written authorization from individuals before collecting, capturing, purchasing, or obtaining their biometric identifiers (e.g., fingerprints, iris scans) or biometric information. 2. Prohibiting private entities from selling, leasing, or profiting from an individual's biometric data, and limiting the disclosure of such data without consent. 3. Requiring private entities to store, transmit, and protect biometric data using reasonable industry standards and at least the same level of protection as other confidential information. 4. Mandating private entities to develop and comply with a written policy for retaining and permanently destroying biometric data. 5. Allowing individuals affected by a violation to bring a private cause of action and potentially receive liquidated damages, court costs, and attorneys' fees. 6. Exempting certain entities and data from the Act's coverage, such as HIPAA-regulated healthcare information and financial institutions subject to the Gramm-Leach-Bliley Act. The bill takes effect on January 1, 2024 and applies to conduct occurring on or after that date.

Business and Industry

https://wapp.capitol.tn.gov/apps/Billinfo/default.aspx?BillNumber=SB0339&ga=113