Bill > S04457

This bill establishes the Biometric Privacy Act, which requires private entities in possession of biometric identifiers (such as fingerprints or face scans) or biometric information to develop a written policy for retaining and permanently destroying this data. The bill sets guidelines for collecting, disclosing, and protecting biometric information, and gives the Attorney General authority to enforce the law and impose penalties for violations. The bill also clarifies how it interacts with other laws, such as the Health Insurance Portability and Accountability Act (HIPAA) and the Gramm-Leach-Bliley Act governing financial institutions.