Bill > SF2260

This bill establishes comprehensive biometric privacy standards in Minnesota for private entities, defining biometric identifiers as retina or iris scans, fingerprints, voiceprints, and hand or face geometry scans. The legislation requires private entities to develop a public written policy for collecting, storing, and destroying biometric information, mandating that such data must be permanently destroyed within three years of an individual's last interaction with the entity. Before collecting biometric data, entities must provide written notice to individuals about the purpose and duration of data collection and obtain a written release. The bill prohibits selling, leasing, trading, or profiting from biometric information and restricts its disclosure, allowing only with explicit consent, for completing authorized financial transactions, or when required by law or court order. Private entities must also protect biometric information using industry-standard security measures. The bill provides a right of action for aggrieved individuals, allowing them to sue for damages ranging from $1,000 to $5,000 depending on the nature of the violation, plus attorney fees and potential injunctive relief. The legislation includes exemptions for certain sectors like healthcare and financial institutions, and does not impact biometric information's use in legal proceedings.

Business and Industry

https://www.revisor.mn.gov/bills/bill.php?b=Senate&f=SF2260&ssn=0&y=2025