Bill > SB1359

This bill establishes new legal protections for private entities collecting biometric identifiers or information by creating a framework that limits their liability for unauthorized or negligent disclosure. The bill defines key terms like "biometric identifier" (including retina scans, fingerprints, and face geometry, but excluding certain medical and scientific data) and "biometric information" as data used to identify an individual. To qualify for liability protection, private entities must: post clear warning signs about biometric data collection, inform individuals about the specific purpose of data collection, develop and publicly share a written policy for data retention and destruction (with a maximum three-year retention period), comply with their own retention policy unless compelled by legal warrant, and protect biometric data with the same or higher security standards as other confidential information. The bill requires entities to display a specific warning notice stating they collect biometric data and comply with Missouri law. Importantly, the legislation does not impact legal proceedings, conflicts with existing healthcare privacy laws like HIPAA, or create additional liability for entities. The bill specifically excludes financial institutions subject to the Gramm-Leach-Bliley Act and aims to provide clear guidelines and limited protection for businesses handling sensitive biometric data.

Justice

https://www.senate.mo.gov/26info/BTS_Web/Bill.aspx?SessionType=R&BillID=159