Bill > HB654

This bill, the Consumer Data Protection Act, introduces new rules for handling specific types of personal information, particularly "facial data," which is defined as information derived from automatic measurements of an individual's face used for identification, including facial mapping, geometry, or templates, and can come from photographs or videos. It also covers data related to eye retinas or irises. Under this bill, no company or its affiliates (referred to as controllers or processors) can process this sensitive biometric data about a consumer without first getting that consumer's explicit permission. For children, if their biometric data is processed, it must comply with the federal Children's Online Privacy Protection Act (COPPA), a law designed to protect children's online privacy. The bill also provides exemptions, stating it does not apply to air carriers regulated under federal aviation law, and any provisions preempted by federal law concerning national security, healthcare, or other matters will not be enforced until those federal laws or agreements end.