Biometric Information Privacy Act

1. **ONE-SENTENCE SUMMARY:** The Biometric Information Privacy Act regulates how businesses collect, use, and manage biometric data like fingerprints and facial recognition. 2. **KEY REQUIREMENTS:** - Obtain explicit consent from individuals before collecting their biometric data. - Clearly inform individuals about the purpose of data collection and how it will be used. - Establish a written policy for the retention and destruction of biometric data. - Ensure secure storage of biometric information to protect against unauthorized access. 3. **DEADLINES:** - The bill is currently introduced and has not yet become law; monitor for updates on the effective date once passed. 4. **PENALTIES:** - Businesses that fail to comply may face fines and legal actions, including potential lawsuits from affected individuals. 5. **SMB IMPACT:** Small businesses that collect biometric data will need to implement new consent processes and data management policies, which may require additional resources and training. Compliance is crucial to avoid penalties and protect customer trust.