Illinois 2023-2024 Regular Session

Illinois House Bill HB4102 Compare Versions

Only one version of the bill is available at this time.

Old	New	Differences
1	1	103RD GENERAL ASSEMBLY State of Illinois 2023 and 2024 HB4102 Introduced , by Rep. La Shawn K. Ford SYNOPSIS AS INTRODUCED: 740 ILCS 14/10740 ILCS 14/15 Amends the Biometric Information Privacy Act. Defines "security purpose" as a purpose to ensure that (i) a person accessing an online product or service is who they person claims to be or (ii) a person identified as a safety concern or as a person violating the terms of use or service of the online product or service can be kept off of or denied access to the product or service. Provides that no private entity in possession of a biometric identifier or biometric information may disclose, redisclose, or otherwise disseminate a person's or customer's biometric identifier or biometric information unless it is done in furtherance of a security purpose. Provides that a private entity is not required to comply with the 3-year retention limitation of biometric identifiers or biometric information if the biometric identifiers or biometric information are being collected for a security purpose. LRB103 32688 LNS 62409 b A BILL FOR 103RD GENERAL ASSEMBLY State of Illinois 2023 and 2024 HB4102 Introduced , by Rep. La Shawn K. Ford SYNOPSIS AS INTRODUCED: 740 ILCS 14/10740 ILCS 14/15 740 ILCS 14/10 740 ILCS 14/15 Amends the Biometric Information Privacy Act. Defines "security purpose" as a purpose to ensure that (i) a person accessing an online product or service is who they person claims to be or (ii) a person identified as a safety concern or as a person violating the terms of use or service of the online product or service can be kept off of or denied access to the product or service. Provides that no private entity in possession of a biometric identifier or biometric information may disclose, redisclose, or otherwise disseminate a person's or customer's biometric identifier or biometric information unless it is done in furtherance of a security purpose. Provides that a private entity is not required to comply with the 3-year retention limitation of biometric identifiers or biometric information if the biometric identifiers or biometric information are being collected for a security purpose. LRB103 32688 LNS 62409 b LRB103 32688 LNS 62409 b A BILL FOR
2	2	103RD GENERAL ASSEMBLY State of Illinois 2023 and 2024 HB4102 Introduced , by Rep. La Shawn K. Ford SYNOPSIS AS INTRODUCED:
3	3	740 ILCS 14/10740 ILCS 14/15 740 ILCS 14/10 740 ILCS 14/15
4	4	740 ILCS 14/10
5	5	740 ILCS 14/15
6	6	Amends the Biometric Information Privacy Act. Defines "security purpose" as a purpose to ensure that (i) a person accessing an online product or service is who they person claims to be or (ii) a person identified as a safety concern or as a person violating the terms of use or service of the online product or service can be kept off of or denied access to the product or service. Provides that no private entity in possession of a biometric identifier or biometric information may disclose, redisclose, or otherwise disseminate a person's or customer's biometric identifier or biometric information unless it is done in furtherance of a security purpose. Provides that a private entity is not required to comply with the 3-year retention limitation of biometric identifiers or biometric information if the biometric identifiers or biometric information are being collected for a security purpose.
7	7	LRB103 32688 LNS 62409 b LRB103 32688 LNS 62409 b
8	8	LRB103 32688 LNS 62409 b
9	9	A BILL FOR
10	10	HB4102LRB103 32688 LNS 62409 b HB4102 LRB103 32688 LNS 62409 b
11	11	HB4102 LRB103 32688 LNS 62409 b
12	12	1 AN ACT concerning civil law.
13	13	2 Be it enacted by the People of the State of Illinois,
14	14	3 represented in the General Assembly:
15	15	4 Section 5. The Biometric Information Privacy Act is
16	16	5 amended by changing Sections 10 and 15 as follows:
17	17	6 (740 ILCS 14/10)
18	18	7 Sec. 10. Definitions. In this Act:
19	19	8 "Biometric identifier" means a retina or iris scan,
20	20	9 fingerprint, voiceprint, or scan of hand or face geometry.
21	21	10 Biometric identifiers do not include writing samples, written
22	22	11 signatures, photographs, human biological samples used for
23	23	12 valid scientific testing or screening, demographic data,
24	24	13 tattoo descriptions, or physical descriptions such as height,
25	25	14 weight, hair color, or eye color. Biometric identifiers do not
26	26	15 include donated organs, tissues, or parts as defined in the
27	27	16 Illinois Anatomical Gift Act or blood or serum stored on
28	28	17 behalf of recipients or potential recipients of living or
29	29	18 cadaveric transplants and obtained or stored by a federally
30	30	19 designated organ procurement agency. Biometric identifiers do
31	31	20 not include biological materials regulated under the Genetic
32	32	21 Information Privacy Act. Biometric identifiers do not include
33	33	22 information captured from a patient in a health care setting
34	34	23 or information collected, used, or stored for health care
35	35
36	36
37	37
38	38	103RD GENERAL ASSEMBLY State of Illinois 2023 and 2024 HB4102 Introduced , by Rep. La Shawn K. Ford SYNOPSIS AS INTRODUCED:
39	39	740 ILCS 14/10740 ILCS 14/15 740 ILCS 14/10 740 ILCS 14/15
40	40	740 ILCS 14/10
41	41	740 ILCS 14/15
42	42	Amends the Biometric Information Privacy Act. Defines "security purpose" as a purpose to ensure that (i) a person accessing an online product or service is who they person claims to be or (ii) a person identified as a safety concern or as a person violating the terms of use or service of the online product or service can be kept off of or denied access to the product or service. Provides that no private entity in possession of a biometric identifier or biometric information may disclose, redisclose, or otherwise disseminate a person's or customer's biometric identifier or biometric information unless it is done in furtherance of a security purpose. Provides that a private entity is not required to comply with the 3-year retention limitation of biometric identifiers or biometric information if the biometric identifiers or biometric information are being collected for a security purpose.
43	43	LRB103 32688 LNS 62409 b LRB103 32688 LNS 62409 b
44	44	LRB103 32688 LNS 62409 b
45	45	A BILL FOR
46	46
47	47
48	48
49	49
50	50
51	51	740 ILCS 14/10
52	52	740 ILCS 14/15
53	53
54	54
55	55
56	56	LRB103 32688 LNS 62409 b
57	57
58	58
59	59
60	60
61	61
62	62
63	63
64	64
65	65
66	66	HB4102 LRB103 32688 LNS 62409 b
67	67
68	68
69	69	HB4102- 2 -LRB103 32688 LNS 62409 b HB4102 - 2 - LRB103 32688 LNS 62409 b
70	70	HB4102 - 2 - LRB103 32688 LNS 62409 b
71	71	1 treatment, payment, or operations under the federal Health
72	72	2 Insurance Portability and Accountability Act of 1996.
73	73	3 Biometric identifiers do not include an X-ray, roentgen
74	74	4 process, computed tomography, MRI, PET scan, mammography, or
75	75	5 other image or film of the human anatomy used to diagnose,
76	76	6 prognose, or treat an illness or other medical condition or to
77	77	7 further validate scientific testing or screening.
78	78	8 "Biometric information" means any information, regardless
79	79	9 of how it is captured, converted, stored, or shared, based on
80	80	10 an individual's biometric identifier used to identify a
81	81	11 specific an individual. "Biometric information" does not
82	82	12 include information derived from items or procedures excluded
83	83	13 under the definition of biometric identifiers.
84	84	14 "Confidential and sensitive information" means personal
85	85	15 information that can be used to uniquely identify an
86	86	16 individual or an individual's account or property. Examples of
87	87	17 confidential and sensitive information include, but are not
88	88	18 limited to, a genetic marker, genetic testing information, a
89	89	19 unique identifier number to locate an account or property, an
90	90	20 account number, a PIN number, a pass code, a driver's license
91	91	21 number, or a social security number.
92	92	22 "Private entity" means any individual, partnership,
93	93	23 corporation, limited liability company, association, or other
94	94	24 group, however organized. A private entity does not include a
95	95	25 State or local government agency. A private entity does not
96	96	26 include any court of Illinois, a clerk of the court, or a judge
97	97
98	98
99	99
100	100
101	101
102	102	HB4102 - 2 - LRB103 32688 LNS 62409 b
103	103
104	104
105	105	HB4102- 3 -LRB103 32688 LNS 62409 b HB4102 - 3 - LRB103 32688 LNS 62409 b
106	106	HB4102 - 3 - LRB103 32688 LNS 62409 b
107	107	1 or justice thereof.
108	108	2 "Security purpose" means a purpose to ensure that (i) a
109	109	3 person accessing an online product or service is who they
110	110	4 person claims to be or (ii) a person identified as a safety
111	111	5 concern or as a person violating the terms of use or service of
112	112	6 the online product or service can be kept off of or denied
113	113	7 access to the product or service.
114	114	8 "Written release" means informed written consent or, in
115	115	9 the context of employment, a release executed by an employee
116	116	10 as a condition of employment.
117	117	11 (Source: P.A. 95-994, eff. 10-3-08.)
118	118	12 (740 ILCS 14/15)
119	119	13 Sec. 15. Retention; collection; disclosure; destruction.
120	120	14 (a) A private entity in possession of biometric
121	121	15 identifiers or biometric information must develop a written
122	122	16 policy, made available to the public, establishing a retention
123	123	17 schedule and guidelines for permanently destroying biometric
124	124	18 identifiers and biometric information when the initial purpose
125	125	19 for collecting or obtaining such identifiers or information
126	126	20 has been satisfied or within 3 years of the individual's last
127	127	21 interaction with the private entity, whichever occurs first.
128	128	22 Absent a valid warrant or subpoena issued by a court of
129	129	23 competent jurisdiction, a private entity in possession of
130	130	24 biometric identifiers or biometric information must comply
131	131	25 with its established retention schedule and destruction
132	132
133	133
134	134
135	135
136	136
137	137	HB4102 - 3 - LRB103 32688 LNS 62409 b
138	138
139	139
140	140	HB4102- 4 -LRB103 32688 LNS 62409 b HB4102 - 4 - LRB103 32688 LNS 62409 b
141	141	HB4102 - 4 - LRB103 32688 LNS 62409 b
142	142	1 guidelines.
143	143	2 (b) No private entity may collect, capture, purchase,
144	144	3 receive through trade, or otherwise obtain a person's or a
145	145	4 customer's biometric identifier or biometric information,
146	146	5 unless it first:
147	147	6 (1) informs the subject or the subject's legally
148	148	7 authorized representative in writing that a biometric
149	149	8 identifier or biometric information is being collected or
150	150	9 stored;
151	151	10 (2) informs the subject or the subject's legally
152	152	11 authorized representative in writing of the specific
153	153	12 purpose and length of term for which a biometric
154	154	13 identifier or biometric information is being collected,
155	155	14 stored, and used; and
156	156	15 (3) receives a written release executed by the subject
157	157	16 of the biometric identifier or biometric information or
158	158	17 the subject's legally authorized representative.
159	159	18 (c) No private entity in possession of a biometric
160	160	19 identifier or biometric information may sell, lease, trade, or
161	161	20 otherwise profit from a person's or a customer's biometric
162	162	21 identifier or biometric information.
163	163	22 (d) No private entity in possession of a biometric
164	164	23 identifier or biometric information may disclose, redisclose,
165	165	24 or otherwise disseminate a person's or a customer's biometric
166	166	25 identifier or biometric information unless:
167	167	26 (1) the subject of the biometric identifier or
168	168
169	169
170	170
171	171
172	172
173	173	HB4102 - 4 - LRB103 32688 LNS 62409 b
174	174
175	175
176	176	HB4102- 5 -LRB103 32688 LNS 62409 b HB4102 - 5 - LRB103 32688 LNS 62409 b
177	177	HB4102 - 5 - LRB103 32688 LNS 62409 b
178	178	1 biometric information or the subject's legally authorized
179	179	2 representative consents to the disclosure or redisclosure;
180	180	3 (2) the disclosure or redisclosure completes a
181	181	4 financial transaction requested or authorized by the
182	182	5 subject of the biometric identifier or the biometric
183	183	6 information or the subject's legally authorized
184	184	7 representative;
185	185	8 (3) the disclosure or redisclosure is required by
186	186	9 State or federal law or municipal ordinance; or
187	187	10 (4) the disclosure is required pursuant to a valid
188	188	11 warrant or subpoena issued by a court of competent
189	189	12 jurisdiction; or .
190	190	13 (5) it is done in furtherance of a security purpose.
191	191	14 (e) A private entity in possession of a biometric
192	192	15 identifier or biometric information shall:
193	193	16 (1) store, transmit, and protect from disclosure all
194	194	17 biometric identifiers and biometric information using the
195	195	18 reasonable standard of care within the private entity's
196	196	19 industry; and
197	197	20 (2) store, transmit, and protect from disclosure all
198	198	21 biometric identifiers and biometric information in a
199	199	22 manner that is the same as or more protective than the
200	200	23 manner in which the private entity stores, transmits, and
201	201	24 protects other confidential and sensitive information.
202	202	25 (f) A private entity shall not be required to comply with
203	203	26 the 3-year retention limitation of biometric identifiers or
204	204
205	205
206	206
207	207
208	208
209	209	HB4102 - 5 - LRB103 32688 LNS 62409 b
210	210
211	211
212	212	HB4102- 6 -LRB103 32688 LNS 62409 b HB4102 - 6 - LRB103 32688 LNS 62409 b
213	213	HB4102 - 6 - LRB103 32688 LNS 62409 b
214	214	1 biometric information of subsection (a) or the requirements of
215	215	2 subsection (b) if the biometric identifiers or biometric
216	216	3 information are being collected for a security purpose.
217	217	4 (Source: P.A. 95-994, eff. 10-3-08.)
218	218
219	219
220	220
221	221
222	222
223	223	HB4102 - 6 - LRB103 32688 LNS 62409 b