HB1225--BIOMETRICINFORMATIONPRIVACYACT
SPONSOR: Lovasco
Thisbillestablishesthe"BiometricInformationPrivacyAct".Any
privateentityinpossessionofbiometricidentifiersor
information,asdefinedinthebill,musthaveawrittenand
publiclyavailableretentionscheduleandguidelinesfor
permanentlydestroyingsuchidentifiersandinformationwhenthe
initialpurposeforcollectingorobtainingthemhasbeen
satisfied,orwithinoneyearoftheindividual'slastinteraction
withtheprivateentity,whicheveroccursfirst.
Noprivateentitymaycollect,purchase,receive,orotherwise
obtainanindividual'sbiometricidentifierorinformationwithout
firstinformingsuchindividualinwritingoftheinformationbeing
collectedandthepurposeforcollection,andreceivingawritten
releasefromtheindividualauthorizingthecollection. Noprivate
entityinpossessionofbiometricidentifiersorinformationmay
sell,lease,trade,orotherwiseprofitfromanindividual's
identifierorinformation.
AnyentityorindividualrequiredtocomplywiththeHealth
InsurancePortabilityandAccountability Actshalltreatbiometric
identifiersandinformationasindividuallyidentifiablehealth
informationprotectedundertheAct.
Noprivateentitymaydiscloseordisseminateanindividual's
biometricidentifierorinformationunlessithasawrittenrelease
fromtheindividual,thedisclosurecompletesafinancial
transactionrequestedorauthorizedbytheindividual,the
disclosureisrequiredbylaw,orthedisclosureisrequired
pursuanttoawarrant.
Aprivateentityinpossessionofbiometricidentifiersor
informationshallsecurelystoresuchidentifiersorinformationin
accordancewiththeprovisionsofthebill.
Aprivateentityshallnot:
(1)Conditiontheprovisionofagoodorserviceonthe
collection,use,disclosure,transfer,sale,retention,or
processingofabiometricidentifierunlessthebiometric
identifierisstrictlynecessarytoprovidethegoodorservice;or
(2)Chargedifferentpricesorratesforgoodsorservicesor
provideadifferentlevelofqualityofagoodorservicetoany
individualwhoexercisestheindividual'srights. Anypersonaggrievedbyaviolationoftheprovisionsofthisbill
shallhavearightofactionincourt.Thecourtshallawardall
attorney'sfeesandcosts,includingexpertwitnessfeesandother
litigationexpenses,totheprevailingplaintiff. Aprevailing
plaintiffmayrecoveragainstaprivateentityforeachviolation:
(1)Iftheprivateentitywasfoundnegligentlyinviolation,
liquidateddamagesof$1,000oractualdamages,whicheveris
greater;
(2)Iftheprivateentitywasfoundintentionallyorrecklesslyin
violation,liquidateddamagesof$5,000oractualdamages,
whicheverisgreater;and
(3)Otherrelief,includinganinjunction,asthecourtmaydeem
appropriate.
ThisbillisthesameasHB2716(2022)andsimilartoHB1047
(2023).