,,ii #aaf? ,,congress #b;d ,session ,s4 #ddjj ,,9 ,,! ,,s5ate ,,( ,,! ,,unit$ ,,/ates ,augu/ #c1 #bjbj,mr4 ,m]kley 7= himself & ,mr4 ,s&]s7 introduc$ ! foll[+ bill2 :i* 0 read twice & ref]r$ to ! ,committee on ! ,judici>y ,a ,,bill ,to regulate ! collection1 ret5tion1 disclosure1 & de/ruction ( biometric in=mation1 & = o!r purposes4 #a4 ,%ort title ,?is ,act may be cit$ z ! ,national ,biometric ,in=mation ,privacy ,act ( #bjbj4 #b4 ,def9itions ,9 ?is ,act3 7#a7 ,biometric id5tifi] ,! t]m biometric id5tifi]-- 7,a7 includes-- 7i7 a ret9a or iris scan2 7ii7 a voicepr9t2 7iii7 a facepr9t 7includ+ any facepr9t d]iv$ f a photograph72 7iv7 f+]pr9ts or palm pr9ts2 & 7v7 any o!r uniquely id5tify+ in=mation bas$ on ! *>act]i/ics ( an individual's gait or o!r immutable *>act]i/ic ( an individual2 7,b7 does n include writ+ samples1 writt5 signatures1 photographs1 human biological samples us$ = valid sci5tific te/+ or scre5+1 demographic data1 tattoo descriptions1 or physical descriptions su* z height1 weight1 hair color1 or eye color2 7,c7 does n include donat$ organs1 tissues1 or p>ts or blood or s]um /or$ on behalf ( recipi5ts or pot5tial recipi5ts ( liv+ or cadav]ic transplants & obta9$ or /or$ by a f$]ally designat$ organ procurem5t ag5cy2 7,d7 does n include in=mation captur$ f a pati5t 9 a heal? c>e sett+ = a m$ical purpose or in=mation collect$1 us$1 or /or$ = heal? c>e treatm5t1 paym5t1 or op]ations "u ! ,heal? ,insurance ,portability & ,acc\ntability ,act ( #aiif 7,public ,law #ajd-aia72 & 7,e7 does n include an x ray1 ro5tg5 process1 comput$ tomography1 ,,mri1 ,,pet scan1 mammography1 or o!r image or film ( ! human anatomy us$ to diagnose1 prognose1 or treat an illness or o!r m$ical condition or to fur!r validate sci5tific te/+ or scre5+4 7#b7 ,confid5tial & s5sitive in=mation ,! t]m confid5tial & s5sitive in=mation-- 7,a7 means p]sonal in=mation t c be us$ to uniquely id5tify an individual or an individual's acc\nt or prop]ty2 & 7,b7 includes g5etic m>k]s1 g5etic te/+ in=mation1 unique id5tifi] numb]s to locate acc\nts or prop]ty1 acc\nt numb]s1 p]sonal id5tification numb]s1 pass codes1 driv]'s lic5se numb]s1 or ,social ,security numb]s4 7#c7 ,private entity ,! t]m private entity-- 7,a7 means any individual1 p>tn]%ip1 corporation1 limit$ liability company1 association1 or o!r gr\p1 h[ev] organiz$2 & 7,b7 does n include any ,f$]al1 ,/ate1 or local gov]nm5t ag5cy or academic in/itution4 7#d7 ,writt5 release ,! t]m writt5 release means-- 7,a7 specific1 discrete1 freely giv51 unambigu\s1 & in=m$ writt5 cons5t giv5 by an individual :o is n "u any duress or undue influ5ce ( an entity or ?ird p>ty at ! "t su* cons5t is giv52 or 7,b7 9 ! context ( employm5t1 a release execut$ by an employee z a condition ( employm5t4 #c4 ,collection1 ret5tion1 disclosure1 & de/ruction ( biometric in=mation 7a7 ,writt5 policy 7#a7 ,9 g5]al ,n lat] ?an #fj days aft] ! date ( ! enactm5t ( ?is ,act1 any private entity 9 possession ( biometric id5tifi]s or biometric in=mation conc]n+ an individual %all develop & make available to ! public a writt5 policy e/abli%+ a ret5tion s*$ule & guidel9es = p]man5tly de/roy+ su* biometric id5tifi]s & biometric in=mation n lat] ?an ! e>li] (-- 7,a7 ! date on :i* ! initial purpose = collect+ or obta9+ su* id5tifi]s or in=mation has be5 satisfi$1 if ! individual f :om ! biometric in=mation 0 collect$-- 7i7 freely cons5t$ to ! orig9al purpose = su* collection2 & 7ii7 c\ld h decl9$ su* collection )\t consequ5ce2 or 7,b7 #a ye> aft] ! individual's la/ int5tional int]action ) ! private entity4 7#b7 ,compliance ,abs5t a valid w>rant or subpo5a issu$ by a c\rt ( compet5t jurisdiction1 a private entity 9 possession ( biometric id5tifi]s or biometric in=mation %all comply ) ! ret5tion s*$ule & de/ruction guidel9es e/abli%$ pursuant to p>agraph 7#a74 7b7 ,limitations 7#a7 ,9 g5]al ,a private entity may n collect1 capture1 pur*ase1 receive ?r\gh trade1 or o!rwise obta9 a p]son's or a cu/om]'s biometric id5tifi] or biometric in=mation unless-- 7,a7 ! entity requires ! id5tifi] or in=mation-- 7i7 to provide a s]vice = ! p]son or cu/om]2 or 7ii7 = ano!r valid bus9ess purpose specifi$ 9 ! writt5 policy publi%$ pursuant to section #c2 & 7,b7 ! entity fir/-- 7i7 in=ms ! p]son or cu/om]1 or 8 or h] legally au?oriz$ repres5tative1 9 writ+-- 7,i7 t su* biometric id5tifi] or biometric in=mation is be+ collect$ or /or$2 & 7,,ii7 ( ! specific purpose & l5g? ( t]m = :i* a biometric id5tifi] or biometric in=mation is be+ collect$1 /or$1 & us$2 & 7ii7 receives a writt5 release execut$ by ! subject ( ! biometric id5tifi] or biometric in=mation or by ! subject's legally au?oriz$ repres5tative4 7#b7 ,writt5 release ,a writt5 release "u p>agraph 7#a77;,b7-- 7,a7 may n be s\ght ?r\gh1 z a "p (1 or o!rwise comb9$ ) any o!r cons5t or p]mission seek+ in/rum5t or function2 7,b7 may n be comb9$ ) an employm5t contract2 & 7,c7 if x involves a m9or1 may only be obta9$ ?r\gh ! m9or's p>5t or gu>dian4 7c7 ,prohibit$ acts ,a private entity 9 possession ( a biometric id5tifi] or biometric in=mation may n sell1 lease1 trade1 use = adv]tis+ purposes1 or o!rwise pr(it f a p]son's or a cu/om]'s biometric id5tifi] or biometric in=mation4 7d7 ,disclosure ,a private entity 9 possession ( a biometric id5tifi] or ! biometric in=mation ( a p]son1 includ+ a consum]1 job applicant1 employee1 =m] employee1 or contractor1 may n disclose1 r$isclose1 sell1 lease1 trade1 use = adv]tis+ purposes1 o!rwise dissem9ate1 or pr(it f su* biometric id5tifi] or biometric in=mation unless-- 7#a7 ! subject ( ! biometric id5tifi] or biometric in=mation1 or ! subject's legally au?oriz$ repres5tative1 provides a writt5 release to su* specifi$ action imm$iately prior to su* disclosure or r$isclosure1 includ+ a description (-- 7,a7 ! data t w be disclos$2 7,b7 ! reason = su* disclosure2 & 7,c7 ! recipi5ts ( su* data2 7#b7 ! disclosure or r$isclosure completes a f9ancial transaction reque/$ or au?oriz$ by ! subject ( ! biometric id5tifi] or ! biometric in=mation or ! subject's legally au?oriz$ repres5tative2 or 7#c7 ! disclosure or r$isclosure-- 7,a7 is requir$ by ,f$]al1 ,/ate1 or municipal law2 or 7,b7 is requir$ pursuant to a valid w>rant or subpo5a issu$ by a c\rt ( compet5t jurisdiction4 7e7 ,conditions ,a private entity 9 possession ( a biometric id5tifi] or biometric in=mation %all /ore1 transmit1 & protect f disclosure all biometric id5tifi]s & biometric in=mation-- 7#a7 us+ ! reasonable /&>d ( c>e )9 ! private entity's indu/ry2 & 7#b7 9 a mann] t is ! same z1 or m protective ?an1 ! mann] 9 :i* ! private entity /ores1 transmits1 & protects o!r confid5tial & s5sitive in=mation4 7f7 ,"r ,to "k ,any bus9ess t collects1 uses1 %>es1 or sells biometric id5tifi]s or biometric in=mation1 ^u ! reque/ ( an individual1 %all disclose1 free ( *>ge1 any su* in=mation relat+ to su* individual collect$ dur+ ! prec$+ #ab-mon? p]iod1 includ+-- 7#a7 ! categories ( p]sonal in=mation2 7#b7 specific pieces ( p]sonal in=mation2 7#c7 ! categories ( s\rces f :i* ! bus9ess collect$ p]sonal in=mation2 7#d7 ! purposes = :i* ! bus9ess uses ! p]sonal in=mation2 7#e7 ! categories ( ?ird p>ties ) :om ! bus9ess %>es ! p]sonal in=mation2 & 7#f7 ! categories ( in=mation t ! bus9ess sells or discloses to ?ird p>ties4 #d4 ,cause ( action 7a7 ,9 g5]al ,any individual aggriev$ by a violation ( section #c may br+ a civil action 9 a c\rt ( compet5t jurisdiction aga9/ a private entity t alleg$ly committ$ su* violation4 ,any su* violation con/itutes an injury-9-fact & a h>m to any affect$ individual4 7b7 ,admissibility ,except 9 a judicial inve/igation or proce$+ alleg+ a violation ( section #c1 in=mation obta9$ 9 violation ( section #c is n admissible by ! ,f$]al ,gov]nm5t 9 any crim9al1 civil1 adm9i/rative1 or o!r inve/igation or proce$+4 7c7 ,"r to sue ,an individual describ$ 9 subsection 7a7 may in/itute legal proce$+s aga9/ a private entity alleg$ to h violat$ section #c = ! relief describ$ 9 subsection 7e7 9 any c\rt ( compet5t jurisdiction4 7d7 ,en=cem5t by ,/ate attorneys g5]al ,! *ief law en=cem5t (fic] ( a ,/ate1 or any o!r ,/ate (fic] au?oriz$ by law to br+ actions on behalf ( ! resid5ts ( a ,/ate1 may br+ a civil action1 z p>5s patriae1 on behalf ( ! resid5ts ( su* ,/ate 9 an appropriate di/rict c\rt ( ! ,unit$ ,/ates to en=ce ?is ,act if ! *ief law en=cem5t (fic] or o!r ,/ate (fic] has reason to believe t ! int]e/s ( ! resid5ts ( ! ,/ate h be5 or are be+ ?reat5$ or adv]sely affect$ by a violation ( section #c4 7e7 ,=ms ( relief 7#a7 ,9 g5]al ,a pla9tiff br++ a civil action "u ?is section may recov]-- 7,a7 7i7 = ! neglig5t violations ( any provision ( section #c1 ! great] (-- 7,i7 #a1jjj 9 liquidat$ damages p] violation2 or 7,,ii7 ! actual damages suff]$ by ! pla9tiff2 or 7ii7 = ! int5tional or reckless violation ( any provision ( section #c1 ! sum (-- 7,i7 ! actual damages suff]$ by ! pla9tiff2 & 7,,ii7 any punitive damages aw>d$ by ! c\rt1 :i* %all be limit$ to #e1jjj p] violation2 7,b7 reasonable attorneys' fees & co/s1 includ+ exp]t witness fees & o!r litigation exp5ses2 & 7,c7 o!r relief1 includ+ an injunction1 z ! c\rt may deem appropriate4 7#b7 ,specific p]=mance ,a c\rt may require a private entity to p]man5tly de/roy ! biometric id5tifi]s1 biometric in=mation1 or confid5tial & s5sitive in=mation ( a pla9tiff "u ?is section4 #e4 ,rules ( con/ruction ,no?+ 9 ?is ,act may be con/ru$-- 7#a7 to impact ! admission or discov]y ( biometric id5tifi]s & biometric in=mation 9 any action ( any k9d 9 any c\rt1 or be=e any tribunal1 bo>d1 ag5cy1 or p]son2 7#b7 to conflict ) ! ,heal? ,insurance ,portability & ,acc\ntability ,act ( #aiif 7,public ,law #ajd-aia72 7#c7 to conflict ) title ,v ( ! ,f$]al ,gramm-,lea*-,bliley ,act 7#ae ,u4,s4,c4 #fhja et seq472 7#d7 to apply to a contractor1 subcontractor1 or ag5t ( a ,f$]al1 ,/ate1 or local gov]nm5t ag5cy 9 ! c\rse ( employm5t ) su* ag5cy2 or 7#e7 to preempt or sup]s$e any ,f$]al1 ,/ate1 or local law t imposes a m /r+5t limitation ?an ! limitations describ$ 9 section #c4