,,ii  #aaf? ,,congress  #a/ ,session    
,s4 #hdg  ,,9 ,,! ,,s5ate ,,( ,,!       
,,unit$ ,,/ates  ,m>* #ad1 #bjai,mr4    
,blunt 7= himself & ,mr4 ,s*atz7        
introduc$ ! foll[+ bill2 :i* 0 read     
twice & ref]r$ to ! ,committee on       
,comm]ce1 ,sci5ce1 & ,transportation  ,a
 ,,bill  ,to prohibit c]ta9 entities f  
us+ facial recognition te*nology to     
id5tify or track an end us] )\t obta9+ !
 affirmative cons5t ( ! end us]1 & = o!r
 purposes4  #a4 ,%ort title ,?is ,act   
may be cit$ z ! ,comm]cial ,facial      
,recognition ,privacy ,act ( #bjai4  #b4
 ,def9itions ,9 ?is ,act3 7#a7          
,affirmative cons5t ,! t]m affirmative  
cons5t means ! cons5t ( an end us] t    
involves an individual1 volunt>y1 &     
explicit agreem5t to ! collection & data
 use policies ( a controll]4  7#b7      
,controll] ,! t]m controll] means a     
cov]$ entity t1 alone or jo9tly ) o!rs1 
det]m9es ! purposes & means ( ! process+
 ( facial recognition data4  7#c7 ,cov]$
 entity ,! t]m cov]$ entity-- 7,a7 means

 any p]son1 includ+ corporate           
affiliates1 t collects1 /ores1 or       
processes facial recognition data2 &    
7,b7 does n include-- 7i7 ! ,f$]al      
,gov]nm5t or any ,/ate or local         
gov]nm5t2  7ii7 a law en=cem5t ag5cy2   
7iii7 a national security ag5cy2 or     
7iv7 an intellig5ce ag5cy4  7#d7 ,end   
us] ,! t]m end us] means an individual4 
7#e7 ,facial recognition te*nology ,!   
t]m facial recognition te*nology means  
te*nology t-- 7,a7 analyzes facial      
features 9 /ill or video images2 &  7,b7
 7i7 is us$ to assign a unique1 p]si/5t 
id5tifi]2 or  7ii7 is us$ = ! unique    
p]sonal id5tification ( a specific      
individual4  7#f7 ,facial recognition   
data ,! t]m facial recognition data     
means any unique attribute or feature ( 
! face ( an end us] t is us$ by facial  
recognition te*nology to assign a       
unique1 p]si/5t id5tifi] or = ! unique  
p]sonal id5tification ( a specific      
individual4  7#g7 ,process ,! t]m       
process means any op]ation t is p]=m$ on

 facial recognition data1 includ+       
collection1 creation1 g5]ation1 record+1
 organization1 /ructur+1 /orage1        
adaptation1 alt]ation1 retrieval1       
consultation1 use1 disclosure1 transf]1 
dissem9ation or o!rwise mak+ available1 
comb9ation1 erasure1 or de/ruction4     
7#h7 ,processor ,! t]m processor means a
 cov]$ entity t processes facial        
recognition data on behalf ( a          
controll]4  7#i7 ,security application  
,! t]m security application means loss  
prev5tion & any o!r application int5d$  
to detect or prev5t crim9al activity1   
includ+ %oplift+ & fraud4  7#aj7        
,unaffiliat$ ?ird p>ty ,! t]m           
unaffiliat$ ?ird p>ty means any p]son   
o!r ?an-- 7,a7 a us] ( a product or     
s]vice ( a cov]$ entity2  7,b7 an       
employee ( a cov]$ entity2  7,c7 a p]son
 "u common control or own]%ip ) a cov]$ 
entity2 or  7,d7 a p]son to :om-- 7i7 an
 end us] direct$ a cov]$ entity to      
disclose in=mation d]iv$ f facial       
recognition te*nology2 or  7ii7         

in=mation d]iv$ f facial recognition    
te*nology 0 disclos$ ) ! affirmative    
cons5t ( an end us]4  #c4 ,prohibit$    
conduct  7a7 ,9 g5]al ,except z provid$ 
9 subsection 7e71 x %all be unlawful = a
 controll] to kn[+ly-- 7#a7 use facial  
recognition te*nology to collect facial 
recognition data1 unless ! controll]--  
7,a7 obta9s f an end us] affirmative    
cons5t 9 accordance ) subsection 7b72 & 
7,b7 to ! ext5t possible1 if facial     
recognition te*nology is pres5t1        
provides to ! end us]-- 7i7 a concise   
notice t facial recognition te*nology is
 pres5t1 &1 if contextually appropriate1
 :]e ! end us] c f9d m in=mation ab\t ! 
use ( facial recognition te*nology by ! 
controll]2 &  7ii7 docum5tation t       
includes g5]al in=mation t expla9s !    
capabilities & limitations ( ! facial   
recognition te*nology 9 t]ms t end us]s 
are able to und]/&2  7#b7 use ! facial  
recognition te*nology to discrim9ate    
aga9/ an end us] 9 violation (          
applicable ,f$]al or ,/ate law2  7#c7   

repurpose facial recognition data = a   
purpose t is diff]5t f ^? pres5t$ to !  
end us] "u p>agraph 7#a77;,a72 or  7#d7 
%>e ! facial recognition data ) an      
unaffiliat$ ?ird p>ty )\t affirmative   
cons5t t is sep>ate f ! affirmative     
cons5t requir$ "u p>agraph 7#a77;,a74   
7b7 ,cons5t  7#a7 ,9 g5]al ,:5 obta9+   
affirmative cons5t1 a controll] %all    
make available to an end us] a notice t 
describes ! specific practices ( !      
processor 9 t]ms t end us]s are able to 
und]/& reg>d+ ! collection1 /orage1 &   
use ( facial recognition data1 includ+--
 7,a7 ! reasonably =eseeable purposes1  
or examples1 = :i* ! processor collects 
& %>es in=mation d]iv$ f facial         
recognition te*nology or uses facial    
recognition te*nology2  7,b7 ! data     
ret5tion & deid5tification practices ( !
 processor2 &  7,c7 if ! controll] (f]s 
! ability to review1 correct1 or delete 
in=mation d]iv$ f facial recognition    
te*nology1 ! process to accompli% su*   
actions4  7#b7 ,processor requirem5t ,if

 ! processor & controll] are n ! same   
entity1 ! processor %all make easily    
accessible to controll]s ! in=mation    
requir$ "u p>agraph 7#a74  7#c7         
,condition+ s]vice on cons5t prohibit$  
,if ! use ( facial recognition te*nology
 is n necess>y = a s]vice1 no controll] 
may-- 7,a7 condition ! s]vice on cons5t 
by an end us] to waive privacy rights2  
or  7,b7 t]m9ate or refuse ! s]vice z a 
direct consequ5ce ( refusal by ! end us]
 to provide affirmative cons5t to !     
cov]$ entity4  7c7 ,review ,a controll]1
 & ! processor if applicable1 %all      
employ mean+ful human review prior to   
mak+ any f9al decision bas$ on ! output 
( facial recognition te*nology if ! f9al
 decision-- 7#a7 may result 9 a         
reasonably =eseeable & mat]ial physical 
or f9ancial h>m to an end us]2 or  7#b7 
may be unexpect$ or highly (f5sive to a 
reasonable end us]4  7d7 ,application   
programm+ int]face ,a cov]$ entity t    
makes a facial recognition te*nology    
available z an onl9e s]vice %all make   

available an application programm+      
int]face to enable at lea/ #a ?ird p>ty 
t is legitimately engag$ 9 indep5d5t    
te/+ to conduct reasonable te/s ( !     
facial recognition te*nology = accuracy 
& bias4  7e7 ,exceptions  7#a7 ,9 g5]al 
,except z provid$ 9 p>agraph 7#b71      
subsections 7a77#a7 & 7b7 %all n apply  
to controll]s t use-- 7,a7 an           
application t-- 7i7 is a product or     
s]vice design$ = p]sonal file managem5t 
or photo or video sort+ or /orage if !  
facial recognition te*nology is n us$ = 
unique p]sonal id5tification ( a        
specific individual2  7ii7 involves     
id5tification ( public figures =        
j\rnali/ic m$ia creat$ = public int]e/2 
7iii7 involves id5tification ( public   
figures 9 copyright$ mat]ial = !atrical 
release2 or  7iv7 is us$ if !re is an   
em]g5cy involv+ imm95t dang] or risk (  
dea? or s]i\s physical injury to an     
individual2 or  7,b7 facial recognition 
data to det]m9e :e!r an end us] has giv5
 affirmative cons5t if ! controll]      

imm$iately & p]man5tly de/roys ! facial 
recognition data aft] det]m9+ t ! end   
us] has n giv5 affirmative cons5t4  7#b7
 ,security applications ,subsections    
7a77#a77;,a7 & 7b7 %all n apply to      
controll]s t use an application t is a  
security application4  7#c7 ,rule (     
con/ruction ,no?+ 9 p>agraph 7#a77;,b7  
may be con/ru$ to au?orize ! mass scann+
 ( faces 9 spaces :]e end us]s d n h a  
reasonable expectation t facial         
recognition te*nology is be+ us$ on !m4 
#d4 ,en=cem5t  7a7 ,unfair or deceptive 
act or practice ,a violation ( section  
#c %all be treat$ z a violation ( a rule
 def9+ an unfair or deceptive act or    
practice prescrib$ "u section           
#ah7;a77#a77;,b7 ( ! ,f$]al ,trade      
,commission ,act 7#ae ,u4,s4,c4         
#eg;a7a77#a77;,b774  7b7 ,p[]s (        
,commission  7#a7 ,9 g5]al ,! ,f$]al    
,trade ,commission %all en=ce ?is ,act 9
 ! same mann]1 by ! same means1 & ) !   
same jurisdiction z ?\gh all applicable 
t]ms & provisions ( ! ,f$]al ,trade     

,commission ,act 7#ae ,u4,s4,c4 #da et  
seq47 7 incorporat$ into & made a "p (  
?is ,act4  7#b7 ,privileges & immunities
 ,any p]son :o violates section #c %all 
be subject to ! p5alties & entitl$ to ! 
privileges & immunities provid$ 9 !     
,f$]al ,trade ,commission ,act 7#ae     
,u4,s4,c4 #da et seq474  7c7 ,en=cem5t  
by ,/ates  7#a7 ,9 g5]al ,if ! attorney 
g5]al ( a ,/ate has reason to believe t 
an int]e/ ( ! resid5ts ( ! ,/ate has be5
 or is be+ ?reat5$ or adv]sely affect$  
by a practice t violates section #c1 !  
attorney g5]al ( ! ,/ate may1 z p>5s    
patriae1 br+ a civil action on behalf ( 
! resid5ts ( ! ,/ate 9 an appropriate   
di/rict c\rt ( ! ,unit$ ,/ates to obta9 
appropriate relief4  7#b7 ,rights (     
,commission  7,a7 ,notice to ,commission
  7i7 ,9 g5]al ,except z provid$ 9      
clause 7iii71 ! attorney g5]al ( a      
,/ate1 be=e initiat+ a civil action "u  
p>agraph 7#a71 %all provide writt5      
notification to ! ,commission t !       
attorney g5]al int5ds to br+ su* civil  

action4  7ii7 ,cont5ts ,! notification  
requir$ "u clause 7i7 %all include a    
copy ( ! compla9t to be fil$ to initiate
 ! civil action4  7iii7 ,exception ,if x
 is n feasible = ! attorney g5]al ( a   
,/ate to provide ! notification requir$ 
"u clause 7i7 be=e initiat+ a civil     
action "u p>agraph 7#a71 ! attorney     
g5]al %all notify ! ,commission         
imm$iately ^u in/itut+ ! civil action4  
7,b7 ,int]v5tion by ,commission ,!      
,commission may-- 7i7 int]v5e 9 any     
civil action br\ght by ! attorney g5]al 
( a ,/ate "u p>agraph 7#a72 &  7ii7 ^u  
int]v5+-- 7,i7 be he>d on all matt]s    
aris+ 9 ! civil action2 &  7,,ii7 file  
petitions = appeal ( a decision 9 !     
civil action4  7#c7 ,inve/igatory p[]s  
,no?+ 9 ?is subsection may be con/ru$ to
 prev5t ! attorney g5]al ( a ,/ate f    
ex]cis+ ! p[]s conf]r$ on ! attorney    
g5]al by ! laws ( ! ,/ate to conduct    
inve/igations1 to adm9i/] oa?s or       
affirmations1 or to compel ! att5dance (
 witnesses or ! production ( docum5t>y  

or o!r evid5ce4  7#d7 ,v5ue2 s]vice (   
process  7,a7 ,v5ue ,any action br\ght  
"u p>agraph 7#a7 may be br\ght 9-- 7i7 !
 di/rict c\rt ( ! ,unit$ ,/ates t meets 
applicable requirem5ts relat+ to v5ue "u
 section #acia ( title #bh1 ,unit$      
,/ates ,code2 or  7ii7 ano!r c\rt (     
compet5t jurisdiction4  7,b7 ,s]vice (  
process ,9 an action br\ght "u p>agraph 
7#a71 process may be s]v$ 9 any di/rict 
9 :i*-- 7i7 ! def5dant is an inhabitant1
 may be f\nd1 or transacts bus9ess2 or  
7ii7 v5ue is prop] "u section #acia (   
title #bh1 ,unit$ ,/ates ,code4  7#e7   
,actions by o!r ,/ate (ficials  7,a7 ,9 
g5]al ,9 addition to a civil action     
br\ght by an attorney g5]al "u p>agraph 
7#a71 any o!r (fic] ( a ,/ate :o is     
au?oriz$ by ! ,/ate to d s may br+ a    
civil action "u p>agraph 7#a71 subject  
to ! same requirem5ts & limitations t   
apply "u ?is subsection to civil actions
 br\ght by attorneys g5]al4  7,b7 ,sav+s
 provision ,no?+ 9 ?is subsection may be
 con/ru$ to prohibit an au?oriz$ (ficial

 ( a ,/ate f initiat+ or cont9u+ any    
proce$+ 9 a c\rt ( ! ,/ate = a violation
 ( any civil or crim9al law ( ! ,/ate4  
#e4 ,regulations  7a7 ,regulations ,n   
lat] ?an #ahj days aft] ! date (        
enactm5t ( ?is ,act1 ! ,f$]al ,trade    
,commission1 9 consultation ) !         
,national ,in/itute ( ,/&>ds &          
,te*nology1 %all promulgate regulations1
 9 accordance ) section #eec ( title #e1
 ,unit$ ,/ates ,code-- 7#a7 describ+    
data security1 m9imization1 & ret5tion  
/&>ds to be met at a m9imum by          
processors2  7#b7 def9+ :at is h>mful & 
highly (f5sive "u p>agraphs 7#a7 & 7#b7 
( section #c7;c72 &  7#c7 exp&+ ! li/ ( 
exceptions describ$ 9 section #c7;e7 9  
cases :]e x is impossible = a controll] 
to obta9 affirmative cons5t f1 or       
provide notice to1 end us]s4  7b7       
,consid]ations ,9 promulgat+ regulations
 "u subsection 7a71 ! ,commission %all  
consid]1 among o!r factors-- 7#a7 ! size
 ( ! processor2  7#b7 ! complexity ( !  
(f]+s ( ! processor2 &  7#c7 ! nature & 

scope ( ! activities ( ! processor4  #f4
 ,relation to ,/ate laws  7a7 ,9 g5]al  
,?is ,act %all n be con/ru$ z sup]s$+1  
alt]+1 or affect+ any /atute1           
regulation1 ord]1 or int]pretation 9    
effect 9 any ,/ate1 except to ! ext5t t 
su* /atute1 regulation1 ord]1 or        
int]pretation is inconsi/5t ) !         
provisions ( ?is ,act1 & !n only to !   
ext5t ( ! inconsi/5cy4  7b7 ,great]     
protection "u ,/ate law ,= purposes (   
?is ,act1 a ,/ate /atute1 regulation1   
ord]1 or int]pretation is n inconsi/5t )
 ! provisions ( ?is subtitle if !       
protection su* /atute1 regulation1 ord]1
 or int]pretation af=ds any p]son is    
great] ?an ! protection provid$ "u ?is  
,act1 z det]m9$ by ! ,f$]al ,trade      
,commission4  #g4 ,relation to o!r      
privacy & security laws ,no?+ 9 ?is ,act
 may be con/ru$ to-- 7#a7 modify1 limit1
 or sup]s$e ! op]ation ( any privacy or 
security provision 9 any o!r ,f$]al or  
,/ate law 7includ+ regulations72 or     
7#b7 limit ! au?ority ( ! ,commission "u

 any o!r provision ( law4  #h4          
,effective date ,?is ,act %all take     
effect on ! date t is #ahj days aft] !  
date ( enactm5t ( ?is ,act4