Biometric information; the Biometric Information Privacy Act; private entities; policy; identifiers; information; dissemination; standards; right of action; recovery; effective date.
Impact
By mandating that private entities must develop clear and publicly accessible policies for handling biometric data, the bill seeks to enhance consumer protections. Specifically, the legislation requires entities to obtain written consent from individuals before collecting their biometric identifiers and establishes penalties for violations, including the provision for a private right of action. This right enables aggrieved individuals to seek damages in court, which can range from $1,000 for negligent violations to $5,000 for willful infringements, thereby creating a stronger deterrent against misuse of biometric information.
Summary
House Bill 3647 proposes the Biometric Information Privacy Act which aims to safeguard the use of biometric information by private entities in Oklahoma. The bill establishes explicit definitions for terms like 'biometric identifier' and 'biometric information', and outlines guidelines for private entities regarding the collection, storage, and dissemination of such data. This legislation reflects a growing concern over data privacy, particularly in relation to technologies that utilize biometric identifiers such as fingerprints and facial recognition.
Contention
The introduction of HB 3647 has spurred dialogue around the balance between innovation in biometric technologies and the privacy rights of individuals. Some stakeholders, particularly those in the technology sector, have expressed concerns that the requirements may impose significant operational burdens on businesses and stifle technological advancement. Opponents of the bill argue that while the intent to protect consumer privacy is commendable, the ramifications of excessive regulation could hinder the development of beneficial biometric solutions. Thus, the bill reflects ongoing debates over privacy, economic growth, and regulation within the rapidly evolving tech landscape.
Establishes the Biometric Information Privacy Act, which establishes requirements for and a cause of action against private entities in possession of biometric information
Establishes the biometric identifier privacy act; requires private entities in possession of biometric identifiers or biometric information to develop a written policy establishing a retention schedule and guidelines for permanently destroying biometric identifiers and biometric information when the initial purpose for collecting or obtaining such identifiers or information has been satisfied or within three years of the individual's last interaction with the private entity, whichever occurs first.
Establishes the biometric identifier privacy act; requires private entities in possession of biometric identifiers or biometric information to develop a written policy establishing a retention schedule and guidelines for permanently destroying biometric identifiers and biometric information when the initial purpose for collecting or obtaining such identifiers or information has been satisfied or within three years of the individual's last interaction with the private entity, whichever occurs first.
Establishes the biometric privacy act; requires private entities in possession of biometric identifiers or biometric information to develop a written policy establishing a retention schedule and guidelines for permanently destroying biometric identifiers and biometric information when the initial purpose for collecting or obtaining such identifiers or information has been satisfied or within three years of the individual's last interaction with the private entity, whichever occurs first.
"New Jersey Disclosure and Accountability Transparency Act (NJ DaTA)"; establishes certain requirements for disclosure and processing of personally identifiable information; establishes Office of Data Protection and Responsible Use in Division of Consumer Affairs.
"New Jersey Disclosure and Accountability Transparency Act (NJ DaTA)"; establishes certain requirements for disclosure and processing of personally identifiable information; establishes Office of Data Protection and Responsible Use in Division of Consumer Affairs.