Biometric Privacy Laws

Biometrics is the automated recognition of an individual by means of certain physical characteristics (e.g., fingerprints; facial recognition; voice recognition). It can be used in businesses to control access to physical spaces and to recognize customers and employees (my bank uses voice recognition for phone communications). But there’s concern that the use of biometrics can violate a person’s right to privacy. There is no federal law addressing biometrics and privacy. A number of states have biometric laws. For example, in Illinois, a “private entity in possession of biometric identifiers or biometric information must develop a written policy, made available to the public, establishing a retention schedule and guidelines for permanently destroying biometric identifiers and biometric information when the initial purpose for collecting or obtaining such identifiers or information has been satisfied or within 3 years of the individual’s last interaction with the private entity, whichever occurs first.” You can see a map showing existing and proposed laws effective as of March 2025. #IdeaoftheDay