AZ SB1717

Prohibits capturing an individual's biometric identifier (iris scan, fingerprint, voiceprint, face geometry, etc.) for commercial purposes without first informing the individual and obtaining their consent

Images or media containing biometric identifiers found on the internet or public sources do not constitute valid consent unless the individual themselves made that content publicly available

Restricts sale, lease, or disclosure of biometric identifiers except in limited circumstances: consent for identification if the person disappears or dies, completing a financial transaction the individual authorized, compliance with federal or state law, or disclosure to law enforcement with a warrant

Requires businesses to protect biometric identifiers using reasonable care equal to or greater than protections for other confidential information, and to destroy the data within one year after the collection purpose expires

Establishes civil penalties of up to $25,000 per violation, enforceable by the Arizona Attorney General