CS/HB 1153 - Biometric Information Privacy Summary

• Creates the "Florida Biometric Information Privacy Act" establishing requirements for private entities handling biometric identifiers (retina/iris scans, fingerprints, voice prints, hand or face geometry) and biometric information.

• Requires private entities to develop publicly available written policies for destroying biometric data within 3 years of last interaction or upon satisfaction of initial collection purpose, except when subject to valid warrant or subpoena.

• Prohibits collection of biometric data without written notice of purpose, length of term, and written consent from the subject or legally authorized representative.

• Restricts selling, leasing, trading, or profiting from biometric information without written or electronic consent and prohibits disclosure unless subject consents, disclosure completes authorized financial transaction, required by law, or mandated by court warrant or subpoena.

• Mandates biometric data be stored, transmitted, and protected using reasonable industry standard of care and at least as protective as the entity's protection of other confidential and sensitive information; exempts government contractors, state agencies, and financial institutions subject to Gramm-Leach-Bliley Act.

• Takes effect October 1, 2019.