Loading chat...
ID H0511
Bill
Status
2/13/2014
Primary Sponsor
State Affairs Committee
Click for details
AI Summary
-
Creates the Idaho Biometric Data Protection Act establishing requirements for private entities that collect, store, or use biometric identifiers (fingerprints, iris scans, facial recognition, DNA, etc.) and biometric information.
-
Requires private entities to develop a written public policy for destroying biometric data when the initial purpose is satisfied or within 3 years of last business dealings, whichever occurs first.
-
Prohibits private entities from collecting biometric data without first informing the subject in writing of the purpose and duration, and obtaining written consent; also prohibits selling, leasing, trading, or profiting from biometric information.
-
Allows aggrieved persons to sue for violations, with damages of $1,000 (negligent violations) or $5,000 (intentional or reckless violations), plus attorney's fees, court costs, and injunctive relief as appropriate.
-
Excludes from the Act's application certain medical records, health care data under federal law, organ transplant materials, genetic materials, medical imaging, and biometric data required by state or federal law.
Legislative Description
Adds to existing law relating to the collection of information to establish provisions relating to the responsibility of private entities in collecting and storing certain information, to provide for a right of action and damages, and to provide for the application of law.
BIOMETRIC DATA PROTECTION ACT
Last Action
U.C. to be returned to State Affairs Committee
3/20/2014