IL HB4330

Prohibits private entities from requiring customers or employees to provide biometric identifiers or information as a condition for receiving goods or services, except where necessary for background checks or employee security protocols.

Exempts medical service companies, law enforcement agencies, and governmental entities from the biometric collection restriction.

Requires private entities to develop and publicly disclose written policies for retaining biometric data for no longer than 3 years after last interaction or until the original collection purpose is satisfied, whichever comes first.

Mandates that private entities obtain written consent before collecting biometric information and prohibits selling, leasing, trading, or profiting from biometric data.

Requires private entities to protect biometric information with security standards at least as protective as the standards used for other confidential and sensitive information.