HB4692 Summary

• Amends the Biometric Information Privacy Act to add new definitions including "biometric lock," "biometric time clock," "electronic signature," "in writing," and "security purpose."

• Allows private entities to collect biometric information for security purposes (preventing retail theft, fraud, property trespass, controlling access, protecting from harm) without satisfying standard consent and notification requirements if they retain the data only as long as reasonably necessary and document a deletion process.

• Exempts biometric information converted to mathematical representations (such as numeric strings that cannot recreate the original biometric identifier) from BIPA requirements when used in biometric time clocks or biometric locks.

• Requires private entities collecting the same repeated biometric process to obtain consent and provide notification only during initial collection, not for each subsequent instance.

• Requires the Department of Labor to provide employers with BIPA compliance information on its website and clarifies that nothing in the Workers' Compensation Act limits recovery under the Biometric Information Privacy Act.