HB5635 Summary

• Amends the Biometric Information Privacy Act (BIPA) to define new terms including "biometric lock," "biometric time clock," "electronic signature," "person," and "security purpose"

• Exempts biometric information converted to mathematical representations that cannot be recreated, and exempts information captured by biometric time clocks and locks from BIPA requirements

• Allows private entities to collect biometric information without consent for security purposes (preventing theft, fraud, protecting property, and assisting law enforcement) if they document deletion processes

• Requires aggrieved persons to provide 30 days' written notice of alleged violations before filing suit, allowing the private entity 30 days to cure the violation and avoid liability

• Establishes that multiple violations using the same collection method from the same person constitute a single violation, limiting recovery to one damages award per violation type