SB1511 Summary

• Amends the Biometric Information Privacy Act (BIPA) to define "security purpose" as preventing or investigating retail theft, fraud, property theft, trespass, controlling property access, protecting persons from harm (stalking, violence, harassment), and assisting law enforcement investigations.

• Allows private entities to collect biometric identifiers and information without written consent if collected solely for security purposes, retained only as long as reasonably necessary, and the entity documents a process and timeframe for deletion.

• Requires private entities with biometric data to develop a written public policy establishing retention schedules and guidelines for permanent destruction when the initial collection purpose is satisfied or within 3 years of last customer interaction, whichever occurs first.

• Maintains existing prohibitions on selling, leasing, trading, or profiting from biometric information, and restricts disclosure except with subject consent, to complete authorized financial transactions, by legal requirement, or pursuant to valid warrant or subpoena.

• Requires private entities to store, transmit, and protect biometric information using reasonable industry standards and in a manner at least as protective as other confidential and sensitive information they maintain.