MN HF4005

Biometric data includes facial images, retina/iris scans, fingerprints, voiceprints, and hand/face geometry that can identify an individual

Prior consent is required before collecting any biometric data from an individual

Sale, lease, or disclosure of biometric data is prohibited except for: identification in case of disappearance/death with consent, completing authorized financial transactions, compliance with state/federal law, or law enforcement with a warrant

Biometric data must be deleted within one year after the collection purpose expires; for employee data collected for security, this means within one year of employment termination

Violations carry civil penalties up to $25,000 per violation, enforceable by the attorney general; voiceprint data held by financial institutions is exempt