PA HB596

Commercial establishments (retail stores, restaurants, hotels, entertainment venues) that collect biometric identifier information must post clear signage near all customer entrances disclosing the collection, retention, conversion, storage, or sharing of such data

Biometric identifier information includes retinal or iris scans, fingerprints, voiceprints, and scans of hand or face geometry

Commercial establishments are prohibited from selling, leasing, trading, or sharing biometric identifier information for profit or anything of value

Customers may file civil lawsuits after providing 30 days written notice, with damages of $500 per signage violation, $500 per negligent unauthorized disclosure, and $5,000 per intentional or reckless violation, plus attorney fees

Exemptions apply to government entities, financial institutions, and photographs or videos not analyzed by identification software and not shared with third parties (except law enforcement); the act takes effect in 180 days