Consumers will have the choice to consent before companies collect and disclose biometric information, such as DNA and retina images, under a bill passed by the California Senate Judiciary Committee.
Senate Bill 1189, the Biometric Information Privacy Act, was authored by state Sen. Bob Wieckowski, D-Fremont.
“SB 1189 expands consumers’ control over their personal information by prohibiting private entities from selling, trading, or profiting from the disclosure of someone’s biometric information without their consent,” Wieckowski said in a statement.
“Biometric information involves immutable and highly distinctive traits that are irrevocably tied to our personal identities,” Wieckowski said. “Unlike a password or a pin code, when compromised or leaked, biometrics cannot be easily changed.”
Wieckowski’s bill expands on what is considered biometric information to include data created through automatic measurements of a person’s biological and behavioral characteristics. That could be faceprints, fingerprints, voiceprints, images of the retina and iris or other biological details that could establish a person’s identity.
“Biometric information involves immutable and highly distinctive traits that are irrevocably tied to our personal identities. Unlike a password or a pin code, when compromised or leaked, biometrics cannot be easily changed.” Sen. Bob Wieckowski
The bill will also give Californians a private right of action if a company violates a resident’s rights.
If the bill becomes law, private entities will have to publish a written policy spelling out how long they will keep the information and guidelines for getting rid of it permanently.
SB 1189 aims to supplement the California Consumer Privacy Act of 2018, which gave consumers the right to deny businesses the opportunity to sell consumers’ personal information. SB 1189 adds more biometric businesses to the list established by the California Consumer Privacy Act of 2018.
“People should be able to choose which companies they trust with their biometric information,” said Hayley Tsukayama, legislative activist at the Electronic Frontier Foundation, which is sponsoring the bill, in a statement.
“When this information is misused, it can threaten privacy, free expression, equity and security,” Tsukayama said.
Co-sponsoring the bill is the Privacy Rights Clearinghouse, a nonprofit focused on the privacy rights and issues of consumers.
