Biometric Privacy Laws
67 articles · page 1 of 2
A
Alabama Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Alabama has no standalone biometric privacy law, and its breach notification act does not cover biometric data. Learn what changes under the 2026 Alabama Personal Data Protection Act (effective 2027), penalties up to $500K, and employer obligations.
Alaska Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Alaska has no biometric privacy law despite multiple legislative attempts. Learn what protections exist, gaps in coverage, and pending bills as of 2026.
Apple Faceprints Go to BIPA Jury; Face Crops Ruled Not Biometric
An Illinois federal judge ruled on September 30, 2026 that Apple Photos faceprints can go to a BIPA jury, but held that face crops are not biometric identifiers.
Arizona Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Arizona has no standalone biometric privacy law. Learn how ARS 18-551/552 protects biometric data in breaches, penalties up to $500K, and pending legislation.
Arkansas Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Arkansas protects biometric data under its breach notification law, not a dedicated statute. Learn what the Personal Information Protection Act requires in 2026.
B
Biometric Privacy Laws by State (2026): BIPA, CUBI & Consent
Biometric privacy laws by state. Which states have biometric data laws like Illinois BIPA, Texas CUBI, and Washington, plus consent rules and your rights.
BIPA Compliance for Employers (2026): Step-by-Step
BIPA compliance for employers using fingerprint or face-scan timeclocks: the seven Section 15 steps, plus a free self-check tool. Avoid the most common violations.
BIPA Damages: What a Violation Is Worth (2026)
BIPA damages explained: the $1,000 and $5,000 statutory amounts, why the 2024 amendment ended per-scan math, and what people actually receive in settlements.
BIPA Explained: Illinois Biometric Privacy Act (740 ILCS 14)
BIPA, the Illinois Biometric Information Privacy Act (740 ILCS 14), explained: consent rules, the $1,000 to $5,000 penalties, key cases, and the 2024 amendment.
BIPA Statute of Limitations: The 5-Year Deadline (2026)
The BIPA statute of limitations is five years for all claims, settled by Tims v. Black Horse Carriers (2023). How the deadline works and when the clock starts.
C
California Biometric Privacy Laws: Collection, Consent & Penalties (2026)
California protects biometric data as sensitive personal information under the CCPA/CPRA. Learn about consumer rights, breach rules, employer duties, and CPPA enforcement.
Clearview AI Settlement Vacated by Seventh Circuit, Sent Back to District Court
The Seventh Circuit vacated approval of the Clearview AI biometric privacy class settlement on July 13, 2026, citing inadequate class representation. Here is what happens next.
Colorado Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Colorado biometric privacy law HB24-1130 requires consent before collecting fingerprints, facial scans, and other biometric data. Learn employer rules, retention limits, and penalties.
Connecticut Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Connecticut classifies biometric data as sensitive under the CTDPA, requiring opt-in consent before collection. AG-only enforcement with $5,000 per violation penalties.
D
Delaware Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Learn how Delaware's Personal Data Privacy Act protects biometric data like fingerprints and iris scans, including consent rules, penalties, and employer obligations.
District of Columbia Biometric Privacy Laws: Collection, Consent & Penalties (2026)
DC protects biometric data through its breach notification law (DC Code 28-3851). Learn what triggers notification, penalties, and how DC compares to states with stronger biometric laws.
Do You Have a BIPA Claim? Check Your Eligibility (2026)
Do you have a BIPA claim? Use our free checker. You may qualify if a private company in Illinois scanned your fingerprint or face without written consent.
F
Florida Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Florida biometric privacy law covers fingerprints, voiceprints, and iris scans under the FDBR. Learn opt-out rights, penalties, and the $1B threshold.
G
Georgia Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Georgia has no biometric privacy law. Learn what the Personal Identity Protection Act covers, how SB 111 could change protections, and what rights you have in 2026.
Google Nest Doorbell Facial Recognition Lawsuits: Bystander Faceprint Claims Filed in California
Two proposed class actions, filed June 29 and July 1, 2026 in N.D. Cal., allege Google's Nest 'Familiar Face Detection' scans bystanders' faces without consent.
H
Hawaii Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Hawaii covers biometric data through its breach notification law (HRS Ch. 487N) and constitutional privacy rights. Learn what fingerprint, voiceprint, and iris data protections apply.
I
Idaho Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Idaho has no dedicated biometric privacy law as of 2026. Learn what current statutes cover, pending legislation like H0744, and how Idaho compares to other states.
Illinois Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Illinois BIPA (740 ILCS 14) requires written consent before collecting fingerprints, face scans, or other biometrics. Violations carry $1,000-$5,000 in damages per violation.
Illinois Woman Sues Apple Over Face ID, Alleging Hidden Eye Scans Violate State Biometric Law
A newly filed class action alleges Apple's Face ID collects iris and retina scans without the specific consent Illinois law requires. Apple has not responded; claims are unproven.
Indiana Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Indiana's ICDPA classifies biometric data as sensitive, requiring opt-in consent for fingerprints, voiceprints, and iris scans. Learn consent rules, penalties, and exemptions.
Iowa Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Iowa classifies biometric data as sensitive under the ICDPA (effective Jan 2025). Learn about opt-out requirements, breach notification rules, and penalties.
K
Kansas Biometric Privacy Laws: What You Need to Know (2026)
Kansas has no dedicated biometric privacy law. Learn what limited protections exist for fingerprint and facial recognition data under current Kansas statutes.
Kentucky Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Learn how Kentucky's KCDPA classifies biometric data as sensitive, requiring opt-in consent. Covers definitions, consumer rights, exemptions, and AG enforcement.
L
Louisiana Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Louisiana has no standalone biometric privacy law but protects biometric data through breach notification rules. Learn the 60-day notice requirements and penalties.
M
Madison Square Garden Faces Class Actions Over a Facial-Recognition Data Breach (2026)
Proposed class actions hit Madison Square Garden in June 2026 over an alleged facial-recognition data breach. The negligence claims are unproven. What the law says.
Maine Biometric Privacy Laws: Facial Recognition Ban & Current Protections (2026)
Maine bans government facial recognition, but LD 1822 failed and no comprehensive biometric privacy law exists. Learn what protections apply today.
Maryland Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Learn how Maryland's MODPA protects biometric data like fingerprints and retina scans. Covers the strict necessity standard, sale ban, breach rules, and AG enforcement.
Massachusetts Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Massachusetts has no standalone biometric privacy law, but 201 CMR 17.00, Chapter 93A treble damages, and the pending Data Privacy Act (S.2608) protect biometric data.
Michigan Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Michigan protects biometric data through its Identity Theft Protection Act and Consumer Protection Act. Learn current rules, breach penalties, and pending 2026 legislation.
Minnesota Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Learn how Minnesota's MCDPA classifies biometric data as sensitive, requiring opt-in consent. Covers definitions, consumer rights, exemptions, and AG enforcement with $7,500 penalties.
Mississippi Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Mississippi has no biometric privacy law. Learn how Miss. Code 75-24-29 falls short, failed BIPA-style bills, employer rules, and federal protections that apply.
Missouri Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Missouri has no biometric privacy law and excludes biometric data from breach notification rules. Learn current protections, pending legislation, and employer obligations.
Montana Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Montana MCDPA classifies biometric data as sensitive, requiring opt-in consent. AG-only enforcement with penalties up to $7,500 per violation. No private right of action.
N
Nebraska Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Nebraska biometric privacy laws require opt-in consent under the NDPA. Learn about definitions, penalties up to $7,500 per violation, exemptions, and breach notification rules.
Nevada Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Nevada lacks a standalone biometric privacy law but protects health-related biometric data under NRS 603A. Learn about consent rules, sale bans, and enforcement.
New Hampshire Biometric Privacy Laws: Collection, Consent & Penalties (2026)
New Hampshire classifies biometric data as sensitive under RSA 507-H (effective Jan 2025). Learn about consent rules, penalties up to $10,000, and the Data Privacy Unit.
New Jersey Biometric Privacy Laws: Collection, Consent & Penalties (2026)
New Jersey biometric privacy law under the NJDPA requires consent before collecting fingerprints, facial geometry, or voiceprints. Learn the rules, penalties, and your rights.
New Mexico Biometric Privacy Laws: Collection, Consent & Penalties (2026)
New Mexico protects biometric data through its Data Breach Notification Act, requiring 45-day notification and AG reporting. No standalone biometric privacy law exists.
New York Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Guide to New York biometric privacy laws including the SHIELD Act, NYC Local Law 3, pending Biometric Privacy Act (S1422), and employer obligations for 2026.
NJ Supreme Court Sets Facial-Recognition Discovery Floor
The New Jersey Supreme Court ruled June 24, 2026 that defendants must receive FRT software name, error rates, probe photo, and candidate matches in discovery.
North Carolina Biometric Privacy Laws: Collection, Consent & Penalties (2026)
North Carolina protects biometric data through breach notification laws with treble damages. Learn about NC fingerprint laws, employer rules, and pending privacy legislation.
North Dakota Biometric Privacy Laws: Collection, Consent & Penalties (2026)
North Dakota has no standalone biometric privacy law. Learn how the state's identity theft statute, breach notification law, and insurance regulations address biometric data.
O
Ohio Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Ohio has no biometric privacy law. Learn how the Ohio Data Protection Act safe harbor, breach notification rules, and insurance regulations affect biometric data.
Oklahoma Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Oklahoma protects biometric data through its amended breach notification law (SB 626) and the Consumer Data Privacy Act (SB 546). No standalone biometric law exists.
Oregon Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Oregon biometric privacy laws under the OCPA require opt-in consent for biometric data. Portland bans facial recognition in public spaces with $1,000/day penalties.
P
Pennsylvania Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Pennsylvania lacks a standalone biometric privacy law. Learn how BPINA, the UTPCPL, and pending bills like HB 78 and HB 596 affect biometric data rights.
R
Rhode Island Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Rhode Island biometric privacy laws under the RIDTPPA require opt-in consent for fingerprint and biometric data collection, with AG-enforced fines of $100 to $500 for each unlawful disclosure.
S
Seventh Circuit Affirms BIPA Exemption for Voice-ID Vendor
The Seventh Circuit ruled Nuance is exempt from Illinois's BIPA under the financial-institution rule for authenticating Schwab customers via voice-ID.
Seventh Circuit Holds Illinois BIPA's 2024 Damages Amendment Applies Retroactively to Pending Cases
In Clay v. Union Pacific (Apr. 1, 2026), the Seventh Circuit held Illinois SB 2979, capping BIPA at one recovery per person, applies retroactively.
Seventh Circuit Revives BIPA Suit Over Gunnar's Virtual Try-On, Narrowing the Health Care Exemption
The Seventh Circuit revived a BIPA suit against Gunnar Optiks, ruling its virtual try-on face scans appear aesthetic, not medical, so the health care exemption cannot win dismissal.
South Carolina Biometric Privacy Laws: Collection, Consent & Penalties (2026)
South Carolina has no standalone biometric privacy law. Learn about breach notification under SC Code 39-1-90, the Insurance Data Security Act, and pending legislation.
South Dakota Biometric Privacy Laws: Collection, Consent & Penalties (2026)
South Dakota has no dedicated biometric privacy law. Learn how the breach notification statute SDCL 22-40-19 protects biometric data and what gaps remain.
T
Tennessee Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Tennessee biometric privacy law guide covering TIPA sensitive data consent rules, consumer rights, AG enforcement penalties, and the pending biometric data protection act.
Texas Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Texas CUBI law requires consent before capturing fingerprints, face scans, or voiceprints. Penalties up to $25,000 per violation. The AG has secured over $2.7 billion in settlements.
U
Utah Biometric Privacy Laws: Collection, Consent & Penalties (2026)
Utah's UCPA classifies biometric data as sensitive with opt-out rights. Learn about consumer rights, AG enforcement, and $7,500 per violation penalties.