[STATE] October 6, 2021: Massachusetts Bill Restricting Collection of Biometric Data Set for Hearing
The Massachusetts Joint Committee on Advanced Information Technology, the Internet and Cybersecurity has set a hearing on a bill (S.220) restricting businesses' use of biometric identifiers and biometric information.
S.220 would require businesses that collect biometric information to develop a written policy made available to the public to establish a retention schedule and guidelines for destruction of the data.
Biometric information is any information that is captured, converted, or stored based on an individual’s biometric identifier.
Businesses would be required to gain the customer’s written consent before the collection of any biometric data. The bill defines biometric identifiers as biological characteristics that are unique to each individual—e.g., fingerprints, retina scans, facial scans, and iris scans.
Additionally, businesses are prohibited from selling, trading, or otherwise profiting from an individual's biometric identifiers or information. The bill also prohibits companies from sharing or disclosing without permission of the individual or in limited specified circumstances.