Description

Maryland: Biometric Identifier Privacy Act introduced in House

On 13 January 2022, House Bill 259, the Biometric Identifier Privacy Act, has been introduced in the Maryland House of Delegates. The bill would apply to private businesses collecting biometric information of individuals, defined in the Act as "biometric identifiers", and would require such businesses to make public plans specifying their data retention policies. Further, affected businesses would need to disclose biometric information to individuals on request. Further, the bill would prohibit the selling, leasing, or trading of individual biometric information. Disclosure of such information would only be permitted with the individual's written consent, or if required by a warrant or subpoena. Finally, the Act would allow individuals to recover damages in civil actions against private businesses for violations of the provisions of the Act.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
legislature
Government Body
parliament

Complete timeline of this policy change

Hide details
2022-01-13
under deliberation

On 13 January 2022, House Bill 259, the Biometric Identifier Privacy Act, has been introduced in th…

2022-03-10
under deliberation

On 10 March 2022, House Bill 259, the Biometric Data Privacy Act, has received a Committee Amendmen…

2022-03-13
under deliberation

On 13 March 2022, House Bill 259, the Biometric Data Privacy Act, has been passed in the Maryland H…

2022-04-11
rejected

On 11 April 2022, the Biometric Data Privacy Act (HB 259) was rejected after failing to pass before…

Key regulatory dimensions

Regulated subjects

The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type Private organisation
Economic activity cross-cutting
Category All

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.
personal data: biometric: data processing
Regulatory tool
User right to access personal data
User or public reporting requirement
Sanctions
Civil penalty
Regulated subjects
1
personal data: biometric: data collection
Regulatory tool
User right to access personal data
User or public reporting requirement
Data storage/retention obligation
Sanctions
Civil penalty
Regulated subjects
1
personal data: biometric: sale
Regulatory tool
User right to access personal data
User or public reporting requirement
User consent: Opt-in requirement
Sanctions
Civil penalty
Regulated subjects
1

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.

personal data: biometric: data processing

personal data: biometric: data collection

personal data: biometric: sale