Description

Maryland: Biometric Data Privacy Act passes House

On 13 March 2022, House Bill 259, the Biometric Data Privacy Act, has been passed in the Maryland House of Representatives, and has therefore been referred to the State Senate. The bill applies to private businesses engaged in collecting biometric data of individuals. It stipulates that such businesses must publish a data retention policy specifying when collected biometric data would have to be deleted. The bill would further prohibit the selling, leasing, or trading of individual biometric data. Disclosure of biometric data would only be possible with the consent of the individual in question, or in a number of exceptional circumstances, such as when required by a warrant, subpoena, to comply with other provisions of law, or in cooperation with law enforcement. Individuals must be informed of the type of biometric data collected, as well as its purpose. A violation of the Amendment is classed as an "Unfair, Abusive, or Deceptive Trade Practice".

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
legislature
Government Body
parliament

Complete timeline of this policy change

Hide details
2022-01-13
under deliberation

On 13 January 2022, House Bill 259, the Biometric Identifier Privacy Act, has been introduced in th…

2022-03-10
under deliberation

On 10 March 2022, House Bill 259, the Biometric Data Privacy Act, has received a Committee Amendmen…

2022-03-13
under deliberation

On 13 March 2022, House Bill 259, the Biometric Data Privacy Act, has been passed in the Maryland H…

2022-04-11
rejected

On 11 April 2022, the Biometric Data Privacy Act (HB 259) was rejected after failing to pass before…

Key regulatory dimensions

Regulated subjects

The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type Private organisation
Economic activity cross-cutting
Category All

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.
personal data: biometric: data processing
Regulatory tool
User right to access personal data
User or public reporting requirement
Sanctions
Regulated subjects
1
personal data: biometric: data collection
Regulatory tool
User right to access personal data
User or public reporting requirement
Data storage/retention obligation
Sanctions
Regulated subjects
1
personal data: biometric: sale
Regulatory tool
User right to access personal data
User or public reporting requirement
User consent: Opt-in requirement
Sanctions
Regulated subjects
1

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.

personal data: biometric: data processing

personal data: biometric: data collection

personal data: biometric: sale