On 13 March 2022, House Bill 259, the Biometric Data Privacy Act, has been passed in the Maryland House of Representatives, and has therefore been referred to the State Senate. The bill applies to private businesses engaged in collecting biometric data of individuals. It stipulates that such businesses must publish a data retention policy specifying when collected biometric data would have to be deleted. The bill would further prohibit the selling, leasing, or trading of individual biometric data. Disclosure of biometric data would only be possible with the consent of the individual in question, or in a number of exceptional circumstances, such as when required by a warrant, subpoena, to comply with other provisions of law, or in cooperation with law enforcement. Individuals must be informed of the type of biometric data collected, as well as its purpose. A violation of the Amendment is classed as an "Unfair, Abusive, or Deceptive Trade Practice".
Original source