On 16 February 2022, the Biometric Information Privacy Act (HB 2716) was introduced. The law requires companies that have collected biometric data to publish a plan of when and how this information would be deleted. In any case, such information shall be deleted when the purpose for the data collection has been fulfilled or if a customer has not interacted with the company for three years.
Original source