This bill proposes to amend the Arizona Revised Statutes by adding a new Article 27, which focuses on consumer biometric data. It introduces definitions for terms such as "artificial intelligence system" and "biometric identifier," and establishes regulations regarding the capture and use of biometric identifiers for commercial purposes. Specifically, it mandates that individuals must be informed and provide consent before their biometric identifiers can be captured, and it clarifies that consent cannot be assumed from publicly available images or media.
Additionally, the bill outlines the responsibilities of individuals or entities that possess biometric identifiers, including restrictions on selling or disclosing this data without consent, requirements for secure storage and protection, and mandates for the destruction of biometric identifiers after a specified period. It also establishes a civil penalty of up to $25,000 for violations of these provisions, with the attorney general authorized to enforce this penalty. Overall, the bill aims to enhance consumer protection regarding biometric data in commercial contexts.