This bill introduces a new chapter, Chapter 21, to Title 48 of the Idaho Code, which establishes regulations regarding the capture and use of biometric identifiers, such as retina scans, fingerprints, and voiceprints. It prohibits individuals from capturing biometric identifiers for commercial purposes without first informing the individual and obtaining their consent. The bill also outlines the responsibilities of entities that possess biometric identifiers, including restrictions on selling or disclosing this data, requirements for secure storage, and mandates for destruction of the data within a specified timeframe. Additionally, it provides individuals with the right to revoke consent for the storage and transmission of their biometric identifiers.
The legislation includes specific exceptions, such as for voiceprint data held by financial institutions and for the processing of biometric identifiers related to artificial intelligence, provided they are not used to uniquely identify individuals. Violations of the provisions can result in civil penalties of up to $25,000 per violation, with enforcement actions being the responsibility of the attorney general. The bill declares an emergency, making it effective on July 1, 2026.