Senate Bill No. 499, also known as the "Madison Brooks Law," aims to enhance age verification processes for individuals entering premises that serve alcohol. The bill introduces the concept of a "Certified biometrically-bound age assurance credential," which is a digital or physical credential issued by the commissioner of the office of alcohol and tobacco control. This credential must comply with the Digital Identity Guidelines set by the National Institute of Standards and Technology (NIST) and be cryptographically bound to the individual's biometric identifiers, ensuring it cannot be transferred or shared. The bill mandates that any credential presented in either digital or printed form must be accepted as lawful proof of age when a QR code is scanned and a live facial match is confirmed.

Additionally, the bill prohibits the transmission or retention of full identity data or raw biometric images beyond the age indicator, thereby protecting individuals' privacy. It requires the commissioner to provide necessary equipment for permittees to verify these credentials and to establish rules for implementation in accordance with the Administrative Procedure Act. The law is set to take effect on August 1, 2026.