This bill establishes new regulations regarding the collection and handling of biometric data in Minnesota, proposing the addition of a new section to chapter 325M of the Minnesota Statutes. It defines "biometric data" as various forms of personal identification, including facial images, fingerprints, and voiceprints. The bill mandates that individuals must provide consent before their biometric data can be collected. Furthermore, it prohibits the sale or disclosure of this data without explicit consent, except under specific circumstances such as law enforcement requests or financial transactions initiated by the individual.
Additionally, the bill outlines requirements for the storage and protection of biometric data, emphasizing that it must be handled with reasonable care. It also stipulates that biometric data must be deleted within one year after the purpose for its collection has expired, with exceptions for data retained under federal or state law. Violations of these provisions can result in civil penalties of up to $25,000 per violation, enforceable by the attorney general. The bill includes an exemption for voiceprint data held by financial institutions, ensuring that certain existing practices are not disrupted.