MD SB169: Commercial Law – Consumer Protection – Biometric Data Privacy Verified

Senate Bill 169 aims to regulate the handling of biometric data by private entities in Maryland. It requires these entities to develop a written policy that outlines a retention schedule for biometric data and guidelines for its permanent destruction. This policy must be made publicly available, ensuring transparency in how biometric data is managed. The bill also empowers individuals to bring civil actions against entities that violate these provisions, categorizing such violations as unfair, abusive, or deceptive trade practices. This legislation reflects a growing trend in data privacy laws that seek to protect consumers from potential misuse of their biometric information, which is increasingly collected through various technologies, including AI-driven systems. The bill text provided does not specify a compliance deadline, but entities should prepare to implement these policies promptly to avoid potential legal repercussions. The penalties for non-compliance could include civil lawsuits initiated by affected individuals, which may result in financial liabilities for the offending entities. Key definitions, such as what constitutes 'biometric data,' will be critical for businesses to understand as they develop their compliance strategies. While the bill does not explicitly state alignment with laws in Illinois and California, it indicates a nationwide movement towards stricter data privacy protections.