state_legiscan_drain · NY
Establishes the biometric identifier privacy act; requires private entities in possession of biometric identifiers or biometric information to develop a written policy establishing a retention schedule and guidelines for permanently destroying biometric identifiers and biometric information when the initial purpose for collecting or obtaining such identifiers or information has been satisfied or within three years of the individual's last interaction with the private entity, whichever occurs first.
January 9, 2025
Summary
If enacted, this bill would require private entities in New York that possess biometric identifiers or information to create a written policy for retaining and permanently destroying such data. Destruction must occur when the initial purpose is satisfied or within three years of the individual's last interaction, whichever comes first. Lenders, servicers, fintechs, and others using biometrics (e.g., voiceprints, fingerprints) for identity verification or fraud prevention would need to implement these data governance requirements.
Source: https://www.nysenate.gov/legislation/bills/2025/S1422
Common questions
- What does "Establishes the biometric identifier privacy act; requires private entities in possession of biometric identifiers or biometric information to develop a written policy establishing a retention schedule and guidelines for permanently destroying biometric identifiers and biometric information when the initial purpose for collecting or obtaining such identifiers or information has been satisfied or within three years of the individual's last interaction with the private entity, whichever occurs first." cover?
- If enacted, this bill would require private entities in New York that possess biometric identifiers or information to create a written policy for…
- When was it published?
- It was published on January 9, 2025.
Related updates
- Lakeview Loan Servicing, LLC, Pingora Loan Servicing, LLC, Community Loan Servicing, LLC, and Bayview Asset Management, LLC Multistate Settlement Agreement and Consent Order issued by the Division of Banking
- Ultralight FS,. Inc., formerly known as Obopay, Inc., also doing business as Obopay USA
- Updated Nonbank Ransomware Self-Assessment Tool (R-SAT)
- Two Ocean No-Action Letter: Digital Asset Custody & Qualified Custodian Status
- Pionex, Inc. Consent Order issued by the Division of Banking
- ACI Payments, Inc. Settlement Agreement and Consent Order issued by the Division of Banking