ARTICLE
15 July 2021

Biometrics Privacy Law Takes Effect In NYC

PC
Perkins Coie LLP

Contributor

Perkins Coie is a premier international law firm with over a century of experience, dedicated to addressing the legal and business challenges of tomorrow. Renowned for its deep industry knowledge and client-centric approach, the firm has consistently partnered with trailblazing organizations, from aviation pioneers to artificial intelligence innovators. With 21 offices across the United States, Asia, and Europe, and a global network of partner firms, Perkins Coie provides seamless support to clients wherever they operate.

The firm's vision is to be the trusted advisor to the world’s most innovative companies, delivering strategic, high-value solutions critical to their success. Guided by a one-firm culture, Perkins Coie emphasizes excellence, collaboration, inclusion, innovation, and creativity. The firm is committed to building diverse teams, promoting equal access to justice, and upholding the rule of law, reflecting its core values and enduring dedication to clients, communities, and colleagues.

Last week a new privacy law limiting what businesses can do with biometric data (for example, facial recognition information and fingerprints) took effect in New York City...
United States Privacy

Last week a new privacy law limiting what businesses can do with biometric data (for example, facial recognition information and fingerprints) took effect in New York City. The new ordinance requires commercial establishments that collect biometric information to post notices to customers explaining how their data will be used. The law applies to a wide range of businesses, including stores, restaurants, and theaters. The ordinance defines "biometric identifier information" as any "physiological or biological characteristic that is used by or on behalf of a commercial establishment, singly or in combination, to identify, or assist in identifying, an individual, including, but not limited to: (i) a retina or iris scan, (ii) a fingerprint or voiceprint, (iii) a scan of hand or face geometry, or any other identifying characteristic." The law does, however, permit the collection, use, and retention of biometric identifying data if a notice to customers in "plain, simple language" is clearly displayed. The NYC Commissioner of Consumer and Worker Protection is expected to issue further guidance detailing the exact requirements that businesses must follow to comply with the law.

The law does not apply to biometric data collected from employees of these businesses. In enacting this law, New York follows in the footsteps of Portland, Oregon, which enacted a facial recognition ordinance last year. With the rapidly increasing use of facial recognition and similar technologies, similar laws are expected to continue cropping up in cities and states around the country. The definition of "biometric information" varies from state to state and is constantly evolving as new technologies emerge. Companies that collect and/or use any information about their customers or employees are advised to monitor developments in their city and state to ensure compliance with the ever-changing landscape of data protection laws.

A more fulsome analysis by Perkins Coie attorneys Sunita Bali, Debra R. Bernard, Samantha V. Ettari, Susan Fahringer, Nicola Menaldo, Adam H. Schuman, and Ryan Spear is available here.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

Mondaq uses cookies on this website. By using our website you agree to our use of cookies as set out in our Privacy Policy.

Learn More