Biometric privacy standards and right of action establishment

SF 2260 establishes privacy rules for biometric data collected by private companies in Minnesota. It requires businesses to obtain written consent before collecting fingerprints, facial scans, or other biometric identifiers, explain how the data will be used, and destroy it after three years or when no longer needed. The bill prohibits selling or sharing biometric data without explicit consent, except for financial transactions or legal requirements. It also creates a legal right for individuals to sue companies that violate these rules, directly affecting consumers and private entities like tech firms, retailers, or employers using biometric systems. Health data and government collections are specifically excluded from these requirements.