Establishes the biometric identifier privacy act

The definition of 'biometric identifier' was updated to include data from gait, DNA, and other biological characteristics used for automated recognition, moving away from a limited list of specific scans.

Photographs and videos were added to the list of excluded items, though the law clarifies that biometric data generated from a person's biological characteristics within those images is still protected.

A new exclusion was added for information collected for human subject research that follows federal ethical guidelines.

The definition of 'written release' was expanded to permit electronic consent for non-employment contexts and introduced new documentation requirements for employers to prove the necessity of collecting employee biometric data.