Bill Text - HB312 (2014)

Restricting the collection of biometric data by state agencies, municipalities, and political subdivisions.


Revision: March 27, 2014, midnight

HB 312 – AS AMENDED BY THE HOUSE

08Jan2014… 2240h

2013 SESSION

13-0708

05/10

HOUSE BILL 312

AN ACT restricting the collection of biometric data by state agencies, municipalities, and political subdivisions.

SPONSORS: Rep. Kurk, Hills 2; Rep. John Hunt, Ches 11; Rep. Winters, Hills 18

COMMITTEE: Executive Departments and Administration

ANALYSIS

This bill restricts the collection of biometric data by state and local government agencies and provides a private right of action for the misuse or unlawful collection of biometric data.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Explanation: Matter added to current law appears in bold italics.

Matter removed from current law appears [in brackets and struckthrough.]

Matter which is either (a) all new or (b) repealed and reenacted appears in regular type.

08Jan2014… 2240h

13-0708

05/10

STATE OF NEW HAMPSHIRE

In the Year of Our Lord Two Thousand Thirteen

AN ACT restricting the collection of biometric data by state agencies, municipalities, and political subdivisions.

Be it Enacted by the Senate and House of Representatives in General Court convened:

1 New Chapter; Regulation of Biometric Information. Amend RSA by inserting after chapter 359-L the following new chapter:

CHAPTER 359-M

REGULATION OF BIOMETRIC INFORMATION

359-M:1 Definitions. In this chapter:

I. “Biometric data’’ includes, but is not limited to, the following:

(a) Fingerprints, palm prints, and other methods for measuring or recording ridge pattern or fingertip characteristics.

(b) Facial feature pattern characteristics.

(c) Behavior characteristics of a handwritten signature, such as shape, speed, pressure, pen angle, or sequence.

(d) Voice data used for comparing live speech with a previously-created speech model of a person’s voice.

(e) Iris recognition data containing color or texture patterns or codes.

(f) Keystroke dynamics, measuring pressure applied to key pads.

(g) Hand geometry, measuring hand characteristics, including the shape and length of fingers, in 3 dimensions.

(h) Retinal scans, reading through the pupil to measure blood vessels lining the retina.

(i) DNA/RNA.

(j) Photograph or computerized or other image of an individual.

II. “Government agency” includes, but is not limited to, any employee, agent, elected official or entity of the state, a municipality, or any other political subdivision of the state of New Hampshire.

359-M:2 Collection of Biometric Data Prohibited.

I. No government agency shall:

(a) Issue an identification card, other than an employee, vendor, or contractor identification or access card, device or system, or use an identification device or system, that requires the collection or retention of an individual’s biometric data.

(b) Require an individual to disclose or provide biometric data as a condition of doing business with, engaging in any business activity or relationship with, or obtaining services from, that agency.

(c) Obtain, retain or provide, directly or indirectly, any individual’s biometric data except as set forth in this chapter.

II. Any biometric data collected for an employee, vendor, or contractor identification or access card shall be destroyed when the individual terminates his or her relationship with the agency. No biometric data collected under this section shall be subject to a subpoena.

III. Nothing in paragraphs I and II shall prohibit the disclosure, collection, or retention of biometric data from applicants for and persons employed in positions with state, county, or local public safety agencies as part of the employment screening process, or for obtaining required security clearances, or in connection with investigations of internal misconduct or crimes and offenses.

359-M:3 Exemptions. The prohibition in RSA 359-M:2 shall not apply to biometric data collection practices implemented pursuant to statute or practice prior to the effective date of this section, provided that the government agency shall not subsequently expand or modify the type of data collected or the purpose for which it is collected without legislative approval. Legislative approval shall not be required for an airport to expand or modify its biometric collection and use practices if identified in the airport’s federally-mandated airport security program and approved by the U.S. Transportation Security Administration. Nothing in this chapter shall limit the collection of biometric evidence by law enforcement agencies at crime scenes or its examination and analysis by forensic laboratories. The admissibility at trials of biometric evidence and expert opinion based on such evidence shall be determined by the presiding judge within the parameters and limits specified in the rules of evidence.

359-M:4 Violation; Civil Action. Any individual aggrieved by a violation of this chapter, including the loss or misuse of biometric data lawfully collected under RSA 359-M:2 or 359-M:3, may bring a civil action under this section to obtain the following:

I. An injunction of the agency practice;

II. Actual damages or $2,500 for each violation, whichever is greater; and

III. Reasonable attorney’s fees and court costs.

2 Effective Date. This act shall take effect July 1, 2014.