State lawmakers consider biometric data exemption amid renewed privacy debate

What happened

• Lawmakers in multiple states have introduced bills that would carve out exemptions for specific biometric identifiers such as heart rate or facial recognition data used in limited contexts.
• The proposals reference existing state privacy frameworks and argue that the exemptions would reduce compliance burdens for targeted industries.
• Critics warn the changes could weaken consumer protections and create inconsistencies across state regimes.
• No final vote has occurred, and the bills remain in committee.

Why it matters

Organizations that collect or process biometric identifiers should track these bills, as an exemption could alter reporting and consent obligations in affected states.

Business impact

If enacted, the exemptions could lower compliance costs for sectors like health tech and retail, but may also increase regulatory scrutiny from privacy advocates and complicate multi‑state data handling strategies.

What to check

1. 1

   monitor legislative developmentsHigh priority

   Set up alerts for bill progress in each state considering the biometric exemption.

2. 2

   review data inventoriesMedium priority

   Identify which biometric data types your organization processes to assess potential impact.