Tracked Laws
State Biometric Privacy Laws: Every U.S. Law Tracked (7)
Laws regulating the collection and use of biometric identifiers. Maintained by Stauss PLLC. Last reviewed August 2026.
Laws tracked in this category7
| State | Law | Official text |
|---|---|---|
| Colorado | Colorado biometric privacy amendments to Colorado Privacy Act | HB 1130 |
What You Need to KnowThis amendment to the Colorado Privacy Act (CPA) requires controllers to obtain consent before processing biometric identifiers. It applies to more organizations than the main provisions of the CPA cover and extends to the collection of employees' biometric identifiers. The amendment also requires controllers to adopt a written policy that (1) establishes a retention schedule for biometric identifiers and biometric data, (2) includes a protocol for responding to a data security incident that may compromise biometric identifiers or biometric data, and (3) includes guidelines requiring the deletion of a biometric identifier on or before certain dates. With certain exceptions, a controller must make its written policy available to the public. | ||
| Illinois | Illinois Biometric Information Privacy Act (BIPA) | 740 ILCS 14 |
| Texas | Texas Capture or Use of Biometric Identifiers Act (CUBI) | Tex. Bus. & Com. Code ยง 503.001, et seq. |
| Washington | Washington My Health My Data Act | Chapter 19.373 RCW |
What You Need to KnowWashington's My Health My Data Act (MHMD) was the nation's first privacy law focused on regulating the collection and processing of consumer health data. The law strictly regulates the processing of consumer health data and is enforceable by the state attorney general and a private right of action. | ||
| Washington | Washington Biometric Identifiers Law | Chapter 19.375 RCW |
| New York | New York City biometric data collection rule | Rule |
| Oregon | Portland, Oregon biometric ordinance | Chapter 34.10 |
Questions about biometric privacy laws?
Stauss PLLC advises companies on state privacy, AI, and data broker compliance.
Contact Stauss PLLCFollow biometric privacy laws
Our analysis, by email, as the law moves.
This page is provided for general informational purposes only, is not legal advice, and does not create an attorney-client relationship. State laws change frequently; coverage reflects this tool’s most recent update. Contact Stauss PLLC to confirm how these requirements apply to your organization.