Law / Statute California Active / In force Jan 1, 2020

California Consumer Privacy Act / CPRA — biometric inclusion

Cal. Civ. Code §1798.140

California's CCPA, expanded by CPRA (2023), classifies biometric information including faceprints, gait, and keystroke patterns as 'sensitive personal information,' triggering disclosure, opt-out, and limit-of-use rights.
Source
California Civil Code
Link
https://leginfo.legislature.ca.gov/faces/codes_displayText.xhtml?division=3.&part=4.&lawCode=CIV&title=1.81.5 ↗

Related

Law / Statute

Indiana Consumer Data Protection Act

Indiana's omnibus privacy law covering biometric data.
Law / Statute

Tennessee Information Protection Act (TIPA)

Tennessee's consumer privacy law including biometric protections; applies to proctoring vendors meeting thresholds.
Law / Statute

New Jersey Data Privacy Act

New Jersey's omnibus privacy law including biometric protections.
Law / Statute

New Hampshire Privacy Act (HB 255)

New Hampshire's consumer privacy law covering biometric data.
Law / Statute

Delaware Personal Data Privacy Act

Delaware's consumer privacy statute including biometric data category.