Establishes the Biometric Identifier Privacy Act, regulating private entities' handling of biometric identifiers and information.

The Biometric Identifier Privacy Act mandates that private entities possessing biometric identifiers or information must create a written policy outlining a retention schedule and guidelines for destroying such data. This destruction must occur once the initial purpose for collecting or obtaining the data is fulfilled or within three years of the individual's last interaction with the entity, whichever comes first.

Establishes the Biometric Identifier Privacy Act, regulating private entities' handling of biometric identifiers and information.

The Biometric Identifier Privacy Act mandates that private entities possessing biometric identifiers or information must create a written policy outlining a retention schedule and guidelines for destroying such data. This destruction must occur once the initial purpose for collecting or obtaining the data is fulfilled or within three years of the individual's last interaction with the entity, whichever comes first.