CIPP-US - State Privacy Laws - Section 5.4

Describe state-level biometric privacy laws and AI bias frameworks, including BIPA's written policy and consent requirements and automated decision-making rules.

Describe Illinois BIPA's duty to publish a written retention policy and obtain informed written consent before collecting a biometric identifier or biometric information such as fingerprints or facial recognition data, with strict retention and destruction schedules. Recognise emerging state automated decision-making laws imposing impact assessment, disclosure, and opt-out duties.

Examworthy is not affiliated with or endorsed by IAPP. Original, blueprint-aligned practice material only.