State Biometric Privacy Laws: Regulating Facial Recognition Technology and Protecting Personal Data
States across the country are taking action to regulate the use of facial recognition technology and the collection of biometric data by tech companies. Currently, 23 states have passed laws to restrict the mass scraping of biometric data, requiring consent before using facial or voice recognition technology and banning the sale of such data. These laws aim to protect individuals' privacy and prevent the unauthorized collection of sensitive biometric information.
Tech companies have been increasingly deploying facial recognition technology in various applications and devices. While some companies have faced legal challenges and shut down their systems, the use of facial recognition technology has become more widespread in everyday life. This technology offers convenience but raises concerns about the lack of control over how biometric data is used and shared.
Several states have implemented biometric privacy laws to address the growing concerns about digital tracking and data privacy. Companies like Google, Meta, and Clearview AI have faced legal actions and settlements for allegedly collecting facial recognition data without permission. Illinois has one of the strictest biometric privacy laws, allowing individuals to sue companies for violations, which has led to significant settlements and changes in corporate practices.
Despite the efforts of states to regulate biometric data collection, some challenges remain, especially when dealing with facial recognition companies operating overseas. PimEyes, a face search engine, has faced criticism for its potential misuse but continues to operate without the same safeguards as larger tech companies. Legal actions against such companies can be complicated, as demonstrated by a case in Illinois where the company could not be located for a lawsuit, highlighting the limitations of state privacy laws in addressing global digital surveillance operations.
While some facial recognition bills have been introduced in Congress, progress has been slow, with many proposals stalling in the legislative process. Advocates like the Electronic Frontier Foundation have called for a national biometric privacy law to protect individuals' privacy rights and hold tech companies accountable for their data practices. Despite opposition from tech companies, there is a growing demand for stronger privacy regulations to safeguard personal information in the digital age.