Biometric Processing Privacy Code 2025

Sets binding privacy rules under the Privacy Act 2020 for agencies that use biometric technologies such as facial recognition to verify, identify or categorise people.

In forceIntroducedCommitteeFloorLaw

Grace period ends for agencies with biometric processing already in place before the code took effectAug 3 3 months ago

Body: Office of the Privacy Commissioner
In effect since: Nov 3, 20251 year ago
Topics: Biometrics Privacy

Official page On Regulations: New Zealand Biometric Processing Privacy Code

Timeline

Aug 3 3 months ago
Grace period ends for agencies with biometric processing already in place before the code took effect
Nov 3, 2025 1 year ago
Code comes into force for new biometric processing
Jul 21, 2025 1 year ago
Code issued by the Privacy Commissioner

TexasHB 3186

Capture or Use of Biometric Identifier Act (CUBI) amendments

Amended the Capture or Use of Biometric Identifier Act (Business and Commerce Code 503.001) to limit disclosure of commercially captured biometric identifiers and require their destruction within one year after the collection purpose expires; the act is enforced by the attorney general.

In forceMay 9, 2025

IllinoisSB 2979

BIPA Amendment (Procedure and Damages)

Amends BIPA so that repeated collection of the same person's biometric data by the same method counts as a single violation for damages, and allows electronic signatures for consent.

In forceAug 2, 2024

ColoradoHB 24-1130

Privacy of Biometric Identifiers and Data

Amends the Colorado Privacy Act to require written policies, notice and consent before collecting biometric identifiers, with retention and deletion rules.

In forceMay 31, 2024

MarylandSB 182

Facial recognition technology in criminal procedure

Sets requirements, procedures and prohibitions for law enforcement use of facial recognition technology, including a training program and annual reporting.

In forceMay 16, 2024

IllinoisSB 2400

Biometric Information Privacy Act (BIPA, 740 ILCS 14)

Requires private entities to give notice and get written consent before collecting biometric identifiers, sets retention and destruction rules, and gives individuals a private right of action.

In forceOct 3, 2008

Change log

AddedAdded to the list. Set by hand from the official record.Sep 27

Summaries of public legislative records, executive actions and court rulings, for reference, not legal advice. Check the official page linked on each item. First seen 2026-09-27. Checked against the official source.