| |
|
| |
| THE GENERAL ASSEMBLY OF PENNSYLVANIA |
| |
| HOUSE BILL |
|
| |
| |
| INTRODUCED BY ROHRER, BROOKS, CREIGHTON, CUTLER, DENLINGER, ELLIS, FAIRCHILD, GIBBONS, HENNESSEY, HESS, HUTCHINSON, KAUFFMAN, KRIEGER, MANDERINO, MELIO, METZGAR, MURPHY, MURT, MUSTIO, PETRI, QUIGLEY, RAPP, READSHAW, REICHLEY, ROAE, ROCK, STEVENSON, SWANGER, TALLMAN, J. TAYLOR, VULAKOVICH AND WHEATLEY, JUNE 22, 2009 |
| |
| |
| REFERRED TO COMMITTEE ON INTERGOVERNMENTAL AFFAIRS, JUNE 22, 2009 |
| |
| |
| |
| AN ACT |
| |
1 | Providing for biometric protection and for penalties. |
2 | The General Assembly of the Commonwealth of Pennsylvania |
3 | hereby enacts as follows: |
4 | Section 1. Short title. |
5 | This act shall be known and may be cited as the Right to Body |
6 | Data Privacy Act. |
7 | Section 2. Definitions. |
8 | The following words and phrases when used in this act shall |
9 | have the meanings given to them in this section unless the |
10 | context clearly indicates otherwise: |
11 | "Biometric data." Information relating to a biological |
12 | characteristic of an individual that makes the individual unique |
13 | from any other individual. |
14 | (1) This shall include, but is not limited to, the |
15 | following: |
|
1 | (i) Fingerprints, palm prints and other means for |
2 | measuring or recording ridge pattern or fingertip |
3 | characteristics. |
4 | (ii) Facial feature pattern characteristics, |
5 | excluding any low resolution photographic image of a |
6 | face. |
7 | (iii) Voice data collected for comparing live speech |
8 | with a previously created speech model of an individual's |
9 | voice. |
10 | (iv) Iris recognition data containing color or |
11 | texture patterns or codes. |
12 | (v) Keystroke dynamics, measuring pressure applied |
13 | to key pads. |
14 | (vi) Hand geometry, measuring hand characteristics, |
15 | including the shape and length of fingers, in three |
16 | dimensions. |
17 | (vii) Retinal scans or reading through the pupil to |
18 | measure blood vessels lining the retina. |
19 | (viii) Deoxyribonucleic acid or ribonucleic acid. |
20 | (2) The following shall be excluded from this term: |
21 | (i) Handwritten signatures. |
22 | "Government agency." Any government entity or agent of a |
23 | government entity, including the Commonwealth or any political |
24 | subdivision as defined under 1 Pa.C.S. § 1991 (relating to |
25 | definitions). |
26 | "Low resolution photographic image of a face." A |
27 | photographic image of a face or a portion of a face with |
28 | resolution no greater than necessary for human identification |
29 | and verification. The term shall not include any photo image |
30 | with a resolution of more than 30 pixels between eye centers or |
|
1 | any image with a resolution that enables the extraction of |
2 | biometric data. |
3 | Section 3. Denial of benefits. |
4 | (a) General rule.--It shall be unlawful for any government |
5 | agency to deny to any individual any right, benefit or privilege |
6 | provided by law because of the individual's refusal to disclose |
7 | the individual's biometric data. |
8 | (b) Exceptions.-- |
9 | (1) The provisions of subsection (a) shall not apply |
10 | with respect to any disclosure of biometric data which is |
11 | required by: |
12 | (i) Any Federal statute finally enacted on or before |
13 | May 10, 2005. |
14 | (ii) Any State statute finally enacted on or before |
15 | the effective date of this section. |
16 | (2) The provisions of this section shall not apply to |
17 | any disclosure of biometric data: |
18 | (i) Required pursuant to arrest or indictment. |
19 | (ii) Requested by any law enforcement agency or |
20 | officer with probable cause that the individual has |
21 | committed a crime. |
22 | (c) Explanation.--A government agency that requests an |
23 | individual to disclose the individual's biometric data shall |
24 | inform the individual whether the disclosure is mandatory or |
25 | voluntary, by what statutory or other authority the data is |
26 | solicited and what uses will be made of the data. |
27 | Section 4. Remedy. |
28 | (a) Right of action.--An individual whose biometric data is |
29 | collected in violation of this act may bring an action in the |
30 | court of common pleas for enforcement of the remedies available |
|
1 | under this section. |
2 | (b) Judicial relief.--If the individual prevails, the court |
3 | shall order the government agency to do all of the following: |
4 | (1) Remove the biometric data collected in violation of |
5 | this act from any database or other means of storage so that |
6 | the biometric data is not retained by the government agency. |
7 | (2) Pay the individual's reasonable attorney fees and |
8 | costs of litigation. |
9 | (3) Pay the greater of $100 per collection in violation |
10 | of this act or actual damages. |
11 | Section 5. Penalties. |
12 | (a) Summary offense.--A government agency or an employee of |
13 | a government agency who violates this act with the intent and |
14 | purpose of violating this act commits a summary offense subject |
15 | to prosecution by the Attorney General or the appropriate |
16 | district attorney and shall, upon conviction, be sentenced to |
17 | pay a fine of not more than $300 plus costs of prosecution. |
18 | (b) Civil penalty.--A government agency or an employee of a |
19 | government agency who does not promptly comply with a court |
20 | order under section 4 is subject to a civil penalty of not more |
21 | than $300 per day until the biometric data are removed. |
22 | Section 6. Effective date. |
23 | This act shall take effect in 60 days. |
|