Página traduzida e verificada automaticamente. Prevalece a versão em inglês. Algumas partes ainda estão em inglês enquanto a tradução é verificada. Ver em inglês · Informar um erro de tradução
RCW 19.375
Lei de identificadores biométricos de Washington
Aviso e consentimento, ou um mecanismo de opt-out, antes de cadastrar identificadores biométricos para fins comerciais.
The law in brief
Washington's biometric identifiers law (RCW 19.375) limits how businesses enroll biometric identifiers in a database for a commercial purpose. Before enrolling, a business must give notice and either obtain consent or provide a way to prevent the identifier being used later for a commercial purpose.
It is narrower than Illinois' BIPA, and it has no private right of action. Much biometric data in Washington is now also covered by the My Health My Data Act, which is stricter and does allow individuals to sue.
A quem se aplica
- Any person who enrolls a biometric identifier in a database for a commercial purpose.
- Biometric identifiers are data generated by automatic measurements of biological characteristics, such as a fingerprint, voiceprint, eye retinas, irises or other unique biological patterns used to identify a specific individual. Physical or digital photographs, video and audio recordings, and data generated from them are excluded.
- Enrollment for a security purpose, meaning to prevent shoplifting, fraud or other misappropriation or theft, is outside the enrollment notice and consent requirement.
What it requires
Notice before enrollment
Before enrolling a biometric identifier in a database for a commercial purpose, give notice, obtain consent, or provide a mechanism to prevent later use for a commercial purpose.
Limits on sale and disclosure
Do not sell, lease or otherwise disclose an enrolled biometric identifier for a commercial purpose without consent, except in the circumstances the statute lists.
Reasonable care and limited retention
Guard against unauthorized access, and keep the identifier no longer than reasonably necessary for the purpose, to comply with a court order or law, or to protect against fraud or other crimes.
Direitos das pessoas
Individuals must receive notice and consent, or a mechanism to prevent later commercial use, before their biometric identifiers are enrolled.
Enforcement and penalties
Aplicada pelo Procurador-Geral nos termos da Consumer Protection Act de Washington. Não há direito privado de ação nesta lei, embora a My Health My Data Act preveja um para os dados biométricos que abrange.
What to do first
- List every system that enrolls biometric identifiers, including vendors' systems.
- Give notice before enrollment, in a way reasonably available to the people affected.
- Obtain consent or offer a mechanism to prevent later commercial use.
- Do not sell or disclose without consent, outside the statutory exceptions.
- Keep identifiers only as long as needed, and protect them.
- Check the My Health My Data Act as well; it may cover the same data with stricter rules.
Checked against the official text on 28 September 2026. Quotations are the operative words of the law, linked to the article they come from; the official text is the authority. This brief is written by the Association for practitioners and is not legal advice.
Novidades recentes
Nada informado ainda. O Regulatory Watch lista novas regras, ações de fiscalização e decisões judiciais à medida que surgem.
Fontes
- RCW 19.375, Identificadores biométricos Legislativo do Estado de Washington · Texto oficial ou regulador
Biblioteca de regulamentações
Todas as leis estaduais de privacidade dos EUA em um só mapa
24 estados têm uma lei abrangente de privacidade na biblioteca, ao lado das leis da UE, do Reino Unido, federais dos EUA e globais: 102 no total, cada uma explicada em linguagem simples com suas fontes. Selecione um estado para ver o que se aplica lá.
- Em vigor
- Entrando em vigor
- Leis setoriais