Establishes the biometric identifier privacy act; requires private entities in possession of biometric identifiers or biometric information to develop a written policy establishing a retention schedule and guidelines for permanently destroying biometric identifiers and biometric information when the initial purpose for collecting or obtaining such identifiers or information has been satisfied or within three years of the individual's last interaction with the private entity, whichever occurs first.

The bill establishes the Biometric Identifier Privacy Act in New York, which requires private companies to create a written policy for handling biometric data, like fingerprints or facial recognition. Companies must outline how long they will keep this data and ensure it is permanently destroyed after its intended use or within three years of the last time a person interacted with them, whichever comes first.

Supporters of the bill would argue that it is a crucial step in protecting individual privacy rights in an age where biometric data is increasingly used. They would emphasize that it holds private entities accountable for how they manage sensitive personal information and ensures that data is not kept longer than necessary.

Critics might argue that the bill places unnecessary burdens on businesses, potentially hindering innovation and the use of biometric technologies. They may also contend that the three-year limit could be too restrictive for companies that rely on long-term data for legitimate purposes.