NYC businesses should be aware that the City’s new biometric privacy ordinance is now in effect…
New York City businesses should be aware that the City’s new biometric privacy ordinance is now in effect. So, if you are not yet in compliance, the time to act is now.
Under New York City’s biometric privacy ordinance, which took effect on July 9, 2021, businesses must post notices and signs at their doors informing customers how their data will be collected. Failing to comply with the notice requirement can result in costly penalties.
How Is Biometric Data Defined?
The new ordinance regulates the use of “biometric identifier information,” which is defined as “a physiological or biological characteristic that is used … singly or in combination, to identify, or assist in identifying, an individual, including, but not limited to: (i) a retina or iris scan, (ii) a fingerprint or voiceprint, (iii) a scan of hand or face geometry, or any other identifying characteristic.”
Notably, the law does not apply to biometric identifier information collected through photographs or video recordings, if: (i) the images or videos collected are not analyzed by software or applications that identify, or that assist with the identification of, individuals based on physiological or biological characteristics, and (ii) the images or video are not shared with, sold or leased to third parties other than law enforcement agencies.
Who Does the New Biometric Privacy Law Apply To?
New York City’s new data privacy ordinance applies to a wide range of commercial establishments, including retail, food, and entertainment businesses. A “food and beverage” establishment is defined as one that “gives or offers for sale food or beverages to the public for consumption or use on or off the premises, or on or off a pushcart, stand or vehicle.” Meanwhile, a “retail” establishment is one “wherein consumer commodities are sold, displayed or offered for sale, or where services are provided to consumers at retail.” Finally, entertainment establishments are defined to include “any privately or publicly owned and operated entertainment facility, such as a theater, stadium, arena, racetrack, museum, amusement park, observatory, or other place where attractions, performances, concerts, exhibits, athletic games or contests are held.”
What Is Required Under the New Law?
New York City’s biometric data privacy ordinance requires any commercial establishment that collects, retains, converts, stores or shares biometric identifier information of customers to disclose such activity by placing a “clear and conspicuous” sign near all of the commercial establishment’s customer entrances. The disclosure must notify customers in “plain, simple language” that customers’ biometric identifier information is being collected, retained, converted, stored or shared, as applicable.
The ordinance also makes it “unlawful to sell, lease, trade, share in exchange for anything of value or otherwise profit from the transaction of biometric identifier information.” Notably, none of the categories of biometric identifier information are excluded from this requirement.
What Are the Penalties for Violating NYC’s Biometric Data Privacy Ordinance?
Businesses should be aware that, much like the Illinois Biometric Information Privacy Act (BIPA), New York City’s biometric privacy ordinance establishes a private right of action. At least 30 days prior to initiating any action against a commercial establishment for a violation of the notice requirement, the aggrieved person must provide written notice to the commercial establishment setting forth their allegation.
If within 30 days, the commercial establishment cures the violation and provides the aggrieved person an express written statement that the violation has been cured and that no further violations shall occur, no action may be initiated against the commercial establishment. If a commercial establishment continues to violate the ordinance, the aggrieved person may initiate an action. No prior written notice is required for actions alleging a violation of the provision prohibiting the sale/sharing of biometric data. A prevailing party may recover damages of $500 for each violation of the notice requirement, as well as for each negligent violation of the prohibition of the sale/sharing of biometric data. For each intentional or reckless violation of the provision prohibiting the sale/sharing of biometric data, damages of $5,000 may be awarded. Courts are also authorized to award a prevailing party reasonable attorneys’ fees and costs, including expert witness fees and other litigation expenses.
If you have questions, please contact us
If you have any questions or if you would like to discuss the matter further, please contact me, Thomas Herndon, Jr., or the Scarinci Hollenbeck attorney with whom you work, at 201-896-4100.
Section 363 Sales in Bankruptcy: What Businesses, Lenders, and Buyers Need to Know
When a company enters Chapter 11 bankruptcy, many assume the process will culminate in a lengthy reorganization plan. However, distressed businesses are increasingly being sold through a different mechanism — a sale under Section 363 of the United States Bankruptcy Code. A Section 363 sale allows a company, as a debtor-in-possession in bankruptcy, to sell […]
Zoning Laws Explained: What You Need to Know Before Buying Property
Before buying property, it is critical to determine whether local zoning laws may affect your plans. If you plan to redevelop the property, you will want to confirm that local zoning regulations permit development as intended. If acquiring property that is already developed, you must verify that the use is permitted in the underlying zoning […]
Special Needs Trusts in New Jersey: Planning for Your Loved One’s Future
For parents of a child with a disability, estate planning raises concerns that go well beyond deciding who will inherit their assets. Parents may spend years making sure their child has the right care, services, and support. Eventually, they must also confront a difficult question: Who will take over when they can no longer do […]
What Every Real Estate Investor Should Know Before Buying a Rental Property
Before buying a New Jersey rental property, an investor should verify realistic operating numbers, the property’s legal and regulatory status, lead-based paint and flood compliance, the existing leases and tenant protections, and the right ownership structure. A rental property is more than a piece of real estate; it is an operating business subject to legal, […]
Can You Change an Irrevocable Trust in New Jersey?
In New Jersey, an irrevocable trust can sometimes be modified even though its name suggests otherwise, and one of the primary tools for doing so is a process called decanting. Whether decanting is available depends on the specific terms of the trust and the discretion given to the trustee. Key takeaways: New Jersey has no […]
How Intellectual Property Valuation Will Impact Business Transactions
Intellectual property valuation determines the monetary value of a business’s IP assets, and it drives outcomes in licensing deals, joint ventures, mergers and acquisitions, financing, and ownership disputes. The most valuable assets of a business are often the things that cannot be seen or touched: a proprietary process, a copyrighted work, brand recognition, or the […]
No Aspect of the advertisement has been approved by the Supreme Court. Results may vary depending on your particular facts and legal circumstances.
Sign up to get the latest from our attorneys!
Explore What Matters Most to You.
Consider subscribing to our Firm Insights mailing list by clicking the button below so you can keep up to date with the firm`s latest articles covering various legal topics.
Stay informed and inspired with the latest updates, insights, and events from Scarinci Hollenbeck. Our resource library provides valuable content across a range of categories to keep you connected and ahead of the curve.
Let`s get in touch!
Sign up to get the latest from the Scarinci Hollenbeck, LLC attorneys!
