Establishes the "Biometric Information Privacy Act"

HB 500, the "Biometric Information Privacy Act," would require private companies (like tech firms or retailers) to obtain written consent before collecting biometric data such as fingerprints, facial scans, or voiceprints. Companies must explain why they’re collecting the data, how long they’ll keep it, and destroy it within one year of the last interaction or when no longer needed - whichever comes first. The law prohibits selling or sharing biometric data without permission, bans charging more for refusing to share it, and requires companies to protect it as carefully as other sensitive information like Social Security numbers. It does not apply to government agencies or healthcare data already covered under federal HIPAA rules.