Safience recognizes and complies with applicable state data privacy laws in the U.S. You may view our specific compliance statements for each state here:
Safience recognizes and complies with applicable state data privacy laws in the U.S. You may view our specific compliance statements for each state here:
Q. Does a state biometric privacy law stop a facility from identifying a threat?
No. Every state biometric statute in force today regulates how identifiers are collected, stored and disclosed. None of them bar a facility from identifying a person who presents a documented threat. What they govern is consent, notice, retention and the sale or disclosure of identifiers to third parties. Safience is built to sit inside those limits: law-enforcement-sourced records, ephemeral processing, and human review before any alert is acted on.
Q. Which states have a dedicated biometric privacy statute?
Illinois, Texas and Washington have standalone biometric statutes. Illinois BIPA is the only one carrying a private right of action, which is why it drives most of the litigation. A larger group of states regulate biometric identifiers inside a broader consumer privacy act rather than a dedicated law. The state pages in this section track each one separately, because the obligations are not interchangeable.
Q. What is the difference between a biometric identifier and a photograph?
A photograph is an image. A biometric identifier is a mathematical representation derived from a physical trait, retained in a form that can be compared. Most statutes regulate the derived representation rather than the image itself, and several exclude photographs explicitly. That distinction decides which obligations attach to a given system, and it is the first thing to establish when assessing a deployment.
Q. Does consent have to be written?
Under Illinois BIPA, yes. A written release is required before collection, along with a published retention and destruction schedule. Texas requires notice and consent but does not specify a written release. Washington’s requirements turn on the commercial purpose of the enrollment. The per-state pages in this section set out what each one demands.
Q. How long can biometric data be retained?
The common standard is the earlier of the purpose being satisfied or a fixed outer limit, often three years from the last interaction, and the retention schedule usually has to be published. Safience processes ephemerally and does not build a resident biometric database from customer environments, which removes most of the retention exposure from the customer’s side.
Q. Does this page constitute legal advice?
No. It is a working summary maintained for facility operators and compliance teams. Statutes change and courts reinterpret them. Confirm current obligations with counsel licensed in the relevant state before relying on any of it.
