All Comparison Tables
Biometric Privacy Laws
Federal & State Law Editorial TeamLast reviewed: April 2026
Whether the state has a biometric or comprehensive privacy law, a private right of action, and statutory damages for violations.
50 States3 data columnsLast updated: May 2026
Click any column header to sort ascending or descending. Click again to reverse, and a third time to reset.
| State | Consent Required | Private Right of Action | Statutory Damages |
|---|---|---|---|
| Alabama | No | No | None |
| Alaska | No | No | None |
| Arizona | No | No | None |
| Arkansas | Yes (data breach) | No | None |
| California | Yes (CCPA/CPRA) | Limited | $100-$750 |
| Colorado | Yes (CPA) | No | None |
| Connecticut | Yes (CTDPA) | No | None |
| Delaware | Yes (DPDPA 2025) | No | None |
| Florida | Yes (FDBR) | No | None |
| Georgia | No | No | None |
| Hawaii | No | No | None |
| Idaho | No | No | None |
| Illinois | Yes (BIPA) | Yes | $1,000-$5,000 |
| Indiana | Yes (ICDPA) | No | None |
| Iowa | Yes (ICDPA) | No | None |
| Kansas | No | No | None |
| Kentucky | Yes (data breach) | No | None |
| Louisiana | No | No | None |
| Maine | Yes (BIPA-style 2025) | Yes | Statutory |
| Maryland | Yes (MODPA) | No | None |
| Massachusetts | Limited | No | None |
| Michigan | No | No | None |
| Minnesota | Yes (MCDPA) | No | None |
| Mississippi | No | No | None |
| Missouri | No | No | None |
| Montana | Yes (MCDPA) | No | None |
| Nebraska | Yes (NDPA) | No | None |
| Nevada | Yes (NRS 603A) | No | None |
| New Hampshire | Yes (NHPDA) | No | None |
| New Jersey | Yes (NJDPA) | No | None |
| New Mexico | No | No | None |
| New York | Yes (Tappan 2024) | Limited (NYC) | $500-$5,000 (NYC) |
| North Carolina | Yes (data breach) | No | None |
| North Dakota | No | No | None |
| Ohio | No | No | None |
| Oklahoma | No | No | None |
| Oregon | Yes (OCPA) | No | None |
| Pennsylvania | No | No | None |
| Rhode Island | Yes (RIDPP 2026) | No | None |
| South Carolina | No | No | None |
| South Dakota | No | No | None |
| Tennessee | Yes (TIPA) | No | None |
| Texas | Yes (CUBI) | No | $25,000/violation |
| Utah | Yes (UCPA) | No | None |
| Vermont | Yes (VDPA 2025) | Limited | Statutory |
| Virginia | Yes (VCDPA) | No | None |
| Washington | Yes (Wash. Biometric) | No | None |
| West Virginia | No | No | None |
| Wisconsin | No | No | None |
| Wyoming | No | No | None |
| District of Columbia | Limited | No | None |
Illinois BIPA remains the most plaintiff-friendly biometric law nationally; the federal landscape is evolving with proposed APRA legislation.
This is legal information, not legal advice. Laws vary by jurisdiction and change frequently. Always verify current law with official sources and consult a licensed attorney in your jurisdiction for advice on your specific situation.