Bill Text: NY A09767 | 2019-2020 | General Assembly | Introduced


Bill Title: Prohibits the use of biometric surveillance technology by law enforcement; establishes the biometric surveillance regulation task force; and provides for the expiration and repeal of certain provisions.

Spectrum: Partisan Bill (Democrat 3-0)

Status: (Introduced - Dead) 2020-02-11 - referred to governmental operations [A09767 Detail]

Download: New_York-2019-A09767-Introduced.html



                STATE OF NEW YORK
        ________________________________________________________________________

                                          9767

                   IN ASSEMBLY

                                    February 11, 2020
                                       ___________

        Introduced  by M. of A. GLICK -- read once and referred to the Committee
          on Governmental Operations

        AN ACT to amend the executive law, in relation to prohibiting the use of
          biometric surveillance technology by law enforcement; establishing the
          biometric surveillance regulation task force; and  providing  for  the
          repeal of certain provisions upon expiration thereof

          The  People of the State of New York, represented in Senate and Assem-
        bly, do enact as follows:

     1    Section 1. Legislative intent. The legislature finds and declares  the
     2  following:
     3    (a)  The  use  of  biometric  surveillance technology has been largely
     4  unregulated by all levels of government in the United  States  to  date,
     5  allowing  its  unfettered  use  by private entities, government, and law
     6  enforcement with little to no requirements or restrictions  relating  to
     7  use, data retention, privacy protections, and use of information derived
     8  from  such  systems in law enforcement investigations. In New York, this
     9  lack of regulation and oversight has led to concerning practices by  law
    10  enforcement,  such  as  including  sealed  mugshots and arrest photos of
    11  juveniles in facial recognition databases and running photos of celebri-
    12  ty lookalikes through facial recognition software to attempt to identify
    13  potential suspects.
    14    (b) Studies of currently available biometric  surveillance  technology
    15  demonstrate  that  such  technology's  consistency and accuracy can vary
    16  widely based on age, gender, sex, race, and other factors, and has  been
    17  found  to  be  particularly inaccurate when used on women, young people,
    18  and people of color.
    19    (c) These accuracy concerns are particularly troubling in the  context
    20  of  this technology's ongoing and increasing use by law enforcement. New
    21  York's law enforcement should not rely on  technology  that  has  demon-
    22  strated  accuracy issues, as such practice risks the wrongful targeting,
    23  interrogation, detention, or even conviction of an innocent person based
    24  on erroneous data.
    25    (d) The largest U.S. supplier of  police  body  cameras  has  publicly
    26  stated  that  this  technology  "is  not  currently  reliable  enough to

         EXPLANATION--Matter in italics (underscored) is new; matter in brackets
                              [ ] is old law to be omitted.
                                                                   LBD14547-04-0

        A. 9767                             2

     1  ethically justify its use," and other major companies  working  on  this
     2  technology  have  chosen  not to offer it for general use until concerns
     3  about the technology's accuracy are resolved.
     4    (e) In addition to accuracy concerns, the continuous use of this tech-
     5  nology  for broad, untargeted surveillance purposes constitutes an unac-
     6  ceptable mass violation of privacy and could chill New Yorkers' right to
     7  free speech and freedom of assembly.
     8    (f) In order to protect the personal data, civil rights, civil  liber-
     9  ties,  and  due process rights of all New Yorkers, the use of this tech-
    10  nology by law enforcement should not currently be  permitted,  and  more
    11  study and research should be conducted into the impacts of this technol-
    12  ogy  before  determining  whether  it  should be authorized for use, and
    13  under what circumstances such use should be permitted.
    14    § 2. The executive law is amended by adding a  new  section  837-u  to
    15  read as follows:
    16    §  837-u.  Use of biometric surveillance systems prohibited. 1.  Defi-
    17  nitions. For the purposes of this section,  the  following  terms  shall
    18  have the following meanings:
    19    (a)   "Biometric  information"  means  any  measurable  physiological,
    20  biological or behavioral characteristics that  are  attributable  to  an
    21  individual person, including facial characteristics, fingerprint charac-
    22  teristics,  hand  characteristics, eye characteristics, vocal character-
    23  istics, and any other physical characteristics that can be used,  singly
    24  or  in  combination with each other or with other information, to estab-
    25  lish individual identity.   Examples of biometric  information  include,
    26  but  are  not  limited  to,  fingerprints,  handprints,  retina and iris
    27  patterns, DNA sequence, voice, gait, and facial geometry.
    28    (b)(i) "Biometric surveillance" means either of the  following,  alone
    29  or in combination:
    30    (1)  An automated or semi-automated process by which a person is iden-
    31  tified or attempted to be identified based on their  biometric  informa-
    32  tion,  including  identification  of  known  or  unknown  individuals or
    33  groups; and/or
    34    (2) An automated or semi-automated process that generates, or  assists
    35  in  generating,  surveillance  information  about an individual based on
    36  their biometric information.
    37    (ii) "Biometric surveillance" shall not include the use  of  an  auto-
    38  mated or semi-automated process for the purposes of:
    39    (1)  redacting  a recording for release or disclosure outside a police
    40  agency to protect the privacy of a subject depicted in the recording, if
    41  the process does not generate or result in the retention of  any  biome-
    42  tric information or surveillance information;
    43    (2)  the  state  DNA  identification  index  in  accordance  with  the
    44  provisions of section nine hundred ninety-five-c of this chapter; or
    45    (3) the taking, submission, and processing  of  fingerprints  for  the
    46  state  identification  bureau, provided that such taking, submission and
    47  processing is explicitly authorized by law.
    48    (c) "Biometric surveillance system" means  any  computer  software  or
    49  application  that  performs biometric surveillance, but does not include
    50  the state DNA identification index  or  the  fingerprint  identification
    51  portion of the state automated biometric identification system.
    52    (d)  "Police  agency", "police officer" and "peace officer" shall have
    53  the same meanings as defined under section eight hundred thirty-five  of
    54  this article.
    55    (e) "Surveillance information" means either of the following, alone or
    56  in combination:

        A. 9767                             3

     1    (i) Any information about a known or unknown individual, including but
     2  not  limited  to,  a  person's  name,  date of birth, gender, aggregated
     3  location data, or criminal background; and/or
     4    (ii) Any information derived from biometric information, including but
     5  not  limited  to,  assessments about an individual's sentiment, state of
     6  mind or level of dangerousness.
     7    (f) "Use" means either of the following, alone or in combination:
     8    (i) The direct use of a biometric  surveillance  system  by  a  police
     9  agency, police officer or peace officer; and/or
    10    (ii)  A  request  by  a  police officer or peace officer that a police
    11  agency or other third party  use  a  biometric  surveillance  system  on
    12  behalf of the requesting entity.
    13    2.  No  police  agency, police officer or peace officer shall acquire,
    14  possess, access, install, activate or  use  any  biometric  surveillance
    15  system, or any biometric information or surveillance information derived
    16  from  the  use  of  a biometric surveillance system by any other entity,
    17  while in the course of their job duties or with regard to  any  informa-
    18  tion obtained, processed, or accessed in the course of those duties.
    19    3.  In addition to any other sanctions, penalties or remedies provided
    20  by law, a person may bring an action for equitable or declaratory relief
    21  in a court of competent jurisdiction against  a  police  agency,  police
    22  officer or peace officer that violates this section.
    23    4.  This  section does not preclude a police agency, police officer or
    24  peace officer from:
    25    (a) lawfully using a  mobile  fingerprint  scanning  device  during  a
    26  lawful  detention  to identify a person who does not have proof of iden-
    27  tification if a police officer or peace officer has reasonable cause  to
    28  arrest  such person or to issue to and serve upon such person an appear-
    29  ance ticket, provided that any  biometric  or  surveillance  information
    30  retained  through  the  use  of  such  device may be used solely for the
    31  purposes permitted  in  this  paragraph  or  other  purposes  explicitly
    32  authorized by law;
    33    (b) accessing DNA comparisons between forensic evidence and designated
    34  offenders, as defined in subdivision seven of section nine hundred nine-
    35  ty-five  of  this  chapter,  through  the state DNA identification index
    36  pursuant to section nine hundred ninety-five-c of this chapter;
    37    (c) accessing fingerprint comparisons using  the  statewide  automated
    38  biometric  identification  system  for the purpose of routine booking or
    39  crime scene comparisons; or
    40    (d) using any lawfully installed security system that processes biome-
    41  tric information solely for the purpose of  verifying  the  identity  of
    42  members,  officers,  employees, agents, or other affiliated staff of the
    43  police agency in order to determine whether such persons  are  permitted
    44  to  access information, goods, materials, areas, or other possessions or
    45  property belonging to or under the custody of the police agency.
    46    § 3. The executive law is amended by adding a new section 234 to  read
    47  as follows:
    48    §  234.  Use  of  biometric surveillance systems prohibited. 1.  Defi-
    49  nitions. For the purposes of this section,  the  following  terms  shall
    50  have the following meanings:
    51    (a)   "Biometric  information"  means  any  measurable  physiological,
    52  biological or behavioral characteristics that  are  attributable  to  an
    53  individual person, including facial characteristics, fingerprint charac-
    54  teristics,  hand  characteristics, eye characteristics, vocal character-
    55  istics, and any other physical characteristics that can be used,  singly
    56  or  in  combination with each other or with other information, to estab-

        A. 9767                             4

     1  lish individual identity.   Examples of biometric  information  include,
     2  but  are  not  limited  to,  fingerprints,  handprints,  retina and iris
     3  patterns, DNA sequence, voice, gait, and facial geometry.
     4    (b)  (i) "Biometric surveillance" means either of the following, alone
     5  or in combination:
     6    (1) An automated or semi-automated process by which a person is  iden-
     7  tified  or  attempted to be identified based on their biometric informa-
     8  tion, including  identification  of  known  or  unknown  individuals  or
     9  groups; and/or
    10    (2)  An automated or semi-automated process that generates, or assists
    11  in generating, surveillance information about  an  individual  based  on
    12  their biometric information.
    13    (ii)  "Biometric  surveillance"  shall not include the use of an auto-
    14  mated or semi-automated process for the purposes of:
    15    (1) redacting a recording for release or disclosure outside the  state
    16  police to protect the privacy of a subject depicted in the recording, if
    17  the  process  does not generate or result in the retention of any biome-
    18  tric information or surveillance information;
    19    (2)  the  state  DNA  identification  index  in  accordance  with  the
    20  provisions of section nine hundred ninety-five-c of this chapter; or
    21    (3)  the  taking,  submission,  and processing of fingerprints for the
    22  state identification bureau, provided that such taking,  submission  and
    23  processing is explicitly authorized by law.
    24    (c)  "Biometric  surveillance  system"  means any computer software or
    25  application that performs biometric surveillance.
    26    (d) "Surveillance information" means either of the following, alone or
    27  in combination:
    28    (i) Any information about a known or unknown individual, including but
    29  not limited to, a person's  name,  date  of  birth,  gender,  aggregated
    30  location data, or criminal background; and/or
    31    (ii) Any information derived from biometric information, including but
    32  not  limited  to,  assessments about an individual's sentiment, state of
    33  mind or level of dangerousness.
    34    (e) "Use" means either of the following, alone or in combination:
    35    (i) The direct use of a biometric surveillance system by a  member  of
    36  the state police; and/or
    37    (ii) A request by a member of the state police that a police agency or
    38  other  third  party use a biometric surveillance system on behalf of the
    39  requesting entity.
    40    2. No member of the  state  police  shall  acquire,  possess,  access,
    41  install, activate or use any biometric surveillance system, or any biom-
    42  etric  information or surveillance information derived from the use of a
    43  biometric surveillance system by any other entity, while in  the  course
    44  of  their  job  duties or with regard to any information obtained, proc-
    45  essed, or accessed in the course of those duties.
    46    3. In addition to any other sanctions, penalties or remedies  provided
    47  by law, a person may bring an action for equitable or declaratory relief
    48  in  a  court  of  competent  jurisdiction  against a member of the state
    49  police that violates this section.
    50    4. This section does not preclude a member of the state police from:
    51    (a) lawfully using a  mobile  fingerprint  scanning  device  during  a
    52  lawful  detention  to identify a person who does not have proof of iden-
    53  tification if a member of the  state  police  has  reasonable  cause  to
    54  arrest  such person or to issue to and serve upon such person an appear-
    55  ance ticket, provided that any  biometric  or  surveillance  information
    56  retained  through  the  use  of  such  device may be used solely for the

        A. 9767                             5

     1  purposes permitted  in  this  paragraph  or  other  purposes  explicitly
     2  authorized by law;
     3    (b) accessing DNA comparisons between forensic evidence and designated
     4  offenders, as defined in subdivision seven of section nine hundred nine-
     5  ty-five  of  this  chapter,  through  the state DNA identification index
     6  pursuant to section nine hundred ninety-five-c of this chapter;
     7    (c) accessing fingerprint comparisons using  the  statewide  automated
     8  biometric  identification  system  for the purpose of routine booking or
     9  crime scene comparisons; or
    10    (d) using any lawfully installed security system that processes biome-
    11  tric information solely for the purpose of  verifying  the  identity  of
    12  members,  officers,  employees, agents, or other affiliated staff of the
    13  state police in order to determine whether such persons are permitted to
    14  access information, goods, materials, areas,  or  other  possessions  or
    15  property belonging to or under the custody of the state police.
    16    §  4.  Biometric  surveillance  regulation task force. 1. (a) There is
    17  hereby established  the  task  force  on  the  regulation  of  biometric
    18  surveillance, which shall consist of twelve members as follows:
    19    (a)  the  commissioner of the division of criminal justice services or
    20  his or her designee;
    21    (b) the superintendent of state police or his or her designee;
    22    (c) the commissioner of the New York city police department or his  or
    23  her designee; and
    24    (d)  three members appointed by the governor, two members appointed by
    25  the temporary president of the senate,  two  members  appointed  by  the
    26  speaker  of the assembly, one member appointed by the minority leader of
    27  the senate, and one member appointed  by  the  minority  leader  of  the
    28  assembly,  each  of which shall have expertise and experience related to
    29  at least one of the following fields, disciplines, or areas:
    30    (i) data privacy and data security;
    31    (ii) civil rights, civil liberties, and  due  process  and  procedural
    32  rights;
    33    (iii)  the  use  and  function of both existing and emerging biometric
    34  surveillance technology;
    35    (iv) legal representation of low-income individuals and/or tenants; or
    36    (v) criminal defense.
    37    (b) The chairperson of the task force shall be one of  the  governor's
    38  appointees, whom the governor shall so designate.
    39    (c)  The  task  force shall meet as often as is necessary, but no less
    40  than three times per year, and at the call of the chairperson.  Meetings
    41  may be held via teleconference. All members shall be provided with writ-
    42  ten  notice  reasonably  in  advance of each meeting with date, time and
    43  location of such meeting.
    44    (d) Any vacancies on the task force shall  be  filled  in  the  manner
    45  provided for in the initial appointment.
    46    (e)  Members of the task force shall receive no compensation for their
    47  services but shall be reimbursed for their actual expenses  incurred  in
    48  the performance of their duties in the work of the task force.
    49    (f)  The task force is authorized to hold public hearings and meetings
    50  and to consult with any relevant stakeholders it  deems  appropriate  or
    51  necessary  to  seek  assistance,  data,  or  other information that will
    52  enable the task force to carry out its powers and duties.
    53    (g) The division of criminal justice services shall provide  the  task
    54  force  with such facilities, assistance and data as will enable the task
    55  force to carry out its powers and duties. Additionally, all other  agen-
    56  cies  of  the  state  or subdivisions thereof may, at the request of the

        A. 9767                             6

     1  chairperson of the task force, provide the task force with such  facili-
     2  ties,  assistance,  and  data as will enable the task force to carry out
     3  its powers and duties.
     4    2. The task force shall:
     5    (a)  Examine  the  current  and proposed use of biometric surveillance
     6  systems, as such term is defined pursuant to section 837-u of the execu-
     7  tive law, by governments and/or law  enforcement,  both  in  the  United
     8  States and abroad;
     9    (b)  Examine  current and proposed laws, rules, regulations, programs,
    10  and policies relating to the use of biometric surveillance systems;
    11    (c) Examine currently  available  biometric  surveillance  systems  or
    12  similar  technology,  and  evaluate  their  effectiveness, efficacy, and
    13  accuracy, provided that such evaluation shall include the use of  repre-
    14  sentative  datasets according to targeted populations, and disaggregated
    15  testing for demographic subgroups by age, gender identity, and race;
    16    (d) Evaluate the potential benefits and harms of the use of  biometric
    17  surveillance  systems,  taking  into account and analyzing the impact of
    18  the use of such systems on minorities,  women,  young  people,  seniors,
    19  lesbian,  gay,  bisexual, transgender, and gender-nonconforming individ-
    20  uals, and individuals with disabilities;
    21    (e) Evaluate whether law enforcement should be permitted to use biome-
    22  tric surveillance systems, and if it is the judgment of the  task  force
    23  that  such  use  should  be  permitted,  the  task force shall propose a
    24  comprehensive framework of recommendations for legislation,  regulations
    25  and  standards  regarding  the  use  of such systems by law enforcement,
    26  including, but not limited to:
    27    (i) permissible uses and purposes for use  of  biometric  surveillance
    28  systems by law enforcement;
    29    (ii)  prohibited  uses  and purposes for use of biometric surveillance
    30  systems by law enforcement;
    31    (iii) minimum  standards  for  accuracy  that  biometric  surveillance
    32  systems  must  achieve in order to be authorized for use by law enforce-
    33  ment, and auditing requirements to ensure compliance with  those  stand-
    34  ards;
    35    (iv)  standards  for  use,  management,  and protection of information
    36  derived from the use of biometric surveillance systems by  law  enforce-
    37  ment, including, but not limited to data retention, sharing, access, and
    38  audit trails;
    39    (v)  rigorous  protections  for  due process, privacy, free speech and
    40  association, and racial, gender, and religious equity;
    41    (vi) training requirements for law enforcement personnel authorized to
    42  use biometric surveillance systems;
    43    (vii) procedures to address instances in which a person is  wrongfully
    44  targeted,  arrested  or  interrogated  based  on  inaccurate information
    45  derived from the use of a biometric surveillance system; and
    46    (viii) disclosure requirements for broad public transparency  as  well
    47  as discovery procedures.
    48    3.  (a)  No  sooner than January 1, 2024, and no later than January 1,
    49  2025, the task force shall transmit a report to the governor, the tempo-
    50  rary president of the senate, the speaker of the assembly, the  minority
    51  leader  of the senate, and the minority leader of the assembly detailing
    52  its findings and recommendations pursuant to  subdivision  two  of  this
    53  section.
    54    (b)  No later than ten days after the task force transmits such report
    55  to the governor, the temporary president of the senate, the  speaker  of
    56  the assembly, the minority leader of the senate, and the minority leader

        A. 9767                             7

     1  of  the  assembly,  the division of criminal justice services shall make
     2  such report available on its website.
     3    §  5.  This  act  shall take effect immediately, provided that section
     4  four of this act shall expire and be deemed repealed 60 days after tran-
     5  smission of the report of the findings and recommendations of  the  task
     6  force to the governor, the temporary president of the senate, the speak-
     7  er  of the assembly, the minority leader of the senate, and the minority
     8  leader of the assembly, as provided in paragraph (a) of subdivision 3 of
     9  section four of this act. Provided, however, that  the  commissioner  of
    10  the department of criminal justice services shall notify the legislative
    11  bill  drafting  commission  upon  the  transmission of the report of the
    12  findings of the task force, as provided in paragraph (a) of  subdivision
    13  3 of section four of this act, in order that the commission may maintain
    14  an  accurate  and timely effective data base of the official text of the
    15  laws of the state  of  New  York  in  furtherance  of  effectuating  the
    16  provisions  of section 44 of the legislative law and section 70-b of the
    17  public officers law.
feedback