California lawmakers approved SB-412, requiring explicit opt-in consent before any commercial biometric data collection.
The law carries statutory damages of $2,500 per violation and applies to face, voice, and gait recognition.
It takes effect January 1, 2027.