What does BIPA require regarding the destruction of biometric information?
BIPA requires entities to establish guidelines for permanently destroying biometric identifiers when the purpose of collection is satisfied or within three years of the last interaction.