Full Report
At a press conference outside Madison Square Garden, politicians, musicians, and privacy advocates argued for tighter restrictions on how public venues deploy biometric surveillance.
Analysis Summary
# Regulation/Compliance: NYC "Ban the Scan" (Proposed Biometric Restrictions)
## Overview
This regulatory push concerns the "Ban the Scan" initiative, a legislative effort in New York City aimed at prohibiting or severely restricting the use of facial recognition and other biometric surveillance technologies by owners of "places of public accommodation" (e.g., Madison Square Garden, stadiums, music venues). The movement seeks to prevent venues from using biometric data to harass, exclude, or surveil whistleblowers, legal adversaries, or the general public.
## Key Details
- **Issuing Authority:** New York City Council
- **Effective Date:** TBD (Pending legislative passage)
- **Jurisdiction:** New York City (specifically public venues and private arenas)
- **Status:** Proposed / Under Legislative Debate
## Requirements
### Mandatory Requirements (Proposed)
1. **Prohibition of Discriminatory Exclusion:** Venues would be barred from using biometric identification to identify and deny entry to individuals based on their occupation or legal status (e.g., lawyers in litigation against the venue).
2. **Strict Consent Mandates:** Requirement for explicit, informed consent before collecting biometric identifiers.
3. **Data Localization/Deletion:** Limits on how long biometric data can be stored and prohibitions on sharing that data with third parties or law enforcement without a warrant.
### Recommended Practices
1. **Alternative Authentication:** Provide non-biometric entry options (physical tickets/digital QR codes) that do not require facial scans.
2. **Signage and Disclosure:** Clearly post notices at all entrances informing the public of any surveillance technologies in use.
## Affected Organizations
- **Industries:** Sports and entertainment venues, concert halls, convention centers, and retail "places of public accommodation."
- **Organization Size:** Large-scale commercial venues and any business utilizing automated biometric identification systems.
- **Geographic Scope:** Businesses operating within the five boroughs of New York City.
## Compliance Timeline
- **August 2026:** Public advocacy and press conferences (Current Status).
- **Upcoming Legislative Session:** Expected introduction or vote on the specific "Ban the Scan" bills.
- **Implementation Deadline:** Typically 180 days post-enactment for venues to decommission prohibited systems.
## Implementation Guidance
### Assessment Phase
- Audit existing CCTV and security infrastructure to identify software with "facial geometry" or "biometric matching" capabilities.
- Review "Conditions of Entry" and privacy policies for disclosures regarding biometric data.
### Implementation Phase
- Disable automated "blacklisting" features tied to biometric databases.
- Implement robust Opt-Out mechanisms as seen in related state laws (e.g., CO, CT, VA, TX) mentioned in the context.
### Validation Phase
- Third-party audits of surveillance software to ensure facial recognition algorithms are not active.
- Legal review of "Right to Exclude" policies to ensure they align with new anti-discrimination mandates.
## Technical Requirements
- **De-identification:** Requirement to anonymize data streams if used for crowd counting rather than identification.
- **Access Control:** Encryption and strict access logs for any biometric templates stored during the "consent" period.
- **Interoperability:** Systems must allow for manual overrides if a patron opts out of a digital scan.
## Penalties & Enforcement
- **Fines:** Proposed civil penalties ranging from $1,000 to $5,000 per violation (per person scanned without consent).
- **Other Consequences:** Private right of action, allowing citizens to sue venues directly for unauthorized biometric collection.
- **Enforcement:** NYC Department of Consumer and Worker Protection (DCWP) or the Office of the Attorney General.
## Related Standards
- **NIST FRTE:** National Institute of Standards and Technology Facial Recognition Technology Evaluation (used to measure bias).
- **BIPA (Illinois):** The landmark Biometric Information Privacy Act which serves as the legal blueprint for this NYC proposal.
## Resources
- **Official Documentation:** [h-t-t-p-s://council.nyc.gov/legislation/] (Defanged)
- **Guidance Documents:** [h-t-t-p-s://www.aclu.org/issues/privacy-technology/biometric-surveillance] (Defanged)
## Practical Recommendations
- **Immediate Action:** Cease the use of biometric "watchlists" for legal adversaries to avoid current litigation risks (e.g., New York State's "Adverse Action" laws).
- **Data Minimization:** Delete any biometric data that is not strictly necessary for immediate security functions.
- **Policy Update:** Update privacy notices to include specific "Opt-Out" instructions for residents of the 19+ states currently granting these rights.