Earlier this month, lawmakers inside the New York State legislature raised the possibility of passing Assembly Bill 27, otherwise known as the Biometric Privacy Act. Among other things, the proposed legislation would require organizations to develop a written retention policy for storing and disposing of biometric data, as well as obtain written consent from employees or customers prior to collecting such information.