Biometric Data Collection at Work in Louisiana: Your Rights

Federal law does not contain a comprehensive biometric privacy statute applicable nationwide, but several federal laws govern how biometric data may be collected and used. The Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681 et seq., requires employers to disclose to employees if biometric information will be used to make employment or credit decisions and to obtain written consent before obtaining a consumer report containing biometric identifiers. The Electronic Communications Privacy Act (ECPA), 18 U.S.C. § 2511, restricts the interception and disclosure of electronic data, which may include biometric data transmitted electronically.

The Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g, protects student biometric data in educational institutions. The Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq., restricts collection of biometric data from children under 13 without parental consent. Public sector employers are also bound by the Fourth Amendment, which prohibits unreasonable searches and seizures; courts have found mandatory biometric collection by government employers may constitute an unreasonable search.

Federal enforcement is primarily through the Federal Trade Commission (FTC) under Section 5 of the FTC Act for unfair or deceptive practices, and through the Department of Labor (DOL) and Equal Employment Opportunity Commission (EEOC) if biometric data collection violates anti-discrimination laws. The FCRA is enforced by both the FTC and private right of action by employees. State attorneys general may also enforce consumer protection laws against deceptive practices related to biometric data.

Louisiana does not have a standalone biometric privacy statute comparable to those in Illinois (Biometric Information Privacy Act) or California (California Consumer Privacy Act). However, Louisiana law recognizes a constitutional right to privacy under Louisiana Revised Statutes Title 9, Chapter 1, Section 9:1 and Article 1, Section 5 of the Louisiana Constitution, which protects individuals from unreasonable intrusion into private affairs.

Unlike states with explicit biometric consent laws, Louisiana does not require employers to obtain written consent before collecting fingerprints, facial scans, voice recognition, or other biometric identifiers. This means employers in Louisiana have broader latitude to collect biometric data than employers in Illinois or California, provided collection does not violate federal law or state privacy principles in a manner a court deems "unreasonable."

Louisiana employers of any size may collect biometric data for access control, time and attendance tracking, identity verification, or payroll purposes without a specific state law mandate to obtain prior written consent. However, employers should still comply with federal requirements under the FCRA if the biometric data will be used in making employment decisions. Public sector employers (state and local government) face stricter scrutiny: the Fourth Amendment may restrict mandatory biometric collection, and courts have held that collecting biometric data without reasonable suspicion or consent may constitute an unreasonable search.

Louisiana does not provide a private right of action for violations of biometric privacy, unlike Illinois. Remedies would arise under federal law (FCRA, ECPA, civil rights statutes) or under state tort law for invasion of privacy or breach of confidentiality if an employer improperly discloses biometric data. Employers should disclose biometric collection practices in employee handbooks and employment agreements as a matter of best practice to avoid common law privacy claims.

Louisiana employers may collect biometric data without written consent in several contexts: (1) when required by law for security clearances or background investigations conducted by third parties; (2) for internal access control and time-tracking systems if notice is provided in the employee handbook; (3) when the employee voluntarily provides biometric data (e.g., submitting a fingerprint for a voluntary background check); (4) when collection is part of a lawful law enforcement investigation with a warrant or subpoena.

Employers do not need explicit biometric consent when the data is used solely for payroll and timekeeping within a closed internal system and not sold or shared with third parties. However, if the biometric data is shared with a third-party background check company or used to make credit or credit-related decisions, FCRA consent requirements apply. Private sector employers are not bound by the Fourth Amendment, so they may require biometric collection as a condition of employment without a warrant or individualized suspicion (though doing so may expose them to invasion of privacy claims under Louisiana common law).

The major exception is for public employers (government agencies, public schools, public universities): mandatory biometric collection without reasonable suspicion or consent may violate the Fourth Amendment as an unreasonable search. Additionally, if biometric collection is used to track or profile employees based on a protected class (race, color, religion, sex, national origin, age, disability), the data collection may violate Title VII of the Civil Rights Act or the Age Discrimination in Employment Act (ADEA), regardless of whether Louisiana law permits it. Collective bargaining agreements may also limit an employer's right to collect biometric data if the union has negotiated such protections.

Step 1: Document the biometric collection practice. Keep records of: (a) when the employer began collecting biometric data; (b) what type of biometric data was collected (fingerprints, facial scan, voice, iris scan, gait); (c) whether you were given written notice or asked to sign a consent form; (d) the stated purpose for collection; (e) who has access to the biometric data; (f) any communication from the employer about how the data is stored, used, or shared. Take screenshots of employee handbook sections, email notices, or system notifications. Save any consent forms you signed (or document that no form was provided).

Step 2: Attempt an internal complaint with your employer. In most cases, employers do not have a specific grievance process for biometric data violations because Louisiana has no state biometric law. Instead, raise your concern through the standard HR complaint process by sending a written request to your HR department or manager explaining: (a) what biometric data was collected; (b) that you did not provide informed consent (if applicable); (c) how the collection affects you (privacy concern, data security risk, disability accommodation issue); (d) the date you are requesting a response. Request that the employer cease collection or explain its legal basis and provide a copy of the privacy policy. Save all correspondence.

Step 3: File a federal complaint if applicable. If the biometric data is being used in a decision that affects your employment (hiring, promotion, discipline, termination) or is linked to a credit decision, file a complaint with the Federal Trade Commission (FTC) at www.reportfraud.ftc.gov or call 1-877-438-4338. Alternatively, if you believe the biometric collection is part of an illegal background check, file a complaint with the Consumer Financial Protection Bureau (CFPB) at www.consumerfinance.gov or call 1-855-411-2372. If the employer is a government agency, file a complaint with the EEOC at www.eeoc.gov or call 1-800-669-4000. If you are a public employee and believe the collection violates your Fourth Amendment rights, consult an attorney about filing a Section 1983 civil rights action. Include in your complaint: (a) the employer's name and address; (b) the date collection began; (c) the type of biometric data; (d) whether you consented; (e) how it is being used; (f) copies of any policies or notices.

Step 4: Expect investigation if you file federally. The FTC or CFPB will review your complaint for evidence of unfair or deceptive practices. If you filed a FCRA claim, the FTC may open an investigation into whether the employer obtained a consumer report without proper disclosures or consent. Investigation timelines vary: typically 30-90 days for initial response, with possible settlement negotiations or enforcement action if violations are found. The employer may contact you during the investigation. The EEOC process is longer: after filing, the EEOC will send a charge to the employer, who has 10 days to respond. The EEOC will then investigate (typically 180 days) and issue a Right-to-Sue letter if it finds no reasonable cause. You then have 90 days to file a civil lawsuit in federal court.

Step 5: Consult an employment attorney if: (a) the employer retaliates after you complain (reassignment, discipline, termination); (b) the biometric data was used to make an adverse employment decision; (c) you believe the collection violates a disability accommodation right (e.g., you cannot provide a fingerprint due to a hand injury, but the employer requires it); (d) the biometric collection is linked to a protected class discrimination concern (e.g., facial recognition systems are known to have higher error rates for people of color). An employment attorney can review your case for claims under federal privacy law, state common law invasion of privacy, or civil rights statutes. Many employment lawyers offer free initial consultations and work on contingency if you have a strong case. Contact the Louisiana State Bar Association at 504-566-1600 for a referral.