Required actions
- Commercial establishments that collect biometric identifiers from customers must post clear signage; they may not sell or share biometric data - Madison Square Garden's use of facial recognition to exclude lawyers was litigated under this framework
