{"slug":"us-texas-responsible-ai-governance-act-traiga-government-biometric-identification-prohibition","id":"AIPT-OBL-0108","permanent_url":"https://aipolicytracker.org/id/AIPT-OBL-0108","title":"Governmental entities must not use AI for biometric identification from public data without consent where it infringes rights","short_title":"Government biometric identification limits","category":"prohibited_practice","summary":"A governmental entity may not develop or deploy an AI system for the purpose of uniquely identifying a specific individual using biometric data, or of gathering images or other media from the internet or another public source without the individual's consent, where doing so would infringe a right guaranteed under the United States or Texas constitutions or violate state or federal law. The Act preserves lawful uses that comply with existing biometric-privacy law.\n","practical_action":"Require legal sign-off on lawful basis and constitutional review before any agency biometric-matching or public-image scraping project.\n","is_binding":true,"applies_from":"2026-01-01","section":null,"source_reference":"Business and Commerce Code Section 551.054","official_source_url":"https://capitol.texas.gov/BillLookup/History.aspx?LegSess=89R&Bill=HB149","review_status":"verified","confidence_level":"high","last_verified_at":"2026-09-26","reviewed_by":"Bhaskar Bhatt","actors":["public_authority"],"sectors":["public_services","law_enforcement"],"use_cases":["biometrics","law_enforcement"],"applicability":[{"description":"Texas governmental entities using AI for biometric identification or collection of public images.","actors":["public_authority"],"conditions":null}],"evidence_examples":[{"title":"Legal review of biometric AI use","description":null,"artifact_type":"record"}],"framework_mappings":[{"framework":"nist_ai_rmf","framework_name":"NIST AI RMF 1.0","reference":"GOVERN 1.1, MEASURE 2.10","note":"Legal requirements and privacy risk.","confidence_level":"medium","is_original":true},{"framework":"iso_42001","framework_name":"ISO/IEC 42001:2023","reference":"Annex A.5.2, A.7.3","note":"Impact assessment and data acquisition.","confidence_level":"medium","is_original":true}],"controls":[{"slug":"prohibited-use-screening-gate","title":"Prohibited and unacceptable-use screening gate","kind":"process","relationship":"satisfies","note":"Screens biometric projects against the ban.","confidence_level":"high","url":"https://aipolicytracker.org/controls/prohibited-use-screening-gate"},{"slug":"privacy-and-data-protection-for-ai","title":"Privacy and data-protection controls for AI","kind":"process","relationship":"supports","note":"Consent and lawful basis for biometric data.","confidence_level":"high","url":"https://aipolicytracker.org/controls/privacy-and-data-protection-for-ai"}],"url":"https://aipolicytracker.org/obligations/us-texas-responsible-ai-governance-act-traiga-government-biometric-identification-prohibition","policy":{"slug":"us-texas-responsible-ai-governance-act-traiga","title":"Texas Responsible Artificial Intelligence Governance Act (HB 149, 89th Legislature)","status":"in_force","jurisdiction":"us-texas","url":"https://aipolicytracker.org/policies/us-texas-responsible-ai-governance-act-traiga"}}