Consent for Collecting Biometrics

NOTE:

This topic only applies to Patient Access non-production environments used for training or testing. It does not apply to production environments.

Biometric privacy regulations in certain states require the collection of consent from a person for use of their biometric data in non-production (test) environments.

During training or testing of the Patient Access system, employees must consent to the collection and use of their biometric data. Photos are deleted from the test environment after 30 days.

States Requiring Consent for Biometric Data Collection

The following states require consent for biometric data collection in non-production environments:

  • Illinois (IL)

  • Texas (TX)

  • Washington (WA)

    IMPORTANT:

    Depending on state privacy regulatory requirements, this list may be updated in future.

What to Expect

When enrolling in a non-production environment, the Patient Access interface displays a page where the person whose photo is being captured must indicate whether they are a resident of IL, TX, or WA, and grant or decline consent.

Workflow

In the enrollment workflow, a Consent page is displayed.

To grant or decline consent for the collection of biometric data:

  1. The person enters their name in the First Name and Last name boxes.

  2. The person enters their work email address in the Work email address box. Personal email addresses are not supported.

  3. The person selects Yes or No to the I am currently a resident of IL or TX or WA.

    • If Yes, the person reads the state-specific legal text and clicks Grant consent or Decline consent.

      • Clicking Grant consent allows the person to perform the enrollment and continue to the photo capture.

      • Clicking Decline consent prevents the enrollment from proceeding and closes Patient Access.

    • If No, the person continues to the photo capture.