302.183. 1. Notwithstanding any provision of this chapter that requires an applicant to provide reasonable proof of residence for issuance or renewal of a noncommercial driver’s license, noncommercial instruction permit, or a nondriver’s license, an applicant shall not have his or her privacy rights violated in order to obtain or renew a Missouri noncommercial driver’s license, noncommercial instruction permit, or a nondriver’s license.
2. Any data derived from a person’s application shall not be sold for commercial purposes to any other organization or any other state without the express permission of the applicant without a court order; except such information may be shared with a law enforcement agency, judge, prosecuting attorney, or officer of the court, or with another state for the limited purposes set out in section 302.600 or for conducting driver history checks in compliance with the Motor Carrier Safety Improvement Act, 49 U.S.C. 31309. The state of Missouri shall protect the privacy of its citizens when handling any written, digital, or electronic data, and shall not participate in any standardized identification system using driver’s and nondriver’s license records. For purposes of this subsection, “commercial purposes” does not include data used or compiled solely to be used for, or obtained or compiled solely for purposes expressly allowed under the Missouri or federal Drivers Privacy Protection Act.
3. The department of revenue shall not amend procedures for applying for a driver’s license or identification card in order to comply with the goals or standards of the federal REAL ID Act of 2005, any rules or regulations promulgated under the authority granted in such act, or any requirements adopted by the American Association of Motor Vehicle Administrators for furtherance of the act.
4. Any biometric data previously collected, obtained, or retained in connection with motor vehicle registration or operation, the issuance or renewal of driver’s licenses, or the issuance or renewal of any identification cards by any department or agency of the state charged with those activities shall be retrieved and deleted from all databases. For purposes of this section, “biometric data” includes, but is not limited to:
(1) Facial feature pattern characteristics;
(2) Voice data used for comparing live speech with a previously created speech model of a person’s voice;
(3) Iris recognition data containing color or texture patterns or codes;
(4) Retinal scans, reading through the pupil to measure blood vessels lining the retina;
(5) Fingerprint, palm prints, hand geometry, measuring of any and all characteristics of biometric information, including shape and length of fingertips or recording ridge pattern or fingertip characteristics;
(6) Eye spacing;
(7) Characteristic gait or walk;
(9) Keystroke dynamics, measuring pressure applied to key pads or other digital receiving devices.
5. No citizen of this state shall have his or her privacy compromised by the state or agents of the state. The state shall within reason protect the sovereignty of the citizens the state is entrusted to protect.
(L. 2009 H.B. 361, A.L. 2010 H.B. 2161, A.L. 2013 S.B. 252)