Council members ask if private lawsuits alone would be sufficient for enforcing the biometric privacy bill, or if additional civil penalties are necessary.

• The privacy advocate says private lawsuits and robust agency enforcement are the most effective approach.
• The council member asks if both private actions and civil penalties are needed for the bill to be effective.
• The advocate responds that having both private lawsuits and agency enforcement tends to be the best way to implement safeguards.