The laws state that the employer must demonstrate a need for collecting their employee's biometric data, it does not use the data for any other purpose, it protects the data, notifies employees in advance that it is collecting the data, and provides employees with access to their data.