UPDATE OF BIOMETRIC POLICY OF DEPARTMENT OF DEFENSE.

SEC. 1523. UPDATE OF BIOMETRIC POLICY OF DEPARTMENT OF DEFENSE. (a) In General.—Not later than 180 days after the date of the enactment of this Act, the Under Secretary of Defense for Intelligence and Security shall update the policy of the Department of Defense regarding the protection of biometric data. (b) Elements.—The policy updates required by subsection (a) shall include the following: (1) Standards for encrypting and protecting data on biometric collection devices. (2) A requirement to sanitize biometric data from collection devices and hard drives prior to disposal of the devices and hard drives. (3) A requirement that components of the Department maintain records that they have sanitized all data from biometric collection devices when the devices are turned in for disposal.