The statement discloses that Salesforce may collect biometric information, specifically images of facial features for identification purposes, at specified events where the individual has given explicit consent.
This analysis describes what Salesforce's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that Salesforce collects a special category of Personal Data (biometric data) at events, requiring explicit consent under GDPR Article 9 and engaging state-level biometric privacy laws such as Illinois BIPA, which impose specific notice, consent, retention, and destruction requirements.
Under this provision, attendees at specified Salesforce events may be asked to provide biometric facial data for identification purposes, subject to explicit consent. The agreement states this collection is limited to specified events and conditioned on explicit consent.
Cross-platform context
See how other platforms handle Biometric Data Collection at Events and similar clauses.
Compare across platforms →"If you give your explicit consent and only for specified events, your biometric information, such as an image of your facial features for identification purposesExcerpt from Salesforce's Privacy Statement
(1) REGULATORY LANDSCAPE: This provision engages GDPR Article 9 (special categories of Personal Data), Illinois BIPA (740 ILCS 14), Texas CUBI, Washington My Health MY Data Act, and equivalent biometric privacy statutes in other U.S.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that Salesforce collects a special category of Personal Data (biometric data) at events, requiring explicit consent under GDPR Article 9 and engaging state-level biometric privacy laws such as Illinois BIPA, which impose specific notice, consent, retention, and destruction requirements.
Under this provision, attendees at specified Salesforce events may be asked to provide biometric facial data for identification purposes, subject to explicit consent. The agreement states this collection is limited to specified events and conditioned on explicit consent.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Salesforce.