Prohibits a person from enrolling a biometric identifier of an individual in a database to create identification of the individual, or changing the use of an enrolled biometric identifier, without first providing clear and conspicuous notice and obtaining the individual's consent.