Prohibits a person, governmental entity, or business entity from intentionally scanning certain identification devices remotely for any purpose without obtaining the person's opt-in consent.

Provides that opt-in consent may be secured in writing or electronically.

Requires the governmental entity or business entity, in obtaining a person's opt-in consent, to unambiguously disclose to the person that by consenting, the person agrees to have the governmental entity or business entity collect, use, or retain data gathered from the identification device for any purpose.

Requires the office of the attorney general to, on an annual basis, make recommendations to the legislature on other personally invasive technologies that may warrant further legislative action.