1. Short title This Act may be cited as the Commercial Facial Recognition Privacy Act of 2019 . 2. Definitions In this Act: (1) Affirmative consent The term affirmative consent means the consent of an end user that involves an individual, voluntary, and explicit agreement to the collection and data use policies of a controller. (2) Controller The term controller means a covered entity that, alone or jointly with others, determines the purposes and means of the processing of facial recognition data. (3) Covered entity The term covered entity — (A) means any person, including corporate affiliates, that collects, stores, or processes facial recognition data; and (B) does not include— (i) the Federal Government or any State or local government; (ii) a law enforcement agency; (iii) a national security agency; or (iv) an intelligence agency. (4) End user The term end user means an individual. (5) Facial recognition technology The term facial recognition technology means technology that— (A) analyzes facial features in still or video images; and (B) (i) is used to assign a unique, persistent identifier