Spoken like someone that has never had to help a company clean up after a cyber breach. I’ll give you a quick hint, over the next few years, expect all your employers logins to require MFA, since it’s now required to get any kind of cyber insurance to cover data breaches.

This would be better if they also limited their own terms in the bill

I wonder why medical facilities might be targeted. Oh, right, they make great human shields. https://en.m.wikipedia.org/wiki/Al-Shifa_Hospital

Nothing in that bill talks about biometrics.