Individual document capture location and BIPA consent

Written by First AML API team
Sep 23, 2025

These fields have been added to the createIndividualDocument operation input in order to meet with regulatory requirements in certain jurisdictions.

• collectionLocationCountryCode (string, optional): The ISO 3166-1 alpha-2 country code representing the country where the document was captured. This field is required if the document was captured in the United States.
• consents (ConsentInput, optional): Represents the consents obtained from the individual during the document capture process.
• ConsentInput type: Represents a consent obtained from the individual. It includes the following field:
  • biometricProcessing (boolean, optional): Confirming that BIPA consent has been acknowledged by the individual.

These fields are optional, but should be provided when the document capture location was within the US, and document type is one of:

• DRIVER_LICENSE
• NATIONAL_ID_CARD
• PASSPORT

If collectionLocationCountryCode == “US”:

• consents will also be required.
• biometricProcessing must be set to true to confirm BIPA consent.

Example mutation

mutation {
  createIndividualDocument(
    input: {
      caseId: "123"
      individualId: "456"
      documentType: "PASSPORT"
      documentTitle: "passport"
      fields: []
      collectionLocationCountryCode: "US"
      consents: { biometricProcessing: true }
    }
  ) {
    ... on ValidationErrors {
      errors {
        message
      }
    }
  }

Example validation failure response

{
  "data": {
    "createIndividualDocument": {
      "__typename": "ValidationErrors",
      "errors": [
        {
          "message": "Location is US, biometric processing consent is required"
        }
      ]
    }
  }
}

---