| Last Version Text |
<?xml version="1.0" ?>
<ns0:MeasureDoc xmlns:html="http://www.w3.org/1999/xhtml" xmlns:ns0="http://lc.ca.gov/legalservices/schemas/caml.1#" xmlns:ns3="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="1.0" xsi:schemaLocation="http://lc.ca.gov/legalservices/schemas/caml.1# xca.1.xsd">
<ns0:Description>
<ns0:Id>20250SB__027492ENR</ns0:Id>
<ns0:VersionNum>92</ns0:VersionNum>
<ns0:History>
<ns0:Action>
<ns0:ActionText>INTRODUCED</ns0:ActionText>
<ns0:ActionDate>2025-02-04</ns0:ActionDate>
</ns0:Action>
<ns0:Action>
<ns0:ActionText>AMENDED_SENATE</ns0:ActionText>
<ns0:ActionDate>2025-03-26</ns0:ActionDate>
</ns0:Action>
<ns0:Action>
<ns0:ActionText>AMENDED_SENATE</ns0:ActionText>
<ns0:ActionDate>2025-04-10</ns0:ActionDate>
</ns0:Action>
<ns0:Action>
<ns0:ActionText>AMENDED_SENATE</ns0:ActionText>
<ns0:ActionDate>2025-05-01</ns0:ActionDate>
</ns0:Action>
<ns0:Action>
<ns0:ActionText>AMENDED_SENATE</ns0:ActionText>
<ns0:ActionDate>2025-05-23</ns0:ActionDate>
</ns0:Action>
<ns0:Action>
<ns0:ActionText>AMENDED_ASSEMBLY</ns0:ActionText>
<ns0:ActionDate>2025-07-17</ns0:ActionDate>
</ns0:Action>
<ns0:Action>
<ns0:ActionText>AMENDED_ASSEMBLY</ns0:ActionText>
<ns0:ActionDate>2025-09-05</ns0:ActionDate>
</ns0:Action>
<ns0:Action>
<ns0:ActionText>PASSED_ASSEMBLY</ns0:ActionText>
<ns0:ActionDate>2025-09-13</ns0:ActionDate>
</ns0:Action>
<ns0:Action>
<ns0:ActionText>PASSED_SENATE</ns0:ActionText>
<ns0:ActionDate>2025-09-13</ns0:ActionDate>
</ns0:Action>
<ns0:Action>
<ns0:ActionText>ENROLLED</ns0:ActionText>
<ns0:ActionDate>2025-09-17</ns0:ActionDate>
</ns0:Action>
</ns0:History>
<ns0:LegislativeInfo>
<ns0:SessionYear>2025</ns0:SessionYear>
<ns0:SessionNum>0</ns0:SessionNum>
<ns0:MeasureType>SB</ns0:MeasureType>
<ns0:MeasureNum>274</ns0:MeasureNum>
<ns0:MeasureState>ENR</ns0:MeasureState>
</ns0:LegislativeInfo>
<ns0:AuthorText authorType="LEAD_AUTHOR">Introduced by Senator Cervantes</ns0:AuthorText>
<ns0:AuthorText authorType="COAUTHOR_OPPOSITE">(Coauthor: Assembly Member Lowenthal)</ns0:AuthorText>
<ns0:Authors>
<ns0:Legislator>
<ns0:Contribution>LEAD_AUTHOR</ns0:Contribution>
<ns0:House>SENATE</ns0:House>
<ns0:Name>Cervantes</ns0:Name>
</ns0:Legislator>
<ns0:Legislator>
<ns0:Contribution>COAUTHOR</ns0:Contribution>
<ns0:House>ASSEMBLY</ns0:House>
<ns0:Name>Lowenthal</ns0:Name>
</ns0:Legislator>
</ns0:Authors>
<ns0:Title>An act to amend Sections 1798.90.5, 1798.90.51, 1798.90.52, 1798.90.53, 1798.90.54, and 1798.90.55 of, and to add Sections 1798.90.56 and 1798.90.57 to, the Civil Code, relating to personal information.</ns0:Title>
<ns0:RelatingClause>personal information</ns0:RelatingClause>
<ns0:GeneralSubject>
<ns0:Subject>Automated license plate recognition systems.</ns0:Subject>
</ns0:GeneralSubject>
<ns0:DigestText>
<html:p>Existing law prohibits a public agency, which includes the state, a city, a county, a city and county, or any agency or political subdivision of the state, a city, a county, or a city and county, including, but not limited to, a law enforcement agency, from selling, sharing, or transferring automated license plate recognition (ALPR) information, except to another public agency, and only as otherwise permitted by law. Existing law defines ALPR information as information or data collected through the use of an ALPR system.</html:p>
<html:p>This bill would provide that “public agency” does not include a transportation agency, a public transit operator, or a local department of transportation or public works department, as specified.
The bill would, beginning January 1, 2026, require new, updated, expansions of, or addendums of contractual agreements with ALPR vendors, manufacturers, or suppliers to mandate that no default access is provided to any national ALPR database and that an agency’s collected scans are by default not accessible to any other agency, and would impose new requirements on sharing between California state law enforcement agencies. The bill would authorize a law enforcement agency to use ALPR information only for purposes of locating vehicles or persons when either are reasonably suspected of being involved in the commission of a public offense. The bill would prohibit a public agency from retaining ALPR information for more than 60 days after the date of collection if it does not match information on an authorized hot list, as defined, and as of January 1, 2026, would require a public agency to delete all ALPR information that has been held for more than 60 days and does not match
information on an authorized hot list within 14 days. By imposing new requirements on public agencies, which include local agencies, this bill would impose a state-mandated local program.</html:p>
<html:p>Existing law defines an ALPR operator as a person that operates an ALPR system, which does not include a transportation agency. Existing law defines an ALPR end-user a person that accesses or uses an ALPR system, which does not include, among other things, a transportation agency.</html:p>
<html:p>This bill would additionally exclude from the definitions of “ALPR operator” and “ALPR end-user” a public transit operator, a local department of transportation or public works department, or an airport or airport operator, as provided.</html:p>
<html:p>Existing law requires an ALPR operator and ALPR end-user to maintain reasonable security procedures and practices, including operational,
administrative, technical, and physical safeguards, to protect ALPR information from unauthorized access, destruction, use, modification, or disclosure.</html:p>
<html:p>This bill would require those security procedures and practices to include safeguards for managing which employees can see the data from their systems, as specified, and requiring data security training and data privacy training for all employees that access ALPR information.</html:p>
<html:p>Existing law requires an ALPR operator and ALPR end-user to implement a usage and privacy policy that includes, among other things, a description of the job title or other designation of the employees and independent contractors who are authorized to access and use ALPR information.</html:p>
<html:p>This bill would require the usage and privacy policy to identify what purpose employees and independent contractors access and use ALPR information for. The bill would also require
the Department of Justice to, contingent upon an appropriation of sufficient funds, conduct annual random audits on a public agency that is an ALPR operator or ALPR end-user to determine whether they have implemented and are adhering to that usage and privacy policy.</html:p>
<html:p>Existing law requires an ALPR operator that accesses or provides access to ALPR information to require that ALPR information only be used for the authorized purposes described in the usage and privacy policy and to maintain a record of that access that includes, among other things, the purpose for accessing the information.</html:p>
<html:p>This bill would instead require that record of access maintained by the ALPR operator to include the case file number
or task force name, as applicable, that justifies the search query, and would provide that no queries shall be allowed without a log entry with a valid and current case file number or task force name from the agency conducting the query. </html:p>
<html:p>The bill would include findings that changes proposed by this bill address a matter of statewide concern rather than a municipal affair and, therefore, apply to all cities, including charter cities.</html:p>
<html:p>The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.</html:p>
<html:p>This bill would provide that, if the Commission on State Mandates
determines that the bill contains costs mandated by the state, reimbursement for those costs shall be made pursuant to the statutory provisions noted above.</html:p>
</ns0:DigestText>
<ns0:DigestKey>
<ns0:VoteRequired>MAJORITY</ns0:VoteRequired>
<ns0:Appropriation>NO</ns0:Appropriation>
<ns0:FiscalCommittee>YES</ns0:FiscalCommittee>
<ns0:LocalProgram>YES</ns0:LocalProgram>
</ns0:DigestKey>
<ns0:MeasureIndicators>
<ns0:ImmediateEffect>NO</ns0:ImmediateEffect>
<ns0:ImmediateEffectFlags>
<ns0:Urgency>NO</ns0:Urgency>
<ns0:TaxLevy>NO</ns0:TaxLevy>
<ns0:Election>NO</ns0:Election>
<ns0:UsualCurrentExpenses>NO</ns0:UsualCurrentExpenses>
<ns0:BudgetBill>NO</ns0:BudgetBill>
<ns0:Prop25TrailerBill>NO</ns0:Prop25TrailerBill>
</ns0:ImmediateEffectFlags>
</ns0:MeasureIndicators>
</ns0:Description>
<ns0:Bill id="bill">
<ns0:Preamble>The people of the State of California do enact as follows:</ns0:Preamble>
<ns0:BillSection id="id_1069BDF1-13BF-4488-9C34-DCD822B11B1B">
<ns0:Num>SECTION 1.</ns0:Num>
<ns0:Content>
<html:p>This act shall be known as the Automated License Plate Recognition (ALPR) Data Accountability Act.</html:p>
</ns0:Content>
</ns0:BillSection>
<ns0:BillSection id="id_947FEC02-81A1-4DE7-A521-AFFF31222816">
<ns0:Num>SEC. 2.</ns0:Num>
<ns0:ActionLine action="IS_AMENDED" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2Fcaml%3ALawHeading%5B%40type%3D'DIVISION'%20and%20caml%3ANum%3D'3.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'PART'%20and%20caml%3ANum%3D'4.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'TITLE'%20and%20caml%3ANum%3D'1.81.23.'%5D%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'1798.90.5.'%5D)" ns3:label="fractionType: LAW_SECTION" ns3:type="locator">
Section 1798.90.5 of the
<ns0:DocName>Civil Code</ns0:DocName>
is amended to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawSection id="id_830026B8-BEB9-416C-94E9-F2F60D38AB82">
<ns0:Num>1798.90.5.</ns0:Num>
<ns0:LawSectionVersion id="id_8BE51106-2E67-480F-8B93-E0BAF9127C9E">
<ns0:Content>
<html:p>The following definitions shall apply for purposes of this title:</html:p>
<html:p>
(a)
<html:span class="EnSpace"/>
“Airport or airport operator” means a city, county, city and county, airport authority, joint powers authority, special district, or other public entity that owns or operates a public-use airport, and its contracted parking operator acting on the airport’s behalf.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
“Automated license plate recognition end-user” or “ALPR end-user” means a person that accesses or uses an ALPR system, but does not include any of the following:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
A transportation agency when subject to Section 31490 of the Streets and Highways Code.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
A public transit operator when subject to Section 40240 of the Vehicle Code.
</html:p>
<html:p>
(3)
<html:span class="EnSpace"/>
A local department of transportation or public works department when subject to Section 21455.5 of, and Article 3 (commencing with Section 22425) of Chapter 7 of Division 11 of, the Vehicle Code.
</html:p>
<html:p>
(4)
<html:span class="EnSpace"/>
An airport or airport operator when collecting, accessing, or using ALPR information solely for parking access control, fee calculation, lost-ticket resolution, fraud prevention, or transaction dispute
resolution in an airport parking facility.
</html:p>
<html:p>
(5)
<html:span class="EnSpace"/>
A person that is subject to Sections 6801 to 6809, inclusive, of Title 15 of the United States Code and state or federal statutes or regulations implementing those sections, if the person is subject to compliance oversight by a state or federal regulatory agency with respect to those sections.
</html:p>
<html:p>
(6)
<html:span class="EnSpace"/>
A person, other than a law enforcement agency, to whom information may be disclosed as a permissible use pursuant to Section 2721 of Title 18 of the United States Code.
</html:p>
<html:p>
(c)
<html:span class="EnSpace"/>
“Automated license plate recognition information,” or “ALPR information” means information or data collected through the use of an ALPR system.
</html:p>
<html:p>
(d)
<html:span class="EnSpace"/>
“Automated license plate recognition operator” or “ALPR operator” means a person that operates an ALPR system, but does not include any of the following:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
A transportation agency when subject to Section 31490 of the Streets and Highways Code.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
A public transit
operator when subject to Section 40240 of the Vehicle Code.
</html:p>
<html:p>
(3)
<html:span class="EnSpace"/>
A local department of transportation or public works department when subject to Section 21455.5 of, and Article 3 (commencing with Section 22425) of Chapter 7 of Division 11 of, the Vehicle Code.
</html:p>
<html:p>
(4)
<html:span class="EnSpace"/>
An airport or airport operator when collecting, accessing, or using ALPR information solely for parking access control, fee calculation, lost-ticket resolution, fraud prevention, or transaction dispute resolution in an airport parking facility.
</html:p>
<html:p>
(e)
<html:span class="EnSpace"/>
“Automated license plate recognition system” or “ALPR system”
means a searchable computerized database resulting from the operation of one or more mobile or fixed cameras combined with computer algorithms to read and convert images of registration plates and the characters they contain into computer-readable data.
</html:p>
<html:p>
(f)
<html:span class="EnSpace"/>
“Hot list” means a list or lists of license plates of vehicles of interest against which the ALPR system is comparing vehicles on the roadways. Authorized hot lists are limited to the National Crime Information Center (NCIC) list, the Stolen Vehicle System (SVS), California Department of Justice lists, official alerts, including AMBER, Silver,
Feather, Blue, Yellow, Ebony, and any new alerts authorized by the Legislature, and custom BOLO lists that pertain solely to missing and at-risk persons, witness locations, burglaries, grand theft, and violent crimes.
</html:p>
<html:p>
(g)
<html:span class="EnSpace"/>
“Person” means any natural person, public agency, partnership, firm, association, corporation, limited liability company, or other legal entity.
</html:p>
<html:p>
(h)
<html:span class="EnSpace"/>
“Public agency” means the state, any city, county, or city and county, or any agency or political subdivision of the state or a city, county, or city and county, including, but not limited to, a law enforcement agency, but does not include
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
A transportation agency when subject to Section 31490 of the Streets and Highways Code.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
A public transit operator when subject to Section 40240 of the Vehicle Code.
</html:p>
<html:p>
(3)
<html:span class="EnSpace"/>
A
local department of transportation or public works department when subject to Section 21455.5 of, and Article 3 (commencing with Section 22425) of Chapter 7 of Division 11 of, the Vehicle Code.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:Fragment>
</ns0:BillSection>
<ns0:BillSection id="id_B8C0C864-FBA8-47D8-90D0-B57AE5C25C91">
<ns0:Num>SEC. 3.</ns0:Num>
<ns0:ActionLine action="IS_AMENDED" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2Fcaml%3ALawHeading%5B%40type%3D'DIVISION'%20and%20caml%3ANum%3D'3.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'PART'%20and%20caml%3ANum%3D'4.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'TITLE'%20and%20caml%3ANum%3D'1.81.23.'%5D%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'1798.90.51.'%5D)" ns3:label="fractionType: LAW_SECTION" ns3:type="locator">
Section 1798.90.51 of the
<ns0:DocName>Civil Code</ns0:DocName>
is amended to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawSection id="id_2B5519B0-C27C-43A0-97C0-9CB0F3A65558">
<ns0:Num>1798.90.51.</ns0:Num>
<ns0:LawSectionVersion id="id_EA91597C-2F8B-4003-B42F-30BCAACCE3E5">
<ns0:Content>
<html:p>An ALPR operator shall do both of the following:</html:p>
<html:p>
(a)
<html:span class="EnSpace"/>
Maintain reasonable security procedures and practices, including operational, administrative, technical, and physical safeguards, to protect ALPR information from unauthorized access, destruction, use, modification, or disclosure, including the following:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
Safeguards for managing which employees can see the data from their systems, including requiring supervisory approval, robust authentication protocols for establishing an account to access an ALPR system, and tracking searches of ALPR information made by employees.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
Requiring
data security training and data privacy training for all employees that access ALPR information.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
(1)
<html:span class="EnSpace"/>
Implement a usage and privacy policy, under the supervision of the Department of Justice according to subdivision (c) of Section 1798.90.54, if applicable, in order to ensure that the collection, use, maintenance, sharing, and dissemination of ALPR information is consistent with respect for individuals’ privacy and civil liberties. The usage and privacy policy shall be available to the public in writing, and, if the ALPR operator has an internet website, the usage and privacy policy shall be posted conspicuously on that internet website.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
The usage and privacy policy shall, at a minimum, include all of the following:
</html:p>
<html:p>
(A)
<html:span class="EnSpace"/>
The authorized purposes for using the ALPR system and collecting ALPR information.
</html:p>
<html:p>
(B)
<html:span class="EnSpace"/>
A description of the job title or other designation of the employees and independent contractors who are authorized to use or access the ALPR system, or to collect ALPR information, and for what purpose. The policy shall identify the training requirements necessary for those authorized employees and independent contractors.
</html:p>
<html:p>
(C)
<html:span class="EnSpace"/>
A description of how the ALPR system will be monitored to ensure the security of the information and compliance with applicable privacy laws.
</html:p>
<html:p>
(D)
<html:span class="EnSpace"/>
The purposes of, process for, and restrictions on, the sale, sharing, or transfer of ALPR information to other persons.
</html:p>
<html:p>
(E)
<html:span class="EnSpace"/>
The title of the official custodian, or owner, of the ALPR system responsible for implementing this section.
</html:p>
<html:p>
(F)
<html:span class="EnSpace"/>
A description of the reasonable measures that will be used to ensure the accuracy of ALPR information and correct data errors.
</html:p>
<html:p>
(G)
<html:span class="EnSpace"/>
The length of time ALPR information will be retained, and the process the ALPR operator will utilize to determine if and when to destroy retained ALPR information.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:Fragment>
</ns0:BillSection>
<ns0:BillSection id="id_4F9AED0B-4635-49D2-A9CF-5AF576A12B18">
<ns0:Num>SEC. 4.</ns0:Num>
<ns0:ActionLine action="IS_AMENDED" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2Fcaml%3ALawHeading%5B%40type%3D'DIVISION'%20and%20caml%3ANum%3D'3.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'PART'%20and%20caml%3ANum%3D'4.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'TITLE'%20and%20caml%3ANum%3D'1.81.23.'%5D%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'1798.90.52.'%5D)" ns3:label="fractionType: LAW_SECTION" ns3:type="locator">
Section 1798.90.52 of the
<ns0:DocName>Civil Code</ns0:DocName>
is amended to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawSection id="id_5F78BC11-829D-4CC8-A864-3A24E0306ACB">
<ns0:Num>1798.90.52.</ns0:Num>
<ns0:LawSectionVersion id="id_543257D7-B4D3-4868-8596-E34E762E7264">
<ns0:Content>
<html:p>If an ALPR operator accesses or provides access to ALPR information, the ALPR operator shall do both of the following:</html:p>
<html:p>
(a)
<html:span class="EnSpace"/>
Maintain a record of that access. At a minimum, the record shall include all of the following:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
The date and time the information is accessed.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
The license plate number or other data elements used to query the ALPR system.
</html:p>
<html:p>
(3)
<html:span class="EnSpace"/>
The username of the person who accesses the information, and, as applicable, the organization or entity with whom the person is affiliated.
</html:p>
<html:p>
(4)
<html:span class="EnSpace"/>
(A)
<html:span class="EnSpace"/>
The case file number that justifies the search query. No queries shall be allowed without a log entry with a valid and current case file number from the agency conducting the query.
</html:p>
<html:p>
(B)
<html:span class="EnSpace"/>
Notwithstanding subparagraph (A), in the event of a search query that is conducted as part of an inter-agency task force established by the Attorney General and overseen by the office’s Bureau of Investigation, in lieu of a case file number, the log entry shall include the name of the task force and the name of the bureau commander in charge of the task force.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
Require that ALPR information only be used for the authorized purposes described in the usage and privacy policy required by subdivision (b) of Section 1798.90.51.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:Fragment>
</ns0:BillSection>
<ns0:BillSection id="id_FD70D84B-BA05-4D0D-A2F6-7E3AF8BD3AFE">
<ns0:Num>SEC. 5.</ns0:Num>
<ns0:ActionLine action="IS_AMENDED" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2Fcaml%3ALawHeading%5B%40type%3D'DIVISION'%20and%20caml%3ANum%3D'3.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'PART'%20and%20caml%3ANum%3D'4.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'TITLE'%20and%20caml%3ANum%3D'1.81.23.'%5D%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'1798.90.53.'%5D)" ns3:label="fractionType: LAW_SECTION" ns3:type="locator">
Section 1798.90.53 of the
<ns0:DocName>Civil Code</ns0:DocName>
is amended to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawSection id="id_16005629-24D9-4143-A981-AC33BA910263">
<ns0:Num>1798.90.53.</ns0:Num>
<ns0:LawSectionVersion id="id_2EED8A3A-9FD0-41A7-88D3-94B20D12F04D">
<ns0:Content>
<html:p>An ALPR end-user shall do both of the following:</html:p>
<html:p>
(a)
<html:span class="EnSpace"/>
Maintain reasonable security procedures and practices, including operational, administrative, technical, and physical safeguards, to protect ALPR information from unauthorized access, destruction, use, modification, or disclosure, including the following:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
Safeguards for managing which employees can see the data from their systems, including requiring supervisory approval, robust authentication protocols for establishing an account to access an ALPR system, and tracking searches of ALPR information made by employees.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
Requiring data security training and data privacy training for all employees that access ALPR information.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
(1)
<html:span class="EnSpace"/>
Implement a usage and privacy policy, under the supervision of the Department of Justice according to subdivision (c) of Section 1798.90.54, if applicable, in order to ensure that the access, use, sharing, and dissemination of ALPR information is consistent with respect for individuals’ privacy and civil liberties. The usage and privacy policy shall be available to the public in writing, and, if the ALPR end-user has an internet website, the usage and privacy policy shall be posted conspicuously on that internet website.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
The usage and privacy policy shall, at a minimum, include all of the following:
</html:p>
<html:p>
(A)
<html:span class="EnSpace"/>
The authorized purposes for accessing and using ALPR information.
</html:p>
<html:p>
(B)
<html:span class="EnSpace"/>
A description of the job title or other designation of the employees and independent contractors who are authorized to access and use ALPR information, and for what purpose. The policy shall identify the training requirements necessary for those authorized employees and independent contractors.
</html:p>
<html:p>
(C)
<html:span class="EnSpace"/>
A description of how the ALPR system will be monitored to ensure the security of the information accessed or used, and compliance with all applicable privacy laws and a process for periodic system audits.
</html:p>
<html:p>
(D)
<html:span class="EnSpace"/>
The purposes of, process for, and restrictions on, the sale, sharing, or transfer
of ALPR information to other persons.
</html:p>
<html:p>
(E)
<html:span class="EnSpace"/>
The title of the official custodian, or owner, of the ALPR information responsible for implementing this section.
</html:p>
<html:p>
(F)
<html:span class="EnSpace"/>
A description of the reasonable measures that will be used to ensure the accuracy of ALPR information and correct data errors.
</html:p>
<html:p>
(G)
<html:span class="EnSpace"/>
The length of time ALPR information will be retained, and the process the ALPR end-user will utilize to determine if and when to destroy retained ALPR information.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:Fragment>
</ns0:BillSection>
<ns0:BillSection id="id_7C001D4B-B61C-423C-9544-36BFFA4B59F7">
<ns0:Num>SEC. 6.</ns0:Num>
<ns0:ActionLine action="IS_AMENDED" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2Fcaml%3ALawHeading%5B%40type%3D'DIVISION'%20and%20caml%3ANum%3D'3.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'PART'%20and%20caml%3ANum%3D'4.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'TITLE'%20and%20caml%3ANum%3D'1.81.23.'%5D%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'1798.90.54.'%5D)" ns3:label="fractionType: LAW_SECTION" ns3:type="locator">
Section 1798.90.54 of the
<ns0:DocName>Civil Code</ns0:DocName>
is amended to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawSection id="id_579E4C37-6B5A-4594-8829-17E3A616C714">
<ns0:Num>1798.90.54.</ns0:Num>
<ns0:LawSectionVersion id="id_4766CAB7-4F92-4F44-AE42-664301CFAFB6">
<ns0:Content>
<html:p>
(a)
<html:span class="EnSpace"/>
In addition to any other sanctions, penalties, or remedies provided by law, an individual who has been harmed by a violation of this title, including, but not limited to, unauthorized access or use of ALPR information or a breach of security of an ALPR system, may bring a civil action in any court of competent jurisdiction against a person who knowingly caused the harm.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
The court may award a combination of any one or more of the following:
</html:p>
<html:p>
(1)
<html:span class="EnSpace"/>
Actual damages, but not less than liquidated damages in the amount of two thousand five hundred dollars ($2,500).
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
Punitive damages upon proof of willful or reckless disregard of the law.
</html:p>
<html:p>
(3)
<html:span class="EnSpace"/>
Reasonable attorney’s fees and other litigation costs reasonably incurred.
</html:p>
<html:p>
(4)
<html:span class="EnSpace"/>
Other preliminary and equitable relief as the court determines to be appropriate.
</html:p>
<html:p>
(c)
<html:span class="EnSpace"/>
(1)
<html:span class="EnSpace"/>
The Department of Justice shall conduct annual random audits on a public agency that is an ALPR operator or ALPR end-user to determine whether they have implemented and are adhering to a usage and privacy policy in compliance with subdivision (b) of Section 1798.90.51 or subdivision (b) of Section 1798.90.53, as applicable.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
The implementation of this subdivision is contingent upon an appropriation of sufficient funds in the annual Budget Act for those purposes.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:Fragment>
</ns0:BillSection>
<ns0:BillSection id="id_D6873317-A7AA-47FD-AE9E-555065CD4F3D">
<ns0:Num>SEC. 7.</ns0:Num>
<ns0:ActionLine action="IS_AMENDED" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2Fcaml%3ALawHeading%5B%40type%3D'DIVISION'%20and%20caml%3ANum%3D'3.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'PART'%20and%20caml%3ANum%3D'4.'%5D%2Fcaml%3ALawHeading%5B%40type%3D'TITLE'%20and%20caml%3ANum%3D'1.81.23.'%5D%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'1798.90.55.'%5D)" ns3:label="fractionType: LAW_SECTION" ns3:type="locator">
Section 1798.90.55 of the
<ns0:DocName>Civil Code</ns0:DocName>
is amended to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawSection id="id_7C4F18C7-FC9A-4864-9AC9-0FBF44FC4E4F">
<ns0:Num>1798.90.55.</ns0:Num>
<ns0:LawSectionVersion id="id_7441F69B-2218-4974-A5D1-FCA6CF647B17">
<ns0:Content>
<html:p>Notwithstanding any other law or regulation:</html:p>
<html:p>
(a)
<html:span class="EnSpace"/>
A public agency that operates or intends to operate an ALPR system shall provide an opportunity for public comment at a regularly scheduled public meeting of the governing body of the public agency before implementing the program.
</html:p>
<html:p>
(b)
<html:span class="EnSpace"/>
(1)
<html:span class="EnSpace"/>
A public agency shall not sell, share, or transfer ALPR information, except to another public agency, and only as otherwise permitted by law. For purposes of this section, the provision of data hosting or towing services shall not be considered the
sale, sharing, or transferring of ALPR information.
</html:p>
<html:p>
(2)
<html:span class="EnSpace"/>
Beginning January 1, 2026, all new, updated, expansions of, or addendums of contractual agreements with ALPR vendors, manufacturers, or suppliers shall mandate that no default access is provided to any national ALPR database and that an agency’s collected scans are by default not accessible to any other agency. A law enforcement agency may manually implement agency to agency sharing with other California state law enforcement agencies only as authorized by Department of Justice General Order 2023-05.
</html:p>
<html:p>
(c)
<html:span class="EnSpace"/>
ALPR information may be used by a law enforcement agency only for purposes of locating vehicles or persons when either are reasonably suspected of being involved in the commission of a public
offense.
</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:Fragment>
</ns0:BillSection>
<ns0:BillSection id="id_A0BA5A65-65E6-41B7-8B8A-38DF60B3623A">
<ns0:Num>SEC. 8.</ns0:Num>
<ns0:ActionLine action="IS_ADDED" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2F%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'1798.90.56'%5D)" ns3:label="fractionType: LAW_SECTION" ns3:type="locator">
Section 1798.90.56 is added to the
<ns0:DocName>Civil Code</ns0:DocName>
,
<ns0:Positioning>immediately following Section 1798.90.55</ns0:Positioning>
, to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawSection id="id_77439B67-A82A-433F-9855-8E12064CCABE">
<ns0:Num>1798.90.56.</ns0:Num>
<ns0:LawSectionVersion id="id_B39F8ECD-372F-483D-B763-FA3CE1A2481E">
<ns0:Content>
<html:p>A public agency shall not retain ALPR information that does not match information on an authorized hot list for more than 60 days after the date of collection.</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:Fragment>
</ns0:BillSection>
<ns0:BillSection id="id_1D662C74-E14E-4CE6-8BA8-065F2222B846">
<ns0:Num>SEC. 9.</ns0:Num>
<ns0:ActionLine action="IS_ADDED" ns3:href="urn:caml:codes:CIV:caml#xpointer(%2Fcaml%3ALawDoc%2Fcaml%3ACode%2F%2Fcaml%3ALawSection%5Bcaml%3ANum%3D'1798.90.57'%5D)" ns3:label="fractionType: LAW_SECTION" ns3:type="locator">
Section 1798.90.57 is added to the
<ns0:DocName>Civil Code</ns0:DocName>
, to read:
</ns0:ActionLine>
<ns0:Fragment>
<ns0:LawSection id="id_20AE4487-E8F0-411A-AD01-CCEDF2A5B212">
<ns0:Num>1798.90.57.</ns0:Num>
<ns0:LawSectionVersion id="id_A2B1C9F2-C4B9-4138-AA5B-DFAC3E5A7C37">
<ns0:Content>
<html:p>As of January 1, 2026, a public agency shall, within 14 days, delete all ALPR information that has been held for more than 60 days and does not match information on an authorized hot list.</html:p>
</ns0:Content>
</ns0:LawSectionVersion>
</ns0:LawSection>
</ns0:Fragment>
</ns0:BillSection>
<ns0:BillSection id="id_33F9E8A9-C3AE-445C-98E9-04984CB33D5C">
<ns0:Num>SEC. 10.</ns0:Num>
<ns0:Content>
<html:p>The Legislature finds and declares that Section 3 of this act amending Section 1798.90.51 of the Civil Code, Section 4 of this act amending Section 1798.90.52 of the Civil Code, Section 5 of this act amending Section 1798.90.53 of the Civil Code, Section 7 of this act amending Section 1798.90.55 of the Civil Code, Section 8 of this act adding Section 1798.90.56 to the Civil Code, and Section 9 of this act adding Section 1798.90.57 to the Civil Code address a matter of statewide concern rather than a municipal affair as that term is used in Section 5 of Article XI of the California Constitution. Therefore, Sections 3, 4,
5, 7, 8, and 9 of this act apply to all cities, including charter cities.</html:p>
</ns0:Content>
</ns0:BillSection>
<ns0:BillSection id="id_71D40230-04CE-4DF0-9717-A301FE8CF28D">
<ns0:Num>SEC. 11.</ns0:Num>
<ns0:Content>
<html:p>If the Commission on State Mandates determines that this act contains costs mandated by the state, reimbursement to local agencies and school districts for those costs shall be made pursuant to Part 7 (commencing with Section 17500) of Division 4 of Title 2 of the Government Code.</html:p>
</ns0:Content>
</ns0:BillSection>
</ns0:Bill>
</ns0:MeasureDoc>
|