AI Frontier Institute

Automated license plate recognition systems.

View primary source →

California Senate Bill 274, the Automated License Plate Recognition (ALPR) Data Accountability Act, amends Civil Code Sections 1798.90.5 through 1798.90.55 and adds Sections 1798.90.56 and 1798.90.57 to strengthen privacy and security rules governing automated license plate recognition systems. Key provisions include: (1) Narrowing the definitions of 'ALPR operator,' 'ALPR end-user,' and 'public agency' to exclude transportation agencies, public transit operators, local departments of transportation or public works, and airport or airport operators acting within specified limited functions (Section 1798.90.5). (2) Requiring ALPR operators and end-users to implement enhanced security safeguards, including supervisory approval, robust authentication protocols, employee tracking of searches, and mandatory data security and data privacy training for all employees accessing ALPR information (Sections 1798.90.51 and 1798.90.53). (3) Requiring usage and privacy policies to identify not just who is authorized to access ALPR information but for what purpose (Sections 1798.90.51 and 1798.90.53). (4) Replacing the general 'purpose' log requirement with a mandate that every search query be logged with a valid and current case file number, or for inter-agency task forces established by the Attorney General, the task force name and bureau commander's name; no queries are allowed without such a log entry (Section 1798.90.52). (5) Beginning January 1, 2026, requiring all new, updated, expanded, or amended contracts with ALPR vendors, manufacturers, or suppliers to mandate no default access to any national ALPR database and that an agency's collected scans are by default inaccessible to other agencies; agency-to-agency sharing among California state law enforcement agencies is allowed only as authorized by Department of Justice General Order 2023-05 (Section 1798.90.55). (6) Restricting law enforcement use of ALPR information solely to locating vehicles or persons reasonably suspected of involvement in a public offense (Section 1798.90.55). (7) Prohibiting public agencies from retaining ALPR information not matching an authorized hot list for more than 60 days after collection (Section 1798.90.56). (8) Requiring that, as of January 1, 2026, public agencies delete within 14 days all ALPR information held more than 60 days that does not match an authorized hot list (Section 1798.90.57). (9) Authorizing the Department of Justice to conduct annual random audits of public agencies that are ALPR operators or end-users, contingent on a sufficient appropriation (Section 1798.90.54). The bill applies to all cities, including charter cities, as a matter of statewide concern, and subjects local agencies to state-mandate reimbursement procedures if costs are mandated.

← Back to the tracker