Chapter 16.0 AUTOMATED LICENSE PLATE READER (ALPR) POLICY16.1 Purpose To support authorized law enforcement purposes, the NCRIC utilizes Automated License Plate Reader (ALPR) technology to gather and analyze vehicle data, facilitating expedient identification and location of vehicles of legitimate interest to law enforcement.
This NCRIC Automated License Plate Reader Policy (ALPR Policy) defines a minimum set of binding guidelines to govern the use of Automated License Plate Reader Data (ALPR Data), in order to enable the collection and use of such data in a manner consistent with respect for individuals’ privacy and civil liberties and in accordance with all applicable law.
The NCRIC also completed a NCRIC ALPR Privacy Impact Assessment (PIA) to address in further detail common privacy and civil liberties concerns regarding Automated License Plate Reader technology. The current version of this document is available on the NCRIC web site at www.ncric.ca.gov.
To support the mission of the NCRIC, personnel with a need and right to know will utilize ALPR technology to:
• Locate stolen, wanted, and subject of investigation vehicles. • Locate and apprehend individuals subject to arrest warrants or otherwise lawfully sought by law enforcement. • Locate witnesses and victims of violent crime. • Locate missing children and elderly individuals, including responding to Amber and Silver Alerts. • Support local, state, federal, and tribal public safety departments in the identification of vehicles associated with targets of criminal investigations, including investigations of serial crimes. • Protect participants at special events. • Protect critical infrastructure sites.
In gathering, sharing, and storing information the NCRIC complies with all applicable laws, rules, and regulations, including but not limited to, to the extent applicable, the California Values Act (Government Code Section 7284 et seq.). The NCRIC will, consistent with Section 7284.8 (b) work to ensure that databases are governed in a manner that limits the availability of information therein to the fullest extent practicable and consistent with federal and state law, to anyone or any entity for the sole purpose of immigration enforcement.
Restrictions on Collection, Operation, and Utilization:
NCRIC ALPR devices may be used to collect data that is within public view but may not be used for the sole purpose of monitoring individual activities protected by the First Amendment to the United States Constitution.
ALPR operators may not contact occupants of stolen, wanted, or subject-of- investigation vehicles unless the ALPR operators are sworn law enforcement officers. ALPR operators must rely on their agency rules and regulations regarding equipment, protection, self-identification, and use of force when stopping vehicles or making contact.
ALPR operators must recognize that the data collected from the ALPR device, and the content of referenced hotlists, consists of data that may or may not be accurate, despite ongoing efforts to maximize the currency and accuracy of such data.
To the greatest extent possible, vehicle and subject information will be verified from separate Law enforcement information sources to confirm the vehicle or subject’s identity and justification for contact. Users of ALPR data must, to the fullest extent possible, visually confirm the plate characters generated by the ALPR readers correspond with the digital image of the license plate in question.
All users of NCRIC ALPR equipment or accessing NCRIC ALPR data are required to acknowledge that they have read and understood the NCRIC ALPR Policy prior to use of the ALPR system.
In no case shall the NCRIC ALPR system be used for any purpose other than a legitimate law enforcement or public safety purpose.
16.2 Training Only persons trained in the use of the NCRIC ALPR system, including its privacy and civil liberties protections, shall be allowed access to NCRIC ALPR Data. Training shall be updated as technological, legal, and other changes that affect the use of the NCRIC ALPR system occur. In no case shall a person utilize the NCRIC ALPR system if he/she has not completed training.
16.3 Audit Access to, and use of, ALPR data is logged for audit purposes. Audit reports will be structured in a format that is understandable and useful and will contain, at a minimum: • Identity of the law enforcement user and his/her associated agency; • Date and time of access; • Data queried (license plate searched for), regardless of any positive match; and • Case number associated with the investigative effort generating the ALPR data query.
Audit reports will be provided upon request to supervisory personnel at partner agencies.
In addition, no less frequently than every 12 months, the NCRIC will audit a sampling of ALPR system utilization from the prior 12-month period to verify proper use in accordance with the above authorized uses. Any discovered intentional misconduct will lead to further investigation, termination of system access, and notification of the user’s parent agency for appropriate recourse. In addition, the auditing data will be used to identify systemic issues, inadvertent misuse, and requirements for policy changes, training enhancements, or additional oversight mechanisms.
These ALPR audits shall be conducted by a senior NCRIC official other than the person assigned to manage the NCRIC ALPR function. Audit results shall then be reported to the executive director of the NCRIC.
16.4 Data Quality and Accuracy The NCRIC will take reasonable measures to ensure the accuracy of ALPR Data including maintenance of its ALPR devices.
Users of ALPR Data must acknowledge the possibility of inaccurate recognition of the license plate characters by the technology, also known as a “misread”, and should visually confirm the interpreted characters against the original imagery.
The NCRIC does not create hotlists as a normal course of business, but may use hotlists from other agencies, and may share those hotlists with other agencies as well. The NCRIC will make reasonable effort to ensure the contents of the hotlist are accurate and current. However, users of hotlists must acknowledge the possibility of hotlist inaccuracy, such as when a stolen vehicle is recovered but the recovery is not reported to law enforcement.
Users of ALPR data must confirm justification for any enforcement action from an additional source outside the ALPR system.
The NCRIC acknowledges that ALPR units may inadvertently capture information contrary to the collection guidelines set forth in this policy. Appropriate remediation will be taken such as repair of equipment, position and alignment of cameras, or personnel training. 16.5 Retention of ALPR Data The NCRIC supports a maximum retention period of 365 days for ALPR data. However, other factors may supersede this, resulting in a shorter retention period, such as the laws or regulations imposed by a particular city, or the technology vendor providing the data and hosting. In a conflict, the shortest retention period prevails.
As of the current version of this policy, the NCRIC’s chosen ALPR technology vendor imposes a 30 day maximum retention period.
Any ALPR records found to be pertinent to an active investigation may be exported out of the ALPR system, prior to expiration, and are then subject to the retention rules of the associated investigation.
16.6 Custodian of Records and Records Requests Each agency sharing data retains control and ownership as the official custodian of its records and must independently verify all external information obtained via NCRIC Information Systems. To the extent permitted by law, requests for information under the California Public Records Act or Freedom of Information Act or similar applicable laws will be directed back to the owner of the requested data.
16.7 System Management and Accountability The NCRIC shall assign a senior officer who will have responsibility, and be accountable, for managing the ALPR Data collected and ensuring that the privacy and civil liberties protection and other provisions of this ALPR Policy are carried out. This individual shall also be responsible for managing a process for maintaining the most current and accurate hotlists available from NCRIC law enforcement sources. This individual shall also have the responsibility for the security of the hotlist information and any ALPR Data which is maintained by the NCRIC. It is the personal responsibility of all users with access to ALPR Data to take reasonable measures to protect the privacy and civil liberties of individuals, as well as the security and confidentiality of ALPR Data. 16.8 Sharing and Collaboration The NCRIC Area of Responsibility is a highly interconnected collection of both large cities and smaller towns, where subject vehicles may rapidly pass through numerous discrete law enforcement jurisdictions. In following the NCRIC mission of facilitating multi-jurisdiction collaboration, the NCRIC actively supports multi-agency sharing, integration, and access of ALPR data, within the state of California.
Receipt of External Information
NCRIC may receive or have access to ALPR data from ALPR devices it does not own or control. This includes shared information from other law enforcement agencies, as well as non-law-enforcement entities parking, tolling, private security, or other sources. However, the NCRIC will not share any ALPR data to any organization other than California state or local law enforcement.
The originating agency retains control and ownership as the official custodian of its records.
It is the responsibility of the originating source to follow all applicable laws with respect to the proper collection, creation, storage, security, and destruction of its records.
Sharing and Dissemination of ALPR Data
In following all applicable laws, including California Senate Bill 34, California Senate Bill 54, and recent guidance from the California Attorney General, NCRIC may only share, disseminate, or provide access to ALPR information to California state or local law enforcement agencies.
The NCRIC will not share, disseminate, or sell any law enforcement data to law enforcement agencies outside California, federal law enforcement, any private entities or individuals, or any organization whatsoever for purposes related to immigration enforcement.
These limitations are equally applicable to ALPR data from NCRIC’s ALPR devices as well as ALPR data from other sources that have elected to share their information with the NCRIC.
The NCRIC assumes no responsibility or liability for the acts or omissions of other agencies. 16.10 Policy Revisions The ALPR policy will be reviewed annually, and updated as necessary, or more frequently based on changes in data sources, technology, data use and/or sharing agreements, and other relevant considerations.
Revised 9/17/24