Existing law makes it a crime to manufacture, assemble, sell, advertise for sale, possess, transport, import, or furnish to another a device that is primarily or exclusively designed or intended for eavesdropping upon the communication of another, or any device that is primarily or exclusively designed or intended for the unauthorized interception of reception of communications between a cellular radio telephone, as defined, and a landline telephone or other cellular radio telephone. Existing law additionally makes it a crime to purchase, sell, offer to purchase or sell, or conspire to purchase or sell, any telephone calling pattern record or list, without the written consent of the subscriber, or to procure, obtain, attempt to obtain, or conspire to obtain, any calling pattern record or list through fraud or deceit. Existing law contains certain exemptions from these crimes for law enforcement agencies.

This bill would require every local agency that operates cellular communications interception technology, as defined, to maintain reasonable operational, administrative, technical, and physical safeguards to protect information gathered through use of the technology from unauthorized access, destruction, use, modification, or disclosure and implement a usage and privacy policy, as specified, to ensure that the collection, use, maintenance, sharing, and dissemination of information gathered through use of the technology complies with applicable law and is consistent with respect for an individual’s privacy and civil liberties. The bill would, except as provided, prohibit a local agency from acquiring cellular communications interception technology unless that acquisition is approved by a resolution or ordinance adopted by its legislative body at a regularly scheduled public meeting of the legislative body held pursuant to a specified open meetings law. The bill would require that the resolution or ordinance set forth the policies of the local agency. The bill would require that the local agency make the usage and privacy policy available in writing to the public and if the local agency maintains an Internet Web site, to conspicuously post the usage and privacy policies on that site. The bill would, in addition to any other sanctions, penalties, or remedies provided by law, authorize an individual who has been harmed by a violation of these provisions to bring a civil action in any court of competent jurisdiction against a person who knowingly caused that violation.