Bill Text


Bill PDF |Add To My Favorites | print page

SB-21 Law enforcement agencies: surveillance: policies.(2017-2018)

SHARE THIS: share this bill in Facebook share this bill in Twitter
Date Published: 08/21/2017 04:00 AM
SB21:v90#DOCUMENT

Amended  IN  Assembly  August 21, 2017
Amended  IN  Assembly  July 13, 2017
Amended  IN  Assembly  July 03, 2017
Amended  IN  Senate  May 26, 2017
Amended  IN  Senate  May 03, 2017
Amended  IN  Senate  April 17, 2017
Amended  IN  Senate  March 23, 2017
Amended  IN  Senate  March 14, 2017
Amended  IN  Senate  March 07, 2017

CALIFORNIA LEGISLATURE— 2017–2018 REGULAR SESSION

Senate Bill
No. 21

Introduced by Senator Hill
(Coauthor: Senator Bradford)

December 05, 2016

An act to add Chapter 15 (commencing with Section 54999.8) to Part 1 of Division 2 of Title 5 of the Government Code, relating to law enforcement agencies.


LEGISLATIVE COUNSEL'S DIGEST


SB 21, as amended, Hill. Law enforcement agencies: surveillance: policies.
Under existing law, a city or county is empowered to perform duties including providing for public safety and law enforcement. A city or county is authorized, either directly or indirectly, to prescribe policies and regulations for law enforcement agencies under its jurisdiction.
This bill would, beginning July 1, 2018, require each law enforcement agency, as defined, to submit to its governing body at a regularly scheduled hearing, open to the public, a proposed Surveillance Use Policy for the use of each type of surveillance technology and the information collected, as specified. The bill would require the law enforcement agency to cease using the surveillance technology within 30 days if the proposed plan is not adopted. The bill would require the law enforcement agency to submit an amendment to the surveillance plan, pursuant to the same open meeting requirements, for each new type of surveillance technology sought to be used. The bill would require the policy and any amendments to be posted on the agency’s Internet Web site. The bill would also require the agency to make specified reports, at approved intervals, concerning the use of surveillance technology, and to make those reports available on the agency’s Internet Web site. The bill would prohibit a law enforcement agency from selling, sharing, or transferring information gathered by surveillance technology, except to another law enforcement agency, as permitted by law and the terms of the Surveillance Use Policy. The bill would provide that any person could bring an action for injunctive relief to prevent a violation of these provisions and, if successful, could recover reasonable attorney’s fees and costs. The bill would require an agency to discipline an employee who knowingly or intentionally uses surveillance technology in violation of these provisions, as specified. The bill would authorize an agency to temporarily use surveillance technology during exigent circumstances, as specified, without meeting the requirements of these provisions, provided that, among other things, the agency submits a specified report to its governing body within 45 days of the end of the exigent circumstances. circumstances, except as specified.
The bill would establish separate procedures for a sheriff’s department, department or a district attorney, the Department of the California Highway Patrol, and the Department of Justice attorney to establish their own Surveillance Use Policies, instead of submitting them through their governing body. The procedures would include holding a noticed public hearing on the proposed policy, posting the policy on the department’s Internet Web site, amending the policy to include new types of surveillance technology, and publishing a biennial report regarding the department’s use of surveillance technology, as specified.
The bill would also establish procedures for the Department of the California Highway Patrol and the Department of Justice to establish their own Surveillance Use Policies. The bill would, among other things, require that these agencies ensure that the collection, use, maintenance, sharing, and dissemination of information or data collected with surveillance technology is consistent with respect for individual privacy and civil liberties, and that the policy be publicly available on the agency’s Internet Web site. The bill would also require that if these agencies intend to acquire surveillance technology, they provide 90 days advance notice on the agency’s Internet Web site, as specified.
The bill would make legislative findings in support of these provisions.
Because this bill would impose additional requirements on local public agencies, it would impose a state-mandated local program.
The California Constitution requires local agencies, for the purpose of ensuring public access to the meetings of public bodies and the writings of public officials and agencies, to comply with a statutory enactment that amends or enacts laws relating to public records or open meetings and contains findings demonstrating that the enactment furthers the constitutional requirements relating to this purpose.
This bill would make legislative findings to that effect.
The California Constitution requires the state to reimburse local agencies and school districts for certain costs mandated by the state. Statutory provisions establish procedures for making that reimbursement.
This bill would provide that, with regard to certain mandates, no reimbursement is required by this act for a specified reason.
With regard to any other mandates, this bill would provide that, if the Commission on State Mandates determines that the bill contains costs so mandated by the state, reimbursement for those costs shall be made pursuant to the statutory provisions noted above.
Vote: MAJORITY   Appropriation: NO   Fiscal Committee: YES   Local Program: YES  

The people of the State of California do enact as follows:


SECTION 1.

 The Legislature finds and declares all of the following:
(a) While law enforcement agencies increasingly rely on surveillance technologies because those technologies may enhance community safety and aid in the investigation of crimes, those technologies are often used without any written rules or civilian oversight, and the ability of surveillance technology to enhance public safety should be balanced with reasonable safeguards for residents’ civil liberties and privacy.
(b) Promoting a safer community through the use of surveillance technology while preserving the protection of civil liberties and privacy are not mutually exclusive goals, and policymakers should be empowered to make informed decisions about what kind of surveillance technologies should be used in their community.
(c) Decisions about whether to use surveillance technology for data collection and how to use and store the information collected should not be made by the agencies that would operate the technology, but by the elected bodies that are directly accountable to the residents in their communities who should also have opportunities to review the decision of whether or not to use surveillance technologies.

SEC. 2.

 Chapter 15 (commencing with Section 54999.8) is added to Part 1 of Division 2 of Title 5 of the Government Code, to read:
CHAPTER  15. Surveillance Policies for Law Enforcement

54999.8.
 The following definitions apply for purposes of this chapter:
(a) “Exigent circumstances” means a law enforcement agency’s good faith belief that an emergency involving danger of death or serious physical injury to any person requires use of a surveillance technology or the information it provides.
(b) “Governing body” means the elected body that oversees the law enforcement agency or an appointed overseeing body if there is no elected body that provides direct oversight of the law enforcement agency.
(c) “Law enforcement agency” means any police department, sheriff’s department, district attorney, county probation department, transit agency police department, school district police department, the police department of any campus of the University of California, the California State University, or community college, the Department of the California Highway Patrol, and the Department of Justice.
(d) (1) “Surveillance technology” means any electronic device or system with the capacity to monitor and collect audio, visual, locational, thermal, or similar information on any individual or group. This includes, but is not limited to, drones with cameras or monitoring capabilities, automated license plate recognition system, systems, closed-circuit cameras/televisions, International Mobile Subscriber Identity (IMSI) trackers, global positioning system (GPS) technology, software designed to monitor social media services or forecast criminal activity or criminality, radio frequency identification (RFID) technology, body-worn cameras, biometric identification technology, hardware or software, and facial recognition technology. hardware or software.
(2) “Surveillance technology” does not include standard public agency computers and software, hardware and software in widespread public use and not used by the law enforcement agency for any surveillance or surveillance-related functions, such as televisions, computers, printers, parking ticket devices, case management databases, medical equipment used to diagnose, treat, or prevent disease or injury, fingerprint scanners, ignition interlock devices, cellular or standard telephones, and two-way radios, or other similar electronic devices.

54999.85.
 (a) (1) Except as provided in paragraph (4), on or before July 1, 2018, a law enforcement agency that uses, or accesses information from, surveillance technology shall submit to its governing body a Surveillance Use Policy to ensure that the collection, use, maintenance, sharing, and dissemination of information or data collected with surveillance technology is consistent with respect for individuals’ privacy and civil liberties. The policy shall be in writing and made publicly available on the agency’s Internet Web site prior to the public hearing and after adoption.
(2) Except as provided in paragraph (4), the governing body, at a regularly scheduled hearing pursuant to the Ralph M. Brown Act (Chapter 9 (commencing with Section 54950) of Part 1 of Division 2 of Title 5 of the Government Code), shall consider the policy for adoption by resolution or ordinance on the regular, nonconsent calendar and shall provide an opportunity for public comment before adopting the resolution or ordinance.
(3) Except as provided in paragraph (4), if a submitted Surveillance Use Policy is not adopted by resolution or ordinance by the governing body, the law enforcement agency shall cease use of surveillance technologies within 30 days of the hearing and until the time that a Surveillance Use Policy is adopted.
(4) (A) On or before July 1, 2018, a sheriff’s department, district attorney, the Department of Justice, and the Department of the California Highway Patrol department or a district attorney that uses or accesses information from a surveillance technology shall hold a properly noticed public hearing and provide an opportunity for public comment before adopting a Surveillance Use Policy, which shall ensure that the collection, use, maintenance, sharing, and dissemination of information or data collected with surveillance technology is consistent with respect for individuals’ individual privacy and civil liberties. The policy shall be in writing and shall be made publicly available on the agency’s Internet Web site prior to the public hearing and after adoption.
(B) On or before July 1, 2018, if the Department of Justice or the Department of the California Highway Patrol use or access information from a surveillance technology, the agency shall adopt a Surveillance Use Policy, which shall ensure that the collection, use, maintenance, sharing, and dissemination of information or data collected with surveillance technology is consistent with respect for individual privacy and civil liberties. The policy shall be in writing and shall be made publicly available on the agency’s Internet Web site. Nothing in this section shall be construed to limit or repeal any obligation of the Department of Justice or the Department of the California Highway Patrol to comply with any requirement found in any other law.
(b) The policy shall pertain to any surveillance technologies already in use or relied upon for information by the law enforcement agency and shall include, in separate sections specific to each unique type of surveillance technology, a description of each surveillance technology used or relied upon for information by the law enforcement agency. Each section covering a separate technology shall, at a minimum include the following:
(1) Authorized purposes for using the surveillance technology.
(2) Types of data that can be and is collected by the surveillance technology.
(3) A description of the job title or other designation of employees and independent contractors who are authorized to use the surveillance technology or to access data collected by the surveillance technology. The policy shall identify and require training for those authorized employees and independent contractors.
(4) Title of the official custodian, or owner, of the surveillance technology responsible for implementing this section.
(5) A description of how the surveillance technology will be monitored to ensure the security of the information and compliance with applicable privacy laws.
(6) The length of time information gathered by the surveillance technology will be retained, and a process to determine if and when to destroy retained information.
(7) Purposes of, process for, and restrictions on the sale, sharing, or transfer of information to other persons and whether, if so, how the collected information can be accessed by members of the public, including criminal defendants.
(8) A process to maintain a record of access of the surveillance technology or information collected by the surveillance technology. At a minimum, the record shall include all of the following:
(A) The date and time the technology is used or the information is accessed.
(B) The data elements the employee used to query the information.
(C) The username of the employee who uses the technology or accesses the information, and, as applicable, the organization or entity with whom the person is affiliated.
(D) The purpose for accessing the information or using the technology.
(9) The existence of a memorandum of understanding or other agreement with another local agency or any other party, whether or not formalized, for the shared use of the surveillance technology or the sharing of the information collected through its use, including the identity of the parties.
(c) (1) Except as provided in paragraph (4), after July 1, 2018, if a law enforcement agency intends to acquire a new type of surveillance technology after the adoption of the policy required by subdivision (a), the agency shall submit an amendment to the policy to include the new type of technology as a new section of the policy and submit the amendment to its governing body for approval consistent with subdivision (a).
(2) Except as provided in paragraph (4) and Section 54999.95, the amendment shall be submitted prior to requesting funds for acquiring, using, or accessing information from the technology and shall be submitted to the governing body at a properly noticed public meeting on the regular, nonconsent calendar and the governing body shall provide an opportunity for public comment before adopting the amendment.
(3) Except as provided in paragraph (4), the amendment shall be in writing and made publicly available on the agency’s Internet Web site prior to the public hearing and after adoption. The governing body has 30 days to consider an amendment. If a submitted amendment is not adopted by the governing body, the law enforcement agency shall not request funds for, acquire, use, or access information from the new surveillance technology.
(4) (A) (i) After July 1, 2018, if a sheriff’s department, district attorney, the Department of Justice, or the Department of the California Highway Patrol intends to acquire a new type of surveillance technology after the adoption of the policy required by subdivision (a), that agency shall draft an amendment to the policy to include the new type of technology as a new section of the policy. That agency shall
(ii) A sheriff’s department or a district attorney shall hold a properly noticed public hearing and provide an opportunity for public comment before adopting such an amendment. The amendment shall be in writing and shall be made publicly available on the agency’s Internet Web site prior to the public hearing and after adoption.
(iii) The Department of Justice or the Department of the California Highway Patrol shall post the amendment in writing and make it publicly available on the agency’s Internet Web site.
(B) If a sheriff’s department, department or a district attorney, the Department of Justice, or the Department of the California Highway Patrol attorney is not in possession of surveillance technology on or before July 1, 2018, and intends to acquire surveillance technology after that date, that agency shall hold a properly noticed public hearing and provide an opportunity for public comment before adopting a Surveillance Use Policy, which shall ensure that the collection, use, maintenance, sharing, and dissemination of information or data collected with surveillance technology is consistent with respect for individuals’ privacy and civil liberties. The policy shall be in writing and shall be made publicly available on the agency’s Internet Web site prior to the public hearing and after adoption.
(C) (i) If either the Department of Justice or the Department of the California Highway Patrol is not in possession of surveillance technology on or before July 1, 2018, and intends to acquire surveillance technology after that date, that agency shall prominently post on the agency’s Internet Website a public notice of its intention to commence the process of acquiring surveillance technology not less than 90 days before taking any such steps. The notice shall include a description of information describing the surveillance technology and how it works, including product descriptions from manufacturers, information on the proposed purpose for the surveillance technology, and type of data collected.
(ii) If either the Department of Justice or the Department of the California Highway Patrol is not in possession of surveillance technology on or before July 1, 2018, and acquires it after that date, that agency shall adopt a Surveillance Use Policy, which shall ensure that the collection, use, maintenance, sharing, and dissemination of information or data collected with surveillance technology is consistent with respect for individual privacy and civil liberties. The policy shall be in writing and shall be made publicly available on the agency’s Internet Web site. Nothing in this section shall be construed to limit or repeal any obligation of the Department of Justice or the Department of the California Highway Patrol to comply with any requirement found in any other law.
(d) If, before July 1, 2018, a law enforcement agency has implemented the requirements for an automated license plate recognition system, pursuant to Title 1.81.23 (commencing with Section 1798.90.5) of Part 4 of Division 3 of the Civil Code or for cellular communications interception technology pursuant to Article 11 (commencing with Section 53166) of Chapter 1, the law enforcement agency shall include the required information as part of the Surveillance Use Policy required by subdivision (a).
(e) If a law enforcement agency is not in possession of surveillance technology on or before July 1, 2018, and intends to acquire surveillance technology after that date, the law enforcement agency shall submit a Surveillance Use Policy to its governing body pursuant to subdivision (a) for consideration. Nothing in this section shall be construed to limit the authority of a governing body to exercise its budgetary authority in any way if a law enforcement agency makes a budget request to acquire surveillance technology.
(f) (1) Except as provided in paragraph (2), at a time interval agreed to by the law enforcement agency and the governing body, but not less often than every two years, a law enforcement agency that uses surveillance technologies and which has an approved Surveillance Use Policy shall submit to its governing body a written Surveillance Technology Use Report. The report shall be made publicly available on the agency’s Internet Web site, and shall, at a minimum, include the following:
(A) The acquisition costs for each surveillance technology, as well as the annual operating cost, including personnel costs.
(B) A description of how many The total number of times each type of technology was used in the preceding year and how many the total number of times each type of technology helped apprehend suspects or close a criminal case.

(C)A description of the type of data collected by each surveillance technology, including whether each technology captured images, sound, or other data.

(D)If

(C) The total number of times the surveillance technology was borrowed from or lent to another agency, the identity of that agency, the number of times and the purposes for which the surveillance technology was shared, including any exigent circumstances.

(E)

(D) The total number and classification of the agency employees trained and authorized to use each type of surveillance technology, along with a description of the training provided to agency employees on each type of surveillance technology and how often the training was provided. technology.

(F)Disclosure of whether

(E)  The total number of times any surveillance technology was used in a manner out of compliance with the agency’s Surveillance Use Policy, whether data collected through the use of surveillance technology was inappropriately disclosed, released, or in any other way revealed for a nonapproved reason, and the steps the agency took to correct the error.
(2) Not less than every two years, a sheriff’s department, district attorney, the Department of Justice, and the Department of the California Highway Patrol shall each publish and post on their Internet Web sites, a written Surveillance Technology Use Report containing the information required by subparagraphs (A) through (F).
(g) Nothing in this section shall be construed to do either of the following:
(1) Limit the authority of a governing body to exercise its authority in any way if a law enforcement agency makes a request to acquire surveillance technology.
(2) Prohibit a governing body from holding any public meeting required by this section jointly with another law enforcement agency or governing body.
(h) A governing body may reevaluate any existing Surveillance Use Policy it has previously approved at a properly noticed public meeting on their regular nonconsent calendar.
(i) A law enforcement agency shall not sell, share, or transfer information gathered by surveillance technology, except to another law enforcement agency, and only as permitted by law and as allowed by an approved Surveillance Use Policy. For purposes of this subdivision, the provision of data hosting shall not be considered to be the sale, sharing, or transferring of surveillance technology information.

54999.9.
 (a) In addition to any other sanctions, penalties, or remedies provided by law, any person may seek injunctive relief to prevent a violation under this chapter. The court may award reasonable attorney’s fees and other litigation costs reasonably incurred by a prevailing plaintiff.
(b) A law enforcement agency shall take appropriate disciplinary action, consistent with the agency’s existing disciplinary procedures, against an employee who knowingly or intentionally uses surveillance technology in a manner that is not consistent with this chapter or with the agency’s approved Surveillance Use Policy.

54999.95.
 (a) A law enforcement agency may temporarily acquire or temporarily use a surveillance technology in a manner not expressly allowed by a Surveillance Use Policy in exigent circumstances without following the provisions of Section 54999.85 before that acquisition or use unless that acquisition or use in exigent circumstances conflicts with, or is preempted by, other state or federal law.
(b) If a law enforcement agency acquires or uses a surveillance technology in exigent circumstances pursuant to subdivision (a), the agency shall:
(1) Use the surveillance technology to solely respond to the exigent circumstances.
(2) Cease using the surveillance technology when the exigent circumstances end.
(3) Only keep and maintain data related to the exigent circumstances and dispose of any data that is not related to the exigent circumstances.
(4) Report (A) For a law enforcement agency other than the Department of Justice, or the Department of the California Highway Patrol, report that acquisition or use to the governing body within 45 days following the end of the exigent circumstances.
(B) The Department of Justice or the Department of the California Highway Patrol shall publicly disclose that acquisition or use within 45 days following the end of the exigent circumstances in writing on the agency’s Internet Web site.
(c) Any technology temporarily acquired in exigent circumstances shall be returned within seven days following its acquisition, or when the exigent circumstances end, whichever is sooner, unless the technology is submitted to the governing body for approval pursuant to subdivisions (a) to (c), inclusive inclusive, of Section 54999.85, and is approved. If the agency is unable to comply with the seven-day timeline, the agency shall notify the governing body, who may grant an extension.

SEC. 3.

 The Legislature finds and declares that Section 2 of this act, which adds Chapter 15 (commencing with Section 54999.8) to Part 1 of Division 2 of Title 5 of the Government Code, furthers, within the meaning of paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the purposes of that constitutional section as it relates to the right of public access to the meetings of local public bodies or the writings of local public officials and local agencies. Pursuant to paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution, the Legislature makes the following findings:
By requiring law enforcement agencies to submit their proposed Surveillance Use Policy for consideration by their governing body at a public hearing, this act furthers the purposes of paragraph (7) of subdivision (b) of Section 3 of Article I of the California Constitution.
The Legislature also finds and declares that Section 2 of this act, which adds Chapter 15 (commencing with Section 54999.8) to Part 1 of Division 2 of Title 5 of the Government Code, furthers, within the meaning of Section 1 of Article I of the California Constitution, the purposes of that constitutional section as it relates to the inalienable and enforceable right of privacy held by all Californians.

SEC. 4.

 No reimbursement is required by this act pursuant to Section 6 of Article XIII B of the California Constitution for certain costs that may be incurred by a local agency or school district because, in that regard, this act creates a new crime or infraction, eliminates a crime or infraction, or changes the penalty for a crime or infraction, within the meaning of Section 17556 of the Government Code, or changes the definition of a crime within the meaning of Section 6 of Article XIII B of the California Constitution.
However, if the Commission on State Mandates determines that this act contains other costs mandated by the state, reimbursement to local agencies and school districts for those costs shall be made pursuant to Part 7 (commencing with Section 17500) of Division 4 of Title 2 of the Government Code.