54999.8.
The following definitions apply for purposes of this chapter:(a) “Exigent circumstances” means a law enforcement agency’s good faith belief that an emergency involving danger of death or serious physical injury to any person requires use of a surveillance technology or the information it provides.
(b) “Governing body” means the elected body that oversees the law enforcement agency or an appointed overseeing body if there is no elected body that provides direct oversight of the law enforcement agency.
(c) “Law enforcement agency” means any police department, sheriff’s department, district attorney, county probation department, transit agency police department, school district police department, the police department of any campus of the University of California, the California State University, or community college, the Department of the California Highway Patrol, and the Department of Justice.
(d) (1) “Surveillance technology” means any electronic device or system with the capacity to monitor and collect audio, visual, locational, thermal, or similar information on any individual or group. This includes, but is not limited to, drones with cameras or monitoring capabilities, automated license plate recognition systems, closed-circuit cameras/televisions, International Mobile Subscriber Identity (IMSI)
trackers, global positioning system (GPS) technology, software designed to monitor social media services or forecast criminal activity or criminality, radio frequency identification (RFID) technology, body-worn cameras, biometric identification hardware or software, and facial recognition hardware or software.
(2) “Surveillance technology” does not include standard public agency hardware and software in widespread public use and not used by the law enforcement agency for any surveillance or surveillance-related functions, such as televisions, computers, printers, parking ticket devices, case management databases, medical equipment used to diagnose, treat, or prevent disease or injury, fingerprint scanners, ignition interlock devices, cellular or standard telephones, and two-way radios, or other similar electronic devices.
54999.85.
(a) (1) Except as provided in paragraph (4), on or before July 1, 2019, a law enforcement agency that uses, or accesses information from, surveillance technology shall submit to its governing body a Surveillance Use Policy to ensure that the collection, use, maintenance, sharing, and dissemination of information or data collected with surveillance technology is consistent with respect for individuals’ privacy and civil liberties. The policy shall be in writing and made publicly available on the agency’s Internet Web site prior to the public hearing and after adoption.(2) Except as provided in paragraph (4), the governing body, at a regularly
scheduled hearing pursuant to the Ralph M. Brown Act (Chapter 9 (commencing with Section 54950) of Part 1 of Division 2 of Title 5 of the Government Code), shall consider the policy for adoption by resolution or ordinance on the regular, nonconsent calendar and shall provide an opportunity for public comment before adopting the resolution or ordinance.
(3) Except as provided in paragraph (4), if a submitted Surveillance Use Policy is not adopted by resolution or ordinance by the governing body, the law enforcement agency shall cease use of surveillance technologies within 30 days of the hearing and until the time that a Surveillance Use Policy is adopted.
(4) On or before July 1, 2019, if the Department of Justice or the Department of the California Highway Patrol use or access information
from a surveillance technology, the agency shall adopt a Surveillance Use Policy, which shall ensure that the collection, use, maintenance, sharing, and dissemination of information or data collected with surveillance technology is consistent with respect for individual privacy and civil liberties. The policy shall be in writing and shall be made publicly available on the agency’s Internet Web site. Nothing in this section shall be construed to
limit or repeal any obligation of the Department of Justice or the Department of the California Highway Patrol to comply with any requirement found in any other law.
(b) The policy shall pertain to any surveillance technologies already in use or relied upon for information by the law enforcement agency and shall include, in separate sections specific to each unique type of surveillance technology, a description of each surveillance technology used or relied upon for information by the law enforcement agency. Each section covering a separate technology shall, at a minimum include the following:
(1) Authorized purposes for using the surveillance technology.
(2) Types of data that can be and is collected by the
surveillance technology.
(3) A description of the job title or other designation of employees and independent contractors who are authorized to use the surveillance technology or to access data collected by the surveillance technology. The policy shall identify and require training for those authorized employees and independent contractors.
(4) Title of the official custodian, or owner, of the surveillance technology responsible for implementing this section.
(5) A description of how the surveillance technology will be monitored to ensure the security of the information and compliance with applicable privacy laws.
(6) The length of time information
gathered by the surveillance technology will be retained, and a process to determine if and when to destroy retained information.
(7) Purposes of, process for, and restrictions on the sale, sharing, or transfer of information to other persons and whether, if so, how the collected information can be accessed by members of the public, including criminal defendants.
(8) A process to maintain a record of access of the surveillance technology or information collected by the surveillance technology. At a minimum, the record shall include all of the following:
(A) The date and time the technology is used or the information is accessed.
(B) The data elements the
employee used to query the information.
(C) The username of the employee who uses the technology or accesses the information, and, as applicable, the organization or entity with whom the person is affiliated.
(D) The purpose for accessing the information or using the technology.
(9) The existence of a memorandum of understanding or other agreement with another local agency or any other party, whether or not formalized, for the shared use of the surveillance technology or the sharing of the information collected through its use, including the identity of the parties.
(c) (1) Except as provided in paragraph (4), after July 1, 2019, if a
law enforcement agency intends to acquire a new type of surveillance technology after the adoption of the policy required by subdivision (a), the agency shall submit an amendment to the policy to include the new type of technology as a new section of the policy and submit the amendment to its governing body for approval consistent with subdivision (a).
(2) Except as provided in paragraph (4) and Section 54999.95, the amendment shall be submitted prior to requesting funds for acquiring, using, or accessing information from the technology and shall be submitted to the governing body at a properly noticed public meeting on the regular, nonconsent calendar and the governing body shall provide an opportunity for public comment before adopting the amendment.
(3) Except as provided in
paragraph (4), the amendment shall be in writing and made publicly available on the agency’s Internet Web site prior to the public hearing and after adoption. The governing body has 30 days to consider an amendment. If a submitted amendment is not adopted by the governing body, the law enforcement agency shall not request funds for, acquire, use, or access information from the new surveillance technology.
(4) (A) After July 1, 2019, if the Department of Justice or the Department of the California Highway Patrol intends to acquire a new type of surveillance technology after the adoption of the policy required by subdivision (a), that agency shall draft an amendment to the policy to include the new type of technology as a new section of the policy. The agency shall post the amendment in writing and make it
publicly available on its Internet Web site.
(B) (i) If either the Department of Justice or the Department of the California Highway Patrol is not in possession of surveillance technology on or before July 1, 2019, and intends to acquire surveillance technology after that date, that agency shall prominently post on the agency’s Internet Website a public notice of its intention to commence the process of acquiring surveillance technology not less than 90 days before taking any such steps. The notice shall include a description of information describing the surveillance technology and how it works, including product descriptions from manufacturers, information on the proposed purpose for the surveillance technology, and type of data collected.
(ii) If either the
Department of Justice or the Department of the California Highway Patrol is not in possession of surveillance technology on or before July 1, 2019, and acquires it after that date, that agency shall adopt a Surveillance Use Policy, which shall ensure that the collection, use, maintenance, sharing, and dissemination of information or data collected with surveillance technology is consistent with respect for individual privacy and civil liberties. The policy shall be in writing and shall be made publicly available on the agency’s Internet Web site. Nothing in this section shall be construed to limit or repeal any obligation of the Department of Justice or the Department of the California Highway Patrol to comply with any requirement found in any other law.
(d) If, before July 1, 2019, a law enforcement agency has implemented the
requirements for an automated license plate recognition system, pursuant to Title 1.81.23 (commencing with Section 1798.90.5) of Part 4 of Division 3 of the Civil Code or for cellular communications interception technology pursuant to Article 11 (commencing with Section 53166) of Chapter 1, the law enforcement agency shall include the required information as part of the Surveillance Use Policy required by subdivision (a).
(e) If a law enforcement agency is not in possession of surveillance technology on or before July 1, 2019, and intends to acquire surveillance technology after that date, the law enforcement agency shall submit a Surveillance Use Policy to its governing body pursuant to subdivision (a) for consideration. Nothing in this section shall be construed to limit the authority of a governing body to exercise its budgetary authority
in any way if a law enforcement agency makes a budget request to acquire surveillance technology.
(f)(1)Except as provided in paragraph (2), at a time interval agreed to by the law enforcement agency and the governing body, but not less often than every two years, a law enforcement agency that uses surveillance technologies and which has an approved Surveillance Use Policy shall submit to its governing body a written Surveillance Technology Use Report. The report shall be made publicly available on the agency’s Internet Web site, and shall, at a minimum, include the following:
(A)The acquisition costs for each surveillance technology, as well as the annual operating cost, including personnel costs.
(B) The total number of times each type of technology was used in the preceding year and the total number of times each type of technology helped apprehend suspects or close a criminal case.
(C)The total number of times the surveillance technology was borrowed from or lent to another agency, the identity of that agency, and the purposes for which the surveillance technology was shared, including any exigent circumstances.
(D)The total number of the agency employees trained and authorized to use each type of surveillance technology.
(E) The total number of times any surveillance technology was used in a manner out of compliance with the agency’s Surveillance Use
Policy, whether data collected through the use of surveillance technology was inappropriately disclosed, released, or in any other way revealed for a nonapproved reason, and the steps the agency took to correct the error.
(2)Not less than every two years, the Department of Justice and the Department of the California Highway Patrol shall each publish and post on their Internet Web sites, a written Surveillance Technology Use Report containing the information required by subparagraphs (A) through (F).
(g)
(f) Nothing in this section shall be construed to do any of the following:
(1) Limit the authority of a governing body to exercise its authority in any way if a law enforcement agency makes a request to acquire surveillance technology.
(2) Prohibit a governing body from holding any public meeting required by this section jointly with another law enforcement agency or governing body.
(3) Limit the application of Section 25303.
(h)
(g) Nothing in this section shall be construed to prohibit a governing body, the Department of Justice, or the Department of the California Highway Patrol from adopting additional protocols as they relate to surveillance technology. A governing body may reevaluate any existing Surveillance Use Policy at a properly noticed public meeting on the regular, nonconsent calendar and revoke or request amendments to the policy.
(i)
(h) A law enforcement agency shall not sell, share, or transfer information gathered by surveillance technology, except to another law enforcement agency, and only
as permitted by law and as allowed by an approved Surveillance Use Policy. For purposes of this subdivision, the provision of data hosting shall not be considered to be the sale, sharing, or transferring of surveillance technology information.