Automated license plate recognition systems.

Senator Cervantes' Automated License Plate Recognition (ALPR) Data Accountability Act establishes new data retention limits and security protocols for public agencies using automated license plate recognition systems in California. The legislation requires agencies to delete ALPR data within 60 days if it does not match entries on law enforcement hot lists.

The bill mandates enhanced security measures for both ALPR operators and end-users, including supervisory approval for data access, authentication protocols, and employee activity tracking. All personnel accessing ALPR information must complete data security and privacy training. Agencies must maintain detailed usage policies specifying authorized purposes, employee roles, monitoring procedures, and data sharing restrictions.

Under the new provisions, the Department of Justice will conduct annual random audits of public agencies to verify compliance with usage and privacy requirements. The law creates a civil remedy for individuals harmed by unauthorized access or security breaches, allowing them to seek actual damages of at least $2,500, punitive damages, and attorney fees. These requirements apply to all California cities, including charter cities, as the Legislature determined ALPR data protection constitutes a matter of statewide concern.