Restrict License Plate Readers

Section 1. The general business law is amended by adding a new section 397-b to read as follows:

§ 397-b. Use of automatic license plate reader systems prohibited. As used in this section: 1. "Automatic license plate reader system" or "ALPR system" shall mean a system of one or more mobile or fixed high speed cameras used in combination with computer algorithms to convert images of license plates into computer-readable data.

2. It shall be unlawful for any business, individual, partnership, corporation, association, or state or local government non-law enforcement entity to use an automatic license plate reader system.

3. The provisions of this section shall not apply to an electronic toll collection system or associated transaction system or any component thereof which is operated by a public authority for the purpose of imposing and collecting tolls on a roadway within the state.

4. A violation of the provisions of this section shall constitute a violation, and upon conviction thereof shall be punishable by a term of imprisonment not to exceed fifteen days, or by a fine of not more than one thousand dollars, or by both such fine and imprisonment. Each unlawfully installed or maintained device shall constitute a separate and distinct violation.

§ 2. The executive law is amended by adding a new section 837-t to read as follows:

EXPLANATION--Matter in italics (underscored) is new; matter in brackets

[ ] is old law to be omitted.

LBD03226-01-9

S. 40 2

§ 837-t. Use of automatic license plate readers by law enforcement agencies. 1. The use of automatic license plate reader systems by state and local law enforcement agencies shall be governed by this section.

(a) "Automatic license plate reader system" or "ALPR system" shall mean a system of one or more mobile or fixed high speed cameras used in combination with computer algorithms to convert images of license plates into computer-readable data.

(b) "Captured plate data" shall mean the GPS coordinates, date and time, photograph, license plate number, and any other data captured by or derived from any ALPR system.

(c) "Secured area" shall mean an area, enclosed by clear boundaries, to which access is limited and entry is only obtainable through specific access-control points.

2. (a) A state or local law enforcement agency may use an automatic license plate reader for the immediate comparison of captured plate data held by the registry of motor vehicles, the department of criminal justice information services, the national crime information center, the FBI kidnappings and missing persons list, and the New York state AMBER alert plan for the purpose of identifying:

(i) outstanding parking or traffic violations;

(ii) a violation of vehicle registration requirements;

(iii) a vehicle in violation of inspection requirements;

(iv) a stolen vehicle or stolen license plate;

(v) a vehicle registered to an individual for whom there is an outstanding default or arrest warrant for felony charges; or

(vi) a vehicle associated with a missing person.

(b) Automatic license plate readers may also be used: (i) by parking enforcement entities for the regulation of public parking;

(ii) by state or local government agencies for the purpose of controlling access to secured areas; and

(iii) by the department of transportation or a public authority, for the purpose of electronic toll collection.

3. (a) Captured plate data obtained for the purposes described under this section shall not be used or shared for any other purpose and shall not be preserved for more than one hundred eighty days except pursuant to a preservation or disclosure request under this subdivision, or a warrant. Captured plate data may be maintained within the custody and control of a law enforcement agency for a longer time period if the data is retained or stored as part of an ongoing investigation, and in such case the data shall be destroyed at the conclusion of either (i) an investigation that does not result in any criminal charges being filed; or (ii) any criminal action undertaken in the matter involving the captured plate data.

(b) Upon the request of any law enforcement agency, an operator of an ALPR system shall take all necessary steps to immediately preserve captured plate data in its possession. A requesting agency must specify in a written sworn statement: (i) the particular camera or cameras for which captured plate data must be preserved or the particular license plate for which captured plate data must be preserved; and (ii) the date or dates and timeframes for which captured plate data must be preserved.

(c) A law enforcement agency may apply for a court order for disclosure of captured plate data which shall be issued by any court of competent jurisdiction if the agency offers specific and articulable facts showing that there are reasonable grounds to believe that the captured plate data is relevant and material to an ongoing criminal or missing persons investigation.

S. 40 3

(d) Captured plate data shall be destroyed by the operator of the ALPR system if the application for a disclosure order is denied or at the end of fourteen days, whichever is later.

4. Entities authorized to use ALPR systems under subdivision two of this section shall not sell, trade, or exchange captured plate data for any purpose.

5. An alert from an ALPR system used by a law enforcement agency does not constitute reasonable suspicion or probable cause to perform a traffic stop. If an ALPR system alerts on a plate, a law enforcement officer must visually confirm that the plate number and state of origin match the alert before taking law enforcement action.

6. Law enforcement agencies that use ALPR systems shall:

(a) Adopt a policy governing use of the system and conspicuously post the policy on the entity's web site;

(b) Adopt a privacy policy to ensure that captured plate data is not shared in violation of this section or any other law and conspicuously post the privacy policy on the agency's web site; and

(c) Report annually its automatic license plate reader practices and usage to the division, and conspicuously post the report on the entity's web site. The report shall include:

(i) the number of license plates scanned;

(ii) the number of preservation requests;

(iii) the number of disclosure orders;

(iv) any changes in policy that affect privacy concerns;

(v) the names of the lists against which captured plate data was checked, and for each list the number of confirmed matches;

(vi) the number of disclosure orders resulting in criminal charges, and the number of such charges resulting in conviction;

(vii) the total number of automatic license plate readers being operated by the agency;

(viii) the number of automatic license plate reader readings being retained;

(ix) the number of requests made for automatic license plate reader data, including (A) the number of requests that resulted in the release of information; (B) the number of out-of-state requests; (C) the number of federal requests; (D) the number of out-of-state requests that resulted in a release of information; and

(x) any data breaches or unauthorized uses of the automatic license plate reader database.

7. Any plate data captured or improperly maintained shall not be introduced by the state in any grand jury or criminal proceeding or in any civil or administrative proceeding brought by the state or any government office or official. The state shall disclose to the defense the existence and the contents of any such captured data. A criminal defendant shall be entitled to introduce evidence of captured data, however obtained and maintained, in his or her defense. An individual whose rights have been violated by the improper capture or maintenance of plate data may introduce evidence concerning that plate data in a civil action or may grant permission to another party in a civil proceeding to introduce such evidence.

8. (a) Any aggrieved person may institute a civil action to restrain any violation of this section. If, in any such action, a willful violation is found to have occurred, the violator shall not be entitled to claim any privilege absolute or qualified, and he or she shall, in addition to any liability for such actual damages as may be shown, be liable for exemplary damages of not less than one hundred and not more

S. 40 4

than one thousand dollars for each violation, together with costs and reasonable attorneys' fees and disbursements incurred by the person bringing the action.

(b) Any employee of a law enforcement agency authorized to utilize an ALPR system who violates the provisions of this section prohibiting the use, sale, dissemination or other distribution of license plate data for other than legitimate law enforcement purposes shall be guilty of a misdemeanor punishable by a sentence of imprisonment not exceeding one year or a fine not exceeding ten thousand dollars or by both such fine and imprisonment.

9. Captured plate data shall be considered personal data. Captured plate data may only be disclosed to, or with the prior written consent of, the person to whom the vehicle is registered; provided, however, that upon presentation to an operator of an ALPR system of a valid, current abuse prevention order protecting the driver of a vehicle jointly registered with or registered solely in the name of the individual against whom the order was issued, captured plate data may not be disclosed except pursuant to a disclosure order or as the result of a match.

§ 3. This act shall take effect immediately.