1.1A bill for an act1.2relating to data practices; classifying data related to automated license plate 1.3readers; requiring a log of use; requiring data to be destroyed in certain 1.4circumstances; requiring an inventory of surveillance technology;amending 1.5Minnesota Statutes 2012, section 13.82, by adding a subdivision; proposing 1.6coding for new law in Minnesota Statutes, chapter 13.1.7BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF MINNESOTA:1.8    Section 1. [13.026] INVENTORY OF SURVEILLANCE TECHNOLOGY.1.9    Subdivision 1.Inventory required.The responsible authority of a government 1.10entity shall prepare and update an inventory of surveillance technology maintained or 1.11used by the government entity. For purposes of this section, "surveillance technology" 1.12means technology that:1.13(1) can be used to track the location, personal characteristics, or activities of an 1.14individual or the property of an individual; or1.15(2) is a powered, aerial vehicle that does not carry a human operator; can fly 1.16autonomously or be piloted remotely; and can be expendable or recoverable.1.17    Subd. 2.Report.By January 15 of each year, a government entity shall submit 1.18a report to the legislature that includes an inventory of all surveillance technologies 1.19maintained or used by the government entity during the previous calendar year and any new 1.20surveillance technology that the government entity may maintain or use during the current 1.21calendar year. The report must be submitted to the chairs and ranking minority members 1.22of the policy committees of the legislature with jurisdiction over data practices issues.1.23    Sec. 2. Minnesota Statutes 2012, section 13.82, is amended by adding a subdivision to 1.24read:2.1    Subd. 31.Automated license plate reader.(a) As used in this subdivision, 2.2"automated license plate reader" means an electronic device mounted on a law 2.3enforcement vehicle or positioned in a stationary location that is capable of recording data 2.4on, or taking a photograph of, a vehicle or its license plate and comparing the collected 2.5data and photographs to existing law enforcement databases for investigative purposes.2.6(b) Data collected by an automated license plate reader are confidential data 2.7on individuals or protected nonpublic data if the data are or become active criminal 2.8investigative data.2.9(c) The following data collected by an automated license plate reader that are not 2.10classified under paragraph (b) are private data on individuals or nonpublic data:2.11(1) license plate numbers;2.12(2) date, time, and location data on vehicles; and2.13(3) pictures of license plates, vehicles, and areas surrounding the vehicles.2.14(d) Notwithstanding section 138.17, data collected by an automated license plate 2.15reader must be destroyed:2.16(1) 90 days from the time of collection, if the data are classified under paragraph (c); or2.17(2) upon request of a program participant under chapter 5B, at the time of collection 2.18or upon receipt of the request, whichever occurs later, unless the data are classified under 2.19paragraph (b).2.20Data on a request of a program participant under clause (2) are private data on individuals. 2.21If data collected by an automated license plate reader are shared with another law 2.22enforcement agency, the agency that receives the data must comply with the data 2.23destruction requirements of this paragraph.2.24(e) A law enforcement agency that installs or uses an automated license plate reader 2.25must maintain a log of its use, including:2.26(1) specific times of day that the reader actively collected data; 2.27(2) the aggregate number of vehicles or license plates on which data are collected 2.28for each period of active use; and2.29(3) for a reader at a stationary location, the location at which the reader actively 2.30collected data.2.31Data in a log required under this paragraph are public.2.32(f) In addition to the log required under paragraph (e), the law enforcement agency 2.33must maintain records showing the date the data were collected and whether the data are 2.34classified under paragraph (b) or (c). The Department of Public Safety shall conduct 2.35a biennial audit of the records to determine whether data currently in the records are 2.36classified and destroyed as required under this subdivision and to verify compliance with 3.1paragraph (g). Data in the records required under this paragraph are classified as provided 3.2in paragraph (b) or (c). Summary results of the audit are public.3.3(g) A law enforcement agency must comply with sections 13.05, subdivision 5, and 3.413.055 in the operation of automated license plate readers and access to the data. The 3.5responsible authority for a law enforcement agency must establish written procedures to 3.6ensure that law enforcement personnel have access to the data only if authorized in writing 3.7by the chief of police, sheriff, or head of the law enforcement agency, or their designee, 3.8to obtain access to data collected by an automated license plate reader for a specific law 3.9enforcement purpose.3.10(h) Within ten days of the installation or current use of an automated license plate 3.11reader, a law enforcement agency must notify the Bureau of Criminal Apprehension of any 3.12fixed location of a stationary automated license plate reader and, if applicable, if the agency 3.13uses any other automated license plate reader. The Bureau of Criminal Apprehension 3.14must maintain a list of law enforcement agencies using automated license plate readers, 3.15including locations of any fixed stationary automated license plate readers, except to the 3.16extent that the location of the reader is security information, as defined in section 13.37. 3.17This list is accessible to the public and must be available on the bureau's Web site.3.18EFFECTIVE DATE.This section is effective the day following final enactment. 3.19Data collected before the effective date of this section must be destroyed, if required by 3.20this section, no later than 15 days after the date this section becomes effective.