Minnesota Legislature
SF 2922
1st Engrossment - 90th Legislature (2017 - 2018) Posted on 03/15/2018 11:43am
Current Version - 1st Engrossment
1.6 1.7 1.8 1.9 1.10 1.11 1.12 1.13 1.14 1.15 1.16 1.17 1.18 1.19 1.20 1.21 1.22 2.1 2.2 2.3 2.4 2.5 2.6 2.7 2.8 2.9
2.10 2.11 2.12 2.13 2.14 2.15 2.16 2.17 2.18 2.19 2.20 2.21 2.22 2.23 2.24 2.25 2.26 2.27 2.28 2.29 2.30 2.31 2.32 2.33 2.34 3.1 3.2 3.3 3.4 3.5 3.6 3.7 3.8 3.9 3.10 3.11 3.12 3.13 3.14 3.15 3.16 3.17 3.18 3.19 3.20 3.21 3.22
3.23 3.24 3.25 3.26 3.27 3.28 3.29 3.30 3.31 3.32 3.33 3.34 4.1 4.2 4.3 4.4 4.5
A bill for an act
relating to government data practices; modifying requirements for mandatory
biennial audits of automatic license plate reader data; amending Minnesota Statutes
2016, section 13.824, subdivisions 5, 6, 8.
BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF MINNESOTA:
Section 1.
Minnesota Statutes 2016, section 13.824, subdivision 5, is amended to read:
Subd. 5.
Log of use required.
(a) A law enforcement agency that installs or uses an
automated license plate reader must maintain a public log of its use, including but not limited
to:
(1) specific times of day that the reader actively collected data;
(2) the aggregate number of vehicles or license plates on which data are collected for
each period of active use and a list of all state and federal databases with which the data
were compared, unless the existence of the database itself is not public;
(3) for each period of active use, the number of vehicles or license plates deleted text begin in each of the
following categories where the data identify a vehicle or license plate that has been stolen,
a warrant for the arrest of the owner of the vehicle or an owner with a suspended or revoked
driver's license or similar category, or are active investigative datadeleted text end new text begin on which data are
collected:
new text end
new text begin
(i) that identify a vehicle or license plate that has been stolen;
new text end
new text begin
(ii) that identify a vehicle whose owner has an outstanding arrest warrant; and
new text end
new text begin (iii) that identify a vehicle whose owner has a suspended, revoked, or canceled driver's
licensenew text end ; and
(4) for a reader at a stationary or fixed location, the location at which the reader actively
collected data and is installed and used.
(b) The law enforcement agency must maintain a list of the current and previous locations,
including dates at those locations, of any fixed stationary automated license plate readers
or other surveillance devices with automated license plate reader capability used by the
agency. The agency's list must be accessible to the public, unless the agency determines
that the data are security information as provided in section 13.37, subdivision 2. A
determination that these data are security information is subject to in-camera judicial review
as provided in section 13.08, subdivision 4.
Sec. 2.
Minnesota Statutes 2016, section 13.824, subdivision 6, is amended to read:
Subd. 6.
Biennial audit.
(a) deleted text begin In addition to the log required under subdivision 5, the law
enforcement agency must maintain records showing the date and time automated license
plate reader data were collected and the applicable classification of the data. The law
enforcement agency shall arrange for an independent, biennial audit of the records to
determine whether data currently in the records are classified, how the data are used, whether
they are destroyed as required under this section, and to verify compliance with subdivision
7. If the commissioner of administration believes that a law enforcement agency is not
complying with this section or other applicable law, the commissioner may order a law
enforcement agency to arrange for additional independent audits. Data in the records required
under this paragraph are classified as provided in subdivision 2.deleted text end new text begin A law enforcement agency
that installs or uses an automatic license plate reader must contract with an independent
auditor that is not a law enforcement agency to perform an independent, biennial audit of
the agency's automated license plate reader data to verify compliance with this section. For
purposes of this subdivision, the time period for conducting a biennial audit commences
when an agency begins using automated license plate reader technology. By July 1 of each
odd-numbered year, the agency must provide a report on the results of each audit to the
commissioner of administration, to the chair and ranking minority members of the legislative
committees with jurisdiction over data practices and public safety issues, and to the
Legislative Commission on Data Practices and Personal Data Privacy.
new text end
(b) The deleted text begin results of thedeleted text end audit deleted text begin aredeleted text end new text begin report required under paragraph (a) isnew text end publicdeleted text begin .deleted text end new text begin and must
include the following and assess compliance with this section:
new text end
new text begin
(1) the number of automated license plate readers used by the agency, including the
brand and model of each reader, whether the reader is mobile or stationary, and contact
information for the agency's automated license plate reader vendor;
new text end
new text begin
(2) all information in the log of use required by subdivision 5 for the biennial period;
and
new text end
new text begin
(3) all agency policies and procedures regarding automated license plate readers and
automated license plate reader data, including policies and procedures regarding classification
of the data, role-based access and data security, data retention and destruction, and data
sharing.
new text end
new text begin (c) new text end The commissioner of administration shall review the deleted text begin results of thedeleted text end auditnew text begin reportnew text end . new text begin If,
based on the audit report, the commissioner of administration believes that a law enforcement
agency is not complying with this section or other applicable law, the commissioner may
order a law enforcement agency to arrange for additional independent audits. new text end If the
commissioner determines that there is a pattern of substantial noncompliance with this
section by the law enforcement agency, the agency must immediately suspend operation of
all automated license plate reader devices until the commissioner has authorized the agency
to reinstate their use. An order of suspension under this paragraph may be issued by the
commissioner, upon review of the deleted text begin results of thedeleted text end auditnew text begin reportnew text end , review of the applicable
provisions of this chapter, and after providing the agency a reasonable opportunity to respond
to the audit's findings.
deleted text begin
(c) A report summarizing the results of each audit must be provided to the commissioner
of administration, to the chair and ranking minority members of the committees of the house
of representatives and the senate with jurisdiction over data practices and public safety
issues, and to the Legislative Commission on Data Practices and Personal Data Privacy no
later than 30 days following completion of the audit.
deleted text end
Sec. 3.
Minnesota Statutes 2016, section 13.824, subdivision 8, is amended to read:
Subd. 8.
Notification to Bureau of Criminal Apprehension.
(a) Within ten days of
deleted text begin the installation or current use ofdeleted text end new text begin acquiring or beginning the use ofnew text end an automated license
plate reader or the integration of automated license plate reader technology into another
surveillance device, a law enforcement agency must notify the Bureau of Criminal
Apprehension deleted text begin of that installation or usedeleted text end new text begin that it has acquired or begun using automated license
plate reader technologynew text end and of any fixed location of a stationary automated license plate
reader.
(b) The Bureau of Criminal Apprehension must maintain a list of law enforcement
agencies using automated license plate readers or other surveillance devices with automated
license plate reader capability, including new text begin the date that the agency acquired or first began
using the technology and the new text end locations of any fixed stationary automated license plate readers
or other devices. Except to the extent that the law enforcement agency determines that the
location of a specific reader or other device is security information, as defined in section
13.37, this list is accessible to the public and must be available on the bureau's Web site. A
determination that the location of a reader or other device is security information is subject
to in-camera judicial review, as provided in section 13.08, subdivision 4.