1.1 	A bill for an act
1.2 	relating to data practices; requiring independent audit of automated license plate 
1.3 	reader technology prior to data collection;amending Minnesota Statutes 2014, 
1.4 	section 13.82, by adding a subdivision.
1.5 	BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF MINNESOTA:

1.6 	Section 1. Minnesota Statutes 2014, section 13.82, is amended by adding a subdivision 
1.7 	to read:
1.8 		Subd. 31.Audit of compliance with applicable security policies. (a) Prior to 
1.9 	collection of data from an automated license plate reader, and annually thereafter, the 
1.10 	responsible law enforcement agency must arrange for an independent, third-party audit to 
1.11 	validate that the agency's license plate reader technology and data infrastructure complies 
1.12 	with all provisions, configurations, requirements, and usage of all applicable security 
1.13 	policies, including but not limited to the Federal Bureau of Investigation's Criminal 
1.14 	Justice Information Services security policy, the Bureau of Criminal Apprehension's 
1.15 	Minnesota Justice Information Services Criminal Justice Data Communications Network 
1.16 	security policy, and any security policies adopted by a local unit of government that are 
1.17 	applicable to the agency. If an agency's automated license plate reader technology or data 
1.18 	infrastructure is determined to be out of compliance with any applicable security policy, the 
1.19 	agency's further use of automated license plate readers is prohibited until an independent, 
1.20 	third-party audit has determined that the compliance issues have been resolved.
1.21 	(b) A law enforcement agency with an active automated license plate reader system 
1.22 	as of the effective date of this subdivision must conduct its initial annual audit as required 
1.23 	by paragraph (a) no later than one year following the effective date of this subdivision.