HF474 Summary

• Classifies automated license plate reader data as private or nonpublic data that must be destroyed unless it identifies a stolen vehicle, matches a warrant, identifies a suspended/revoked license, or relates to an active investigation.

• Requires law enforcement agencies using automated license plate readers to maintain public logs documenting installation locations, times of operation, and aggregate number of vehicles scanned during each period of use.

• Mandates biennial audits by law enforcement agencies to verify automated license plate reader data is properly classified or destroyed as required.

• Requires government entities to establish data protection procedures including access restrictions to non-public data, security safeguards, and secure destruction methods for disposed data.

• Expands data breach notification requirements to all government entities (not just state agencies), requires investigation reports when unauthorized access occurs, and establishes criminal penalties for knowing unauthorized acquisition of non-public data, effective August 1, 2013.