SB1351 99TH GENERAL ASSEMBLY

LRB099 05191 MRW 25221 b

99TH GENERAL ASSEMBLY
State of Illinois
2015 and 2016
SB1351

Introduced 2/18/2015, by Sen. Antonio Muņoz

SYNOPSIS AS INTRODUCED:

New Act
5 ILCS 140/7	from Ch. 116, par. 207

Creates the Automated License Plate Recognition System Data Act. Provides a law enforcement agency may only use recorded automated license plate recognition system (ALPR) data and historical ALPR system data for a legitimate law enforcement purpose. ALPR system data and historical ALPR system data may not be used, shared, sold, traded, or exchanged for any other purpose. Requires law enforcement agencies using a automated license plate recognition system to adopt a policy governing use of the system; adopt a privacy policy to ensure that ALPR system data and historical ALPR system data is not used or shared in violation of this Act; adopt audit procedures relating to use of ALPR system data and historical ALPR system data; and adopt and periodically update a comprehensive training program for agency employees who use or have access to ALPR system data and historical ALPR system data, which fully trains the employees on safeguards in use of ALPR system data or historical ALPR system data and procedures to adhere to policies and procedures governing use of ALPR system data or historical ALPR system data. Requires law enforcement agencies to report to the Department of State Police requests for data, any data breech, and audit results. Establishes Department of State Police responsibilities. Prohibits admission of data in a court or administrative proceeding which is used in violation of the Act. Prohibits less restrictive local regulation, including home rule units. Defines terms. Amends the Freedom of Information Act to exempt ALPR system data and historical ALPR system data from disclosure under the Act.

A BILL FOR

AN ACT concerning automated license plate recognition systems.

Be it enacted by the People of the State of Illinois, represented in the General Assembly:

Section 1. Short title. This Act may be cited as the Automated License Plate Recognition System Data Act.

Section 5. Definitions. For the purpose of this Act:

"ALPR system data" means data packets representing interpretation by ALPR systems of recorded vehicle license plates affixed to vehicles in the field of view of ALPR system cameras, with associated global positioning system (GPS) coordinates, time and date stamps associated with the capture of the data, and any accompanying photographs of the vehicle driver and passenger compartments.

"Automated license plate recognition system" or "ALPR system" means a system of one or more mobile, portable, or fixed video cameras using computer algorithms to convert images of license plates into automated computer-recognized searchable alphanumerical data, including associated servers, data normalization technologies, and similar technologies.

"Historical ALPR system data" means data recorded by ALPR systems that are stored in an authorized ALPR system platform superintended by a sanctioned law enforcement agency.

"Law enforcement agency" means an agency of this State, another state within the United States, a unit of local government, or a political subdivision of any of the preceding, which is vested by law or ordinance with the duty to maintain public order or to enforce criminal laws and ordinances.

"Legitimate law enforcement purpose" means for the purpose of the investigation of a criminal offense or violation of federal, State, or local law or ordinance by a law enforcement agency.

"Secured area" means an area, enclosed by clear boundaries, to which access is limited and not open to the public and entry is only obtainable through specific access-control points.

Section 10. ALPR system data and historical ALPR system data protections.

(a) A law enforcement agency may only use recorded ALPR system data and historical ALPR system data for a legitimate law enforcement purpose. ALPR system data and historical ALPR system data may not be used, shared, sold, traded, or exchanged for any other purpose.

(b) ALPR system data and historical ALPR system data shall be considered and treated by a law enforcement agency as sensitive data, but the data is not in the same category as personally identifying information (PII).

(c) ALPR system data and historical ALPR system data are not subject to disclosure under the Freedom of Information Act.

(d) This Act does not apply to automated license plate recognition systems or similar systems:

(1) used for electronic toll collection and enforcement;

(2) used in government buildings and other locations for security purposes or controlling access to a secured area; and

(3) used for private sector collection activities permitted by law or ordinance.

Section 15. Use and privacy policy. Any law enforcement agency that uses automated license plate recognition systems shall:

(1) adopt a policy governing use of the system;

(2) adopt a privacy policy to ensure that ALPR system data and historical ALPR system data is not used or shared in violation of this Act;

(3) adopt audit procedures relating to use of ALPR system data and historical ALPR system data; and

(4) adopt and periodically update a comprehensive training program for agency employees who use or have access to ALPR system data and historical ALPR system data, which fully trains the employees on safeguards in use of ALPR system data or historical ALPR system data and procedures to adhere to policies and procedures governing use of ALPR system data or historical ALPR system data.

Section 20. Law enforcement agency reports. Each law enforcement agency using an automated license plate recognition system shall prepare and submit to the Department of State Police a report on the system and use of data from the system on or before October 1 of each calendar year the system is used by the agency. The report shall include, but is not limited to:

(1) the number of requests that resulted in release of ALPR system data or historical ALPR system data;

(2) the number of out-of-state requests for ALPR system data or historical ALPR system data;

(3) the number of federal agency requests for ALPR system data or historical ALPR system data;

(4) information on any data breech that resulted in unauthorized release of ALPR system data or historical ALPR system data; and

(5) results of any audits conducted on agency use of ALPR system data or historical ALPR system data.

Section 25. Department of State Police responsibilities.

The Department of State Police shall:

(1) collect and compile reports required under Section 20 of this Act from each law enforcement agency using an automated license plate recognition system and submit a report summarizing those reports to the General Assembly on or before January 1 of each calendar year;

(2) in cooperation with other law enforcement agencies develop storage capacity for a statewide ALPR system data or historical ALPR system data platform; and

(3) develop a model policy and audit procedures for lawful use of automated license plate recognition systems, ALPR system data, and historical ALPR system data for adoption and use by other law enforcement agencies.

Section 30. Admissibility; penalties.

(a) If a court finds by a preponderance of the evidence that ALPR system data or historical ALPR system data was gathered, stored, used, or disclosed in violation of this Act, then that information shall be presumed to be inadmissible in any judicial or administrative proceeding. The party seeking admission of the ALPR system data or historical ALPR system data may overcome this presumption by proving the applicability of a judicially recognized exception to the exclusionary rule of the Fourth Amendment to the United States Constitution or Article I, Section 6 of the Illinois Constitution, or by a preponderance of the evidence that the law enforcement agency was acting in good faith and reasonably believed that one or more of the exceptions existed at the time that the ALPR system data or historical ALPR system data was gathered, stored, used, or disclosed.

(b) The Department of State Police shall adopt rules and appropriate penalties for violations of this Act.

Section 35. Home rule and other local regulation. Any home rule unit of local government, any non-home rule municipality, or any non-home rule county within the unincorporated territory of the county may regulate automated license plate recognition systems and the use of ALPR system data and historical ALPR system data, but that regulation must be no less restrictive than this Act. This Section is a limitation on the concurrent exercise of home rule power under subsection (i) of Section 6 of Article VII of the Illinois Constitution.

Section 100. The Freedom of Information Act is amended by changing Section 7 as follows:

(5 ILCS 140/7) (from Ch. 116, par. 207)

Sec. 7. Exemptions.

(1) When a request is made to inspect or copy a public record that contains information that is exempt from disclosure under this Section, but also contains information that is not exempt from disclosure, the public body may elect to redact the information that is exempt. The public body shall make the remaining information available for inspection and copying. Subject to this requirement, the following shall be exempt from inspection and copying:

(a) Information specifically prohibited from disclosure by federal or State law or rules and regulations implementing federal or State law.

(b) Private information, unless disclosure is required by another provision of this Act, a State or federal law or a court order.

(b-5) Files, documents, and other data or databases maintained by one or more law enforcement agencies and specifically designed to provide information to one or more law enforcement agencies regarding the physical or mental status of one or more individual subjects.

(c) Personal information contained within public records, the disclosure of which would constitute a clearly unwarranted invasion of personal privacy, unless the disclosure is consented to in writing by the individual subjects of the information. "Unwarranted invasion of personal privacy" means the disclosure of information that is highly personal or objectionable to a reasonable person and in which the subject's right to privacy outweighs any legitimate public interest in obtaining the information. The disclosure of information that bears on the public duties of public employees and officials shall not be considered an invasion of personal privacy.

(d) Records in the possession of any public body created in the course of administrative enforcement proceedings, and any law enforcement or correctional agency for law enforcement purposes, but only to the extent that disclosure would:

(i) interfere with pending or actually and reasonably contemplated law enforcement proceedings conducted by any law enforcement or correctional agency that is the recipient of the request;

(ii) interfere with active administrative enforcement proceedings conducted by the public body that is the recipient of the request;

(iii) create a substantial likelihood that a person will be deprived of a fair trial or an impartial hearing;

(iv) unavoidably disclose the identity of a confidential source, confidential information furnished only by the confidential source, or persons who file complaints with or provide information to administrative, investigative, law enforcement, or penal agencies; except that the identities of witnesses to traffic accidents, traffic accident reports, and rescue reports shall be provided by agencies of local government, except when disclosure would interfere with an active criminal investigation conducted by the agency that is the recipient of the request;

(v) disclose unique or specialized investigative techniques other than those generally used and known or disclose internal documents of correctional agencies related to detection, observation or investigation of incidents of crime or misconduct, and disclosure would result in demonstrable harm to the agency or public body that is the recipient of the request;

(vi) endanger the life or physical safety of law enforcement personnel or any other person; or

(vii) obstruct an ongoing criminal investigation by the agency that is the recipient of the request; or

(viii) disclose ALPR system data or historical ALPR system data as those terms are defined in Section 5 of the Automated License Plate Recognition System Data Act.

(d-5) A law enforcement record created for law enforcement purposes and contained in a shared electronic record management system if the law enforcement agency that is the recipient of the request did not create the record, did not participate in or have a role in any of the events which are the subject of the record, and only has access to the record through the shared electronic record management system.

(e) Records that relate to or affect the security of correctional institutions and detention facilities.

(e-5) Records requested by persons committed to the Department of Corrections if those materials are available in the library of the correctional facility where the inmate is confined.

(e-6) Records requested by persons committed to the Department of Corrections if those materials include records from staff members' personnel files, staff rosters, or other staffing assignment information.

(e-7) Records requested by persons committed to the Department of Corrections if those materials are available through an administrative request to the Department of Corrections.

(f) Preliminary drafts, notes, recommendations, memoranda and other records in which opinions are expressed, or policies or actions are formulated, except that a specific record or relevant portion of a record shall not be exempt when the record is publicly cited and identified by the head of the public body. The exemption provided in this paragraph (f) extends to all those records of officers and agencies of the General Assembly that pertain to the preparation of legislative documents.

(g) Trade secrets and commercial or financial information obtained from a person or business where the trade secrets or commercial or financial information are furnished under a claim that they are proprietary, privileged or confidential, and that disclosure of the trade secrets or commercial or financial information would cause competitive harm to the person or business, and only insofar as the claim directly applies to the records requested.

The information included under this exemption includes all trade secrets and commercial or financial information obtained by a public body, including a public pension fund, from a private equity fund or a privately held company within the investment portfolio of a private equity fund as a result of either investing or evaluating a potential investment of public funds in a private equity fund. The exemption contained in this item does not apply to the aggregate financial performance information of a private equity fund, nor to the identity of the fund's managers or general partners. The exemption contained in this item does not apply to the identity of a privately held company within the investment portfolio of a private equity fund, unless the disclosure of the identity of a privately held company may cause competitive harm.

Nothing contained in this paragraph (g) shall be construed to prevent a person or business from consenting to disclosure.

(h) Proposals and bids for any contract, grant, or agreement, including information which if it were disclosed would frustrate procurement or give an advantage to any person proposing to enter into a contractor agreement with the body, until an award or final selection is made. Information prepared by or for the body in preparation of a bid solicitation shall be exempt until an award or final selection is made.

(i) Valuable formulae, computer geographic systems, designs, drawings and research data obtained or produced by any public body when disclosure could reasonably be expected to produce private gain or public loss. The exemption for "computer geographic systems" provided in this paragraph (i) does not extend to requests made by news media as defined in Section 2 of this Act when the requested information is not otherwise exempt and the only purpose of the request is to access and disseminate information regarding the health, safety, welfare, or legal rights of the general public.

(j) The following information pertaining to educational matters:

(i) test questions, scoring keys and other examination data used to administer an academic examination;

(ii) information received by a primary or secondary school, college, or university under its procedures for the evaluation of faculty members by their academic peers;

(iii) information concerning a school or university's adjudication of student disciplinary cases, but only to the extent that disclosure would unavoidably reveal the identity of the student; and

(iv) course materials or research materials used by faculty members.

(k) Architects' plans, engineers' technical submissions, and other construction related technical documents for projects not constructed or developed in whole or in part with public funds and the same for projects constructed or developed with public funds, including but not limited to power generating and distribution stations and other transmission and distribution facilities, water treatment facilities, airport facilities, sport stadiums, convention centers, and all government owned, operated, or occupied buildings, but only to the extent that disclosure would compromise security.

(l) Minutes of meetings of public bodies closed to the public as provided in the Open Meetings Act until the public body makes the minutes available to the public under Section 2.06 of the Open Meetings Act.

(m) Communications between a public body and an attorney or auditor representing the public body that would not be subject to discovery in litigation, and materials prepared or compiled by or for a public body in anticipation of a criminal, civil or administrative proceeding upon the request of an attorney advising the public body, and materials prepared or compiled with respect to internal audits of public bodies.

(n) Records relating to a public body's adjudication of employee grievances or disciplinary cases; however, this exemption shall not extend to the final outcome of cases in which discipline is imposed.

(o) Administrative or technical information associated with automated data processing operations, including but not limited to software, operating protocols, computer program abstracts, file layouts, source listings, object modules, load modules, user guides, documentation pertaining to all logical and physical design of computerized systems, employee manuals, and any other information that, if disclosed, would jeopardize the security of the system or its data or the security of materials exempt under this Section.

(p) Records relating to collective negotiating matters between public bodies and their employees or representatives, except that any final contract or agreement shall be subject to inspection and copying.

(q) Test questions, scoring keys, and other examination data used to determine the qualifications of an applicant for a license or employment.

(r) The records, documents, and information relating to real estate purchase negotiations until those negotiations have been completed or otherwise terminated. With regard to a parcel involved in a pending or actually and reasonably contemplated eminent domain proceeding under the Eminent Domain Act, records, documents and information relating to that parcel shall be exempt except as may be allowed under discovery rules adopted by the Illinois Supreme Court. The records, documents and information relating to a real estate sale shall be exempt until a sale is consummated.

(s) Any and all proprietary information and records related to the operation of an intergovernmental risk management association or self-insurance pool or jointly self-administered health and accident cooperative or pool. Insurance or self insurance (including any intergovernmental risk management association or self insurance pool) claims, loss or risk management information, records, data, advice or communications.

(t) Information contained in or related to examination, operating, or condition reports prepared by, on behalf of, or for the use of a public body responsible for the regulation or supervision of financial institutions or insurance companies, unless disclosure is otherwise required by State law.

(u) Information that would disclose or might lead to the disclosure of secret or confidential information, codes, algorithms, programs, or private keys intended to be used to create electronic or digital signatures under the Electronic Commerce Security Act.

(v) Vulnerability assessments, security measures, and response policies or plans that are designed to identify, prevent, or respond to potential attacks upon a community's population or systems, facilities, or installations, the destruction or contamination of which would constitute a clear and present danger to the health or safety of the community, but only to the extent that disclosure could reasonably be expected to jeopardize the effectiveness of the measures or the safety of the personnel who implement them or the public. Information exempt under this item may include such things as details pertaining to the mobilization or deployment of personnel or equipment, to the operation of communication systems or protocols, or to tactical operations.

(w) (Blank).

(x) Maps and other records regarding the location or security of generation, transmission, distribution, storage, gathering, treatment, or switching facilities owned by a utility, by a power generator, or by the Illinois Power Agency.

(y) Information contained in or related to proposals, bids, or negotiations related to electric power procurement under Section 1-75 of the Illinois Power Agency Act and Section 16-111.5 of the Public Utilities Act that is determined to be confidential and proprietary by the Illinois Power Agency or by the Illinois Commerce Commission.

(z) Information about students exempted from disclosure under Sections 10-20.38 or 34-18.29 of the School Code, and information about undergraduate students enrolled at an institution of higher education exempted from disclosure under Section 25 of the Illinois Credit Card Marketing Act of 2009.

(aa) Information the disclosure of which is exempted under the Viatical Settlements Act of 2009.

(bb) Records and information provided to a mortality review team and records maintained by a mortality review team appointed under the Department of Juvenile Justice Mortality Review Team Act.

(cc) Information regarding interments, entombments, or inurnments of human remains that are submitted to the Cemetery Oversight Database under the Cemetery Care Act or the Cemetery Oversight Act, whichever is applicable.

(dd) Correspondence and records (i) that may not be disclosed under Section 11-9 of the Public Aid Code or (ii) that pertain to appeals under Section 11-8 of the Public Aid Code.

(ee) The names, addresses, or other personal information of persons who are minors and are also participants and registrants in programs of park districts, forest preserve districts, conservation districts, recreation agencies, and special recreation associations.

(ff) The names, addresses, or other personal information of participants and registrants in programs of park districts, forest preserve districts, conservation districts, recreation agencies, and special recreation associations where such programs are targeted primarily to minors.

(gg) Confidential information described in Section 1-100 of the Illinois Independent Tax Tribunal Act of 2012.

(hh) The report submitted to the State Board of Education by the School Security and Standards Task Force under item (8) of subsection (d) of Section 2-3.160 of the School Code and any information contained in that report.

(1.5) Any information exempt from disclosure under the Judicial Privacy Act shall be redacted from public records prior to disclosure under this Act.

(2) A public record that is not in the possession of a public body but is in the possession of a party with whom the agency has contracted to perform a governmental function on behalf of the public body, and that directly relates to the governmental function and is not otherwise exempt under this Act, shall be considered a public record of the public body, for purposes of this Act.

(3) This Section does not authorize withholding of information or limit the availability of records to the public, except as stated in this Section or otherwise provided in this Act.

(Source: P.A. 97-333, eff. 8-12-11; 97-385, eff. 8-15-11; 97-452, eff. 8-19-11; 97-783, eff. 7-13-12; 97-813, eff. 7-13-12; 97-847, eff. 9-22-12; 97-1065, eff. 8-24-12; 97-1129, eff. 8-28-12; 98-463, eff. 8-16-13; 98-578, eff. 8-27-13; 98-695, eff. 7-3-14.)