53060.1 Policy
(a) To promote safety and enhance security by enabling thorough, timely, and effective investigations, the California Department of Corrections and Rehabilitation (CDCR)utilizes subscription-based Automated License Plate Reader (ALPR) technology, which allows the ability to access ALPR data owned by external entities and shared with CDCR.
53060.2 Purpose
(a)This policy provides guidance regarding the collection, access, use, sharing, storage, and retention of ALPR information. CDCR accesses ALPR information to further its mission of ensuring the public safety of California residents.
(b)ALPR information assists CDCR in its enforcement of Federal and California laws. ALPR information is collected through an ALPR system, which consists of fixed cameras, mobile cameras, or both that capture images of license plates within their field of view.
53060.3 Definitions
(a)ALPR system is a searchable computerized database resulting from the operation of one or more mobile or fixed cameras combined with computer algorithms to read and convert images of registration plates and the characters they contain into computer-readable data.
(b)ALPR recognition information is information or data collected using an ALPR system.
(c)An ALPR end-user is a person that accesses or uses an ALPR system.
(d)A public agency is the state, any city, county, or city and county, or any agency or political subdivision of the state or a city, county, or city and county, including, but not limited to, a law enforcement agency. By definition, “public agency” does not include federal law enforcement agencies, out-of-state law enforcement agencies, or private entities.
(e)Subscription-based ALPR: Paid access to license plate recognition data that is collected, processed, and maintained by a third-party provider.
53060.4 Authorized Uses
(a)CDCR utilizes ALPR information for official law enforcement purposes including but not limited to:
(1) Locating incarcerated persons who have escaped from CDCR custody.
(2) Locating supervised persons who have absconded parole supervision.
(3) Identifying and locating potential suspects related to crimes.
(4) Assisting in locating wanted persons.
(5) Internal staff investigations.
(b)CDCR utilizes subscription-based ALPR information that is collected by other public agencies and private entities that operate ALPR systems and is considered an “end-user” of this information.
(c)ALPR databases shall not be accessed for immigration enforcement. In gathering, sharing, and storing information, CDCR complies with all applicable laws, rules, and regulations, including but not limited to, to the extent applicable, the California Values Act (Government Code Section 7284 et seq.).
(d)In accordance with Penal Code 13778.2, ALPR databases shall not be accessed for investigations of reproductive health.
53060.5 ALPR Division Administrator Roles and Responsibilities
(a)CDCR has designated “ALPR Division Administrators,” who shall be responsible for ensuring compliance with this policy and Civil Code §§ 1798.90.5, et seq.
(b)Each of the following divisions shall designate, at a minimum, a primary and secondary ALPR Division Administrator responsible for usage of ALPR technology. The primary administrator shall be at the rank of Associate Warden, Parole Agent III, Special Agent-In-Charge, equivalent or above.
(1) Office of Correctional Safety (OCS).
(2) Division of Adult Institutions (DAI).
(3) Division of Adult Parole Operations (DAPO).
(4) Office of Internal Affairs (OIA).
(c)The ALPR Division Administrators are responsible for ensuring the Division utilizes ALPR technology in a responsible manner consistent with all applicable policies, laws, and regulations. Division Administrators shall ensure compliance with the following:
(1) User Management.
(A)Division Administrators shall be responsible for granting and removing end-user access to ALPR technology for the Division.
(B)ALPR Division Administrators are responsible for collecting and storing CDCR Form110 ALPR End User Agreement forms. New end-users must sign and agree to the terms of the CDCR Form 110 ALPR prior to accessing ALPR technology. The completed CDCR Form 110 ALPR forms are to be retained by the Division Administrator per the department’s approved record retention schedule.
(C)Division Administrators shall verify every new end-user has completed the department approved ALPR technology training prior to granting access.
(D)Division Administrators shall monitor end-user provisioning and revoke such provisions when the individual no longer requires access.
(2) Audits.
(A)Division Administrators shall conduct user activity audits every 60 days or as directed by the Division’s Hiring Authority (HA). The purpose of the audits is to ensure compliance with user management and ensure ALPR information is accessed, used, and shared in accordance with statute and this policy.
(1) The Division Administrator may utilize a designee to compile ALPR data for their audit review.
(B)Division Administrators will note and report to the HA or their designee instances where end-users did not supply adequate justification for end-user activity within the ALPR system.
(C)Division Administrators will immediately report irregularities or suspected improper use of the ALPR technology to the HA or their designee.
(D)All accounts that are identified as inactive for a period of 12 months shall be suspended by the Division Administrator. Inactive accounts may be reactivated only after the user has completed the required ALPR training.
(3) Administrative Access.
(A)Division Administrators will have administrative access to ALPR technology to control user access and user removal, manage data sharing capabilities, administer audits, and other support related activities. Administrative users shall not access ALPR technology for any reason unrelated to support duties or in accordance with Section53060.4.
53060.6 Enterprise Information Services (EIS)
(a)For implementations of ALPR technology, Enterprise Information Services (EIS) is responsible for managing the procurement, architecture, data communication network, implementation, ongoing software support contracts, and licensing. ALPR technology shall not be procured or installed without the knowledge and approval of EIS.
53060.7 CDCR ALPR End-Users
(a)Approved CDCR staff will be granted general user access to ALPR technology to query information based on their job role. The staff designated to access the ALPR system and information are:
(1) Special Agent series.
(2) Parole Agent series and Parole Service Associates assigned to the CommunityCompliance Unit. Additional DAPO users may be added with the approval of the Deputy Director.
(3) Intelligence Analysts.
(4) Investigative Services Unit Lieutenants.
(b)Requirements for end-users:
(1) No staff shall access ALPR technology without first completing department-approved training.
(2) Staff requesting access to ALPR shall complete a CDCR Form 110 ALPR End User Agreement prior to receiving access to ALPR technology, thereby agreeing to follow all applicable policies, laws, and regulations during the use of the technology.
(3) ALPR technology shall only be accessed by CDCR staff who have a specific, identifiable, and documented need to access ALPR information in the performance of official job duties.
(4) The end-user shall provide the purpose for seeking ALPR information each time the system is accessed. The purpose provided by the user cannot be “investigation” alone; rather, the user must specify the specific investigation, by referencing an internal case number.
(5) Users shall not include criminal history information or other personal identifying information of a target suspect (beyond the suspect’s last name), or information obtained from the California Law Enforcement Telecommunications System (CLETS).
(6) In accordance with above, each Division shall identify the appropriate internal case numbering to be referenced in the search. The internal case number shall be linked to the specific investigation. The use of a CDCR number alone is not acceptable.
(7) End-users shall report invalid CDCR ALPR matches to the Division Administrator, who will notify the appropriate agency of record.
53060.8 Training
(a)CDCR staff who are authorized to access ALPR information must undergo training regarding the appropriate use of ALPR information and privacy safeguards necessary to protect the privacy and civil liberties of California residents. Training shall be provided by CDCR prior to accessing the ALPR system or ALPR information and repeated thereafter annually.
53060.9 ALPR Data Retention and Accuracy
(a)ALPR information can only be accessed and downloaded by approved CDCR staff with CDCR issued computers, mobile phones, or smart devices. CDCR shall implement at minimum, dual factor authentication or similar security measures for accessing ALPR information. Any ALPR information downloaded or accessed must be maintained in a secure location where it is not accessible to unauthorized persons.
(1) Any ALPR information downloaded or otherwise shared or printed must be destroyed in accordance with current data retention policies found in DOM 14060.
(b)Verification of ALPR Data Accuracy shall be in accordance with this policy.
(1) End-users shall attempt to verify ALPR matches by visual confirmation of the match using the photo associated with the match event. If the visual confirmation discovers the ALPR match was invalid, the end-user shall report the error to the Division Administrator.
(2) If feasible, the user should verify an ALPR response through the California Law Enforcement Telecommunications System (CLETS) before taking enforcement action that is based solely on an ALPR alert.
53060.10 ALPR Data Sharing and Access
(a)In accordance with Civil Code section 1798.90.55, subdivision (b), CDCR shall not sell, share, or transfer ALPR information, except to another public agency (as defined in Civil Code section 1798.90.5, subdivision (f)), and only as otherwise permitted by law. As outlined above, “public agency” is defined as “the state, any city, county, or city and county, or any agency or political subdivision of the state or a city, county, or city and county, including, but not limited to, a law enforcement agency.” (Civ. Code, §1798.90.5, subdivision (f)).
53060.11 Revisions the Director of DAI, the Chief of OCS, and the Director of DAPO shall ensure that the contents of this article/section are current and accurate. References CA CIV TITLE 1.81.23. COLLECTION OF LICENSE PLATE INFORMATION [1798.90.5 -1798.90.55], PENAL CODE 13778.2 DOM CHAPTER 1 ARTICLE 23, SECTION 14060 California Values Act (Government Code § 7284 et seq.).
Revision History Effective: October 1, 2025