Be it enacted by the General Assembly of Virginia:

1. That the Code of Virginia is amended by adding in Title 2.2 a chapter numbered 55.6, consisting of a section numbered 2.2-5517, and by adding a section numbered 33.2-210.1 as follows:

§2.2-5517. Use of license plate reader systems; civil penalty.

A. For the purposes of this section:

"License plate reader system" means a system of automated high-speed cameras used in combination with computer algorithms to convert images of vehicles and license plates into computer-readable data that can be queried by an individually-authenticated user using auditable queries and that shall not be used for bulk downloads or bulk queries. "License plate reader system" does not refer to electronic devices used solely for recording information for traffic violation enforcement or tolling purposes.

"License plate reader system data" means data collected by a license plate reader system.

B. Operation of and access to a license plate reader system by any law-enforcement agency shall be for official law-enforcement purposes only and shall only be used to scan, detect, and record data about vehicles and license plate numbers for the purpose of identifying a vehicle that is (i) associated with a wanted, missing, or endangered person or human trafficking; (ii) stolen; (iii) involved in an active law-enforcement investigation; or (iv) in the vicinity of a recent crime and may be connected to that crime.

C. All state and local law-enforcement agencies are prohibited from using license plate reader systems or license plate reader system data for the purpose of interfering with individuals engaged in lawful activities or tracking individuals on the basis of the content of lawfully protected speech.

D. Pursuant to §2.2-1112, the Division of Purchases and Supply (the Division) shall determine the appropriate license plate reader system technology for use in accordance with this section. The Division shall not approve any license plate reader system technology unless the Division has certified that such system will not share any law-enforcement data gathered in the Commonwealth with any third party other than as authorized in subsection I. The Division shall require approved vendors to annually confirm continued compliance with this section. Law-enforcement agencies may enter into agreements with private vendors for the installation and maintenance of license plate reader systems approved by the Division, including all support services, such as operations and administration for compensation.

E. The Department of State Police (the Department) shall create a model policy regarding the use of license plate reader systems, which shall be known as the State Police Model License Plate Reader Systems Technology Policy, and shall, as a part of such model policy, administer protocols for handling requests for assistance in the use of license plate reader systems technology made to the Department by local law-enforcement agencies. The Department shall publicly post such policy no later than July 1, 2024, and such policy shall be updated annually thereafter and shall include:

1. Requirements for training, including the nature and frequency of specialized training required for an individual to be authorized by a law-enforcement agency to utilize license plate reader systems as authorized by this section;

2. The extent to which a law-enforcement agency shall document instances when license plate reader systems are used and how long such information is retained;

3. Procedures for the confirmation of any match generated by license plate reader systems as provided in subsection G; and

4. Promulgation of standing orders, policies, or public materials by law-enforcement agencies that use license plate reader systems.

F. Any local or state law-enforcement agency that intends to use a license plate reader system shall (i) confirm that such system meets all requirements of this section and is approved by the Division; (ii) establish a policy governing such system's use in accordance with this section and with the State Police Model License Plate Reader Systems Technology Policy that includes training requirements for the officers that will use such system, an internal auditing schedule that occurs at least quarterly to ensure proper use of such system, and data retention limits that conform with subsection H; and (iii) obtain a permit from the Commonwealth Transportation Board before installing a license plate reader system on a state highway right-of-way.

G. Following a positive match by a license plate reader system, the law-enforcement officer shall attempt to visually verify that the image of the license plate displayed by the license plate reader system matches the vehicle for which such search has been authorized. A positive match alone shall not constitute reasonable suspicion as grounds for a law-enforcement officer to stop a vehicle. The officer must develop independent reasonable suspicion for the stop, which may include visually confirming the license plate number on the vehicle.

H. License plate reader system data shall be purged from the database or system within 30 days of its capture in such a manner that such data is destroyed and not recoverable. However, if such data is part of an ongoing investigation, the data may be retained until final disposition of the matter in accordance with applicable records retention law and policy. If the final disposition of the matter was a conviction, then such data shall be retained until the conclusion of all appeals and any other post-conviction proceedings in accordance with applicable records retention law and policy.

I. Law-enforcement agencies and their private vendors shall not share law-enforcement license plate reader system data except with other law-enforcement agencies and shall not sell license plate reader system data for any purpose. Law-enforcement agencies shall individually query license plate reader system data stored and maintained by the private vendor operating such license plate reader system, and no such law-enforcement agency shall engage in bulk downloads, storage, or sharing of such data unrelated to a specific purpose identified in subsection B.

J. Any law-enforcement agency that installs or uses any license plate reader system shall (i) publish its license plate reader system policy on its website, if any, and make hard copies of such policy available at the office of such agency; (ii) make public a log of the use of such system, to be updated on a monthly basis, displaying the aggregate number of vehicles on which license plate reader system data is collected for each month of use; (iii) publish a list of all state and federal databases with which the data were compared, unless the existence of any such database itself is not public; (iv) maintain records sufficient to facilitate discovery in criminal proceedings, post-conviction proceedings, public reporting, and auditing of compliance with such agency's license plate reader system policies unless such data is required to be purged pursuant to subsection H; and (v) collect data pertaining to (a) how many times an officer utilized an investigative lead based on license plate reader system data, (b) how many cases were closed due to an investigative lead from a license plate reader system, (c) what types of criminal offenses were investigated or closed, and (d) demographic information for cases closed.

K. Any person employed by a law-enforcement agency or their private vendor who violates this section or the agency's policy for the use of a license plate reader system for the first time shall be subject to a civil penalty of up to $1,000 per disclosure and shall be required to complete training on the agency's license plate reader system policy before being reinstated to operate such technology. Any person employed by a law-enforcement agency or their private vendor who violates this section or the agency's license plate reader system policy for a second time shall be subject to a civil penalty of up to $2,500 per disclosure, and such law-enforcement agency shall terminate such person's employment or, if such person is employed by such private vendor, terminate the access of such person to such license plate reader system and any data from such system.

L. Any state or local law-enforcement agency that places and operates a license plate reader system pursuant to the provisions of this section shall report to the Department of State Police, in a format to be determined by the Department of State Police, by January 15 of each year on the use of license plate reader systems, including (i) the aggregate number of vehicles on which license plate reader system data is collected for each year; (ii) a list of all state and federal databases with which the data was compared, unless the existence of any such database itself is not public; (iii) how many times an officer utilized an investigative lead based on license plate reader system data; (iv) how many cases were closed due to an investigative lead from a license plate reader system; (v) what types of criminal offenses were investigated or closed; (vi) demographic information for cases closed; and (vii) instances of unauthorized access to the license plate reader system technology, including any unauthorized access by employees of such agency or the Department of State Police. If any information or data (a) contains an articulable concern for any person's safety; (b) is otherwise prohibited from public disclosure by federal or state statute; or (c) if disclosed, may compromise sensitive criminal justice information, such information or data may be excluded from public disclosure. The Department of State Police shall aggregate such information and report it to the General Assembly by March 15 of each year.

§33.2-210.1. License plate readers in highway right-of-way.

A. The Board shall have the power and duty to establish by regulation a permitting process for the installation of license plate reader systems, as defined in §2.2-5517, on state highway rights-of-way. Such regulations shall not conflict with the provisions of §2.2-5517. Such permitting process shall (i) require the use of breakaway poles meeting the American Association of State Highway and Transportation Officials' Manual for Assessing Safety Hardware's (MASH) uniform guidelines in areas without barriers; (ii) allow the installation of non-MASH-tested poles if such poles are (a) located behind barriers such as guardrails or a curb and gutter or (b) installed at least 15 feet off the edge of the nearest travel lane or fog line; (iii) allow attachment to existing infrastructure provided the proper approvals are obtained from the authorities with jurisdiction or ownership over the existing infrastructure; (iv) allow third parties to submit permit applications on behalf of law-enforcement agencies if the third party has obtained a letter of authorization signed by the agency; and (v) utilize a single umbrella permit for multiple locations. The Board shall establish a review period for permit applications lasting no more than 30 days.

B. The provisions of this section shall not prevent or limit the use of any device that is authorized for use by any other provision of law.

2. That any law-enforcement agency operating a license plate reader system, as defined in §2.2-5517 of the Code of Virginia, as created by this act, prior to July 1, 2024, shall be exempt from the provisions of this act until January 1, 2025. Any such law-enforcement agency shall ensure that such license plate reader system and the associated agency policies comply with the provisions of §2.2-5517 of the Code of Virginia, as created by this act, by January 1, 2025, or discontinue the use of such system.