{"formats":[{"name":"JSON","format":"json","url":"\/downloads\/2025\/code-json\/2.2-5517.json"},{"name":"Plain Text","format":"text","url":"\/downloads\/2025\/code-text\/2.2-5517.txt"},{"name":"XML","format":"xml","url":"\/downloads\/2025\/code-xml\/2.2-5517.xml"},{"name":"HTML","format":"html","url":"\/downloads\/2025\/code-html\/2.2-5517.html"}],"law_id":58641,"edition_id":1,"section_id":58641,"structure_id":15397,"section_number":"2.2-5517","catch_line":"Use of automatic license plate recognition systems by law-enforcement agencies","history":"2025, c. 720.","full_text":"A\n\nFor purposes of this section:\n\t\t\t&#8220;Audit trail&#8221; means all records of queries and responses in an automatic license plate recognition system, and all records of actions in which system data is accessed, entered, updated, shared, or disseminated, including the (i) date and time of access; (ii) license plate number or other data elements used to query the system; (iii) specific purpose, as set forth in subsection D, for accessing or querying the system, including the offense type for any criminal investigation; (iv) associated call for service or case number; and (v) username of the person or persons who accessed or queried the system.\n\t\t\t&#8220;Audit trail data&#8221; means all forms of data collected or generated by an automatic license plate recognition system for purposes of producing an audit trail.\n\t\t\t&#8220;Automatic license plate recognition system&#8221; or &#8220;system&#8221; means a system of one or more high-speed cameras used in combination with computer algorithms to convert images of license plates, vehicles, or a combination of both into computer-readable data.\n\t\t\t&#8220;Division&#8221; means the Division of Purchases and Supply of the Department of General Services.\n\t\t\t&#8220;Law-enforcement agency&#8221; means any agency or entity that employs law-enforcement officers as defined in &#xA7; 9.1-101.\n\t\t\t&#8220;Missing or endangered person&#8221; means a person who has been identified as missing or endangered based on information provided by the National Criminal Information Center, the National Center for Missing and Exploited Children, or the Missing Children Information Clearinghouse (&#xA7; 52-31 et seq.) or pursuant to a Virginia Amber Alert (&#xA7; 52-34.1 et seq.), a Virginia Critical Operation for a Disappeared Child Initiative Alert (&#xA7; 52-34.3:1 et seq.), a Virginia Senior Alert (&#xA7; 52-34.4 et seq.), a Virginia Blue Alert (&#xA7; 52-34.7 et seq.), a Virginia Critically Missing Adult Alert (&#xA7; 52-34.10 et seq.), a Virginia Missing Person with Autism Alert (&#xA7; 52-34.13 et seq.), or any substantially similar alert under the laws of another state or territory of the United States, the District of Columbia, or the United States.\n\t\t\t&#8220;Notification&#8221; means an alert from an automatic license plate recognition system that a license plate or vehicle matches a license plate or vehicle in a database utilized by the automatic license plate recognition system for comparison purposes.\n\t\t\t&#8220;Person associated with human trafficking&#8221; means a person who is either a suspected victim or an alleged perpetrator of either commercial sex trafficking or labor trafficking.\n\t\t\t&#8220;Publicly post&#8221; means to post on a website that is maintained by the agency or on any other website on which the agency generally posts information and that is available to the public or that clearly describes how the public may access such information.\n\t\t\t&#8220;Query&#8221; means a search of automatic license plate recognition system data based on information entered by the user, including a full or partial license plate number, any identifying characteristics of a vehicle, the date, time, or location of an image, or any other data that is searchable within the automatic license plate recognition system.\n\t\t\t&#8220;System data&#8221; means all forms of data collected or generated by an automatic license plate recognition system, including images of license plates, vehicles, any identifying characteristics of vehicles, the date, time, and location of an image, and any peripheral images collected from which analytical data may be extracted.\n\t\t\t&#8220;Vendor&#8221; means a business, company, corporation, or other nongovernmental entity that contracts with a law-enforcement agency for the installation, use, or maintenance of an automatic license plate recognition system.B\n\nPursuant to \u00a7 2.2-1112, the Division of Purchases and Supply shall determine the automatic license plate recognition systems for use in the Commonwealth in accordance with this section. An automatic license plate recognition system shall not be approved by the Division for use by a law-enforcement agency unless:1\n\nThe vendor certifies that it will not sell or share any system data or audit trail data gathered in the Commonwealth, except upon request of the contracting law-enforcement agency for a purpose set forth in subsection F, and will only access system data or audit trail data upon request of the contracting law-enforcement agency for maintenance and quality assurance purposes;2\n\nThe vendor certifies that its system is capable of purging system data collected or generated in the Commonwealth after 21 days of the date of its capture, or earlier if requested by the contracting law-enforcement agency, in such a manner that the system data is destroyed and not recoverable by either the vendor or the contracting law-enforcement agency;3\n\nThe vendor certifies that its system is capable of producing an audit trail and purging audit trail data collected or generated in the Commonwealth after two years of the date of its capture in such a manner that the audit trail data is destroyed and not recoverable by either the vendor or the contracting law-enforcement agency;4\n\nThe databases used by the system to provide notifications as set forth in subsection D are updated at least every 24 hours, or as soon as practicable after such updates become available; and5\n\nThe system meets information security standards as established by the Virginia Information Technologies Agency.C\n\n(Effective July 1, 2026) A law-enforcement agency may enter into a contract with a vendor for the installation, use, or maintenance of a system approved by the Division. The contract shall specify that system data and audit trail data will be the property of the law-enforcement agency and that the system meets the requirements set forth in subsection B. The contract shall further specify that the vendor will immediately notify the law-enforcement agency upon receipt of any subpoena duces tecum, execution of any search warrant, or any other request from a third party for such system data or audit trail data, unless disclosure of such subpoena duces tecum, search warrant, or request is otherwise prohibited by law.D\n\nA law-enforcement agency may use a system only (i) as part of a criminal investigation into an alleged violation of the Code of Virginia or any ordinance of any county, city, or town where there is a reasonable suspicion that a crime was committed; (ii) as part of an active investigation related to a missing or endangered person, including whether to issue an alert for such person, or a person associated with human trafficking; or (iii) to receive notifications related to a missing or endangered person, a person with an outstanding warrant, a person associated with human trafficking, a stolen vehicle, or a stolen license plate. All information necessary for the creation of an audit trail shall be entered in order to query system data. A law-enforcement agency shall not query or download system data unless such data is related to at least one of these purposes. A law-enforcement agency may download audit trail data for purposes of generating audit reports. A stop of a motor vehicle based on a notification from the system shall be consistent with subsection M.E\n\nSystem data shall be purged after 21 days of the date of its capture in such a manner that such data is destroyed and not recoverable by either the vendor or the law-enforcement agency. Audit trail data shall be purged after two years of the date of its capture in such a manner that such data is destroyed and not recoverable by either the vendor or the law-enforcement agency. However, if the system data or the audit trail data is part of an ongoing investigation, prosecution, or civil action, such data shall be retained by the law-enforcement agency until (i) the investigation concludes without any criminal charges or (ii) the final disposition of any criminal or civil matter related to the data, including any direct appeals and any writs of habeas corpus pursuant to Article 3 (&#xA7; 8.01-654 et seq.) of Chapter 25 of Title 8.01 or federal law, in accordance with applicable records retention law and policy.F\n\nSystem data and audit trail data shall not be subject to disclosure under the Virginia Freedom of Information Act (\u00a7 2.2-3700 et seq.). A law-enforcement agency shall not sell any system data or audit trail data. A law-enforcement agency shall not share system data or audit trail data with, or disseminate such data to, any database of any other state, federal, private, or commercial entity. A law-enforcement agency may share system data or audit trail data for the following purposes:1\n\nWith another law-enforcement agency for purposes set forth in subsection D, which may include allowing another law-enforcement agency to query system data, provided that the agency receiving such data shall comply with all of the provisions of this section;2\n\nWith the attorney for the Commonwealth for purposes set forth in subsection D or for complying with discovery or a court order in a criminal proceeding;3\n\nWith a defendant or his counsel for purposes of complying with discovery or a court order in a criminal proceeding;4\n\nPursuant to a court order or a court-issued subpoena duces tecum in any criminal or civil proceeding;5\n\nWith the vendor for maintenance or quality assurance purposes; or6\n\nTo alert the public to an emergency situation, a missing or endangered person, a person associated with human trafficking, or a person with an outstanding warrant.\n\t\t\t\tIn addition, the Department of State Police shall share system data obtained from any system installed, maintained, and operated on any limited access highway or any bridge, tunnel, or special structure under the jurisdiction of the Commonwealth Transportation Board or the Department of Transportation with any law-enforcement agency in the locality where such system is installed, maintained, or operated, and such law-enforcement agency may share such system data for the purposes set forth in this subsection.G\n\nA law-enforcement agency that uses a system shall maintain records sufficient to facilitate public reporting as required by this section, the production of an audit trail, and discovery in criminal and civil proceedings, appeals, and post-conviction proceedings.H\n\nA law-enforcement agency that uses a system shall establish a policy governing such use that is consistent with this section that includes:1\n\nTraining requirements for individuals who will use or access the system;2\n\nThe purposes for which the system can be used or accessed;3\n\nProcedures to ensure that the databases used by the system to provide notifications as set forth in subsection D are updated at least every 24 hours, or as soon as practicable after such updates become available;4\n\nProcedures to confirm the accuracy of any notifications made by the system before stopping a vehicle that are consistent with subsection M;5\n\nA prohibition against downloading system data that is not related to at least one of the purposes set forth in subsection D, except for downloads of audit trail data for purposes of generating audit reports;6\n\nAn internal auditing procedure that occurs at least once every 30 days;7\n\nProcedures for the retention and destruction of system data and audit trail data that are consistent with subsection E;8\n\nA prohibition on the sale of system data and audit trail data and restrictions on the sharing of system data and audit trail data that are consistent with subsection F; and9\n\nSecurity procedures to protect the system, system data, and audit trail data from unauthorized access, destruction, use, modification, or disclosure.I\n\nA law-enforcement agency that uses a system shall report to the Department of State Police by April 1 of each year, in a format to be determined by the Department of State Police, on its use of the system during the preceding calendar year, which shall include the following data:1\n\nThe total number of cameras owned or leased by an agency as part of a system at the conclusion of each calendar year, including the number of such cameras designed to be affixed inside or on a motor vehicle, permanently affixed adjacent to a highway, or temporarily affixed or placed adjacent to a highway for purposes of capturing system data;2\n\nA list of all state and federal databases with which the system data was compared, unless the existence of any such database itself is not public;3\n\nThe total number of times the system was queried, including the specific purposes of the queries, as set forth in subsection D, and the offense types for any criminal investigation;4\n\nThe race, ethnicity, age, and gender of any individual identified as a suspect and charged with a criminal offense as a result of a query of the system as part of a criminal investigation;5\n\nThe number of motor vehicles stopped based on notifications from the system, including the specific reasons for the notifications as set forth in subsection D;6\n\nThe race, ethnicity, age, and gender of the driver of any motor vehicle stopped based on a notification from the system;7\n\nWhether the agency allows any other law-enforcement agencies to access its system data, and if so, which other agencies have been granted such access;8\n\nThe number of identified instances of unauthorized use of or access to the system, including the nature and circumstances of such instances; and9\n\nThe number of subpoena duces tecum, search warrants, and any other requests received from a third party for system data or audit trail data, including the identity of the entity that requested the issuance of such subpoena duces tecum, executed such search warrant, or requested such data, and whether any data was provided to such entity, unless disclosure of such subpoena duces tecum, search warrant, or request is otherwise prohibited by law.J\n\nThe Department of State Police shall aggregate the data provided pursuant to subsection I and report it to the Governor, the General Assembly, and the Virginia State Crime Commission by July 1 of each year.K\n\nA law-enforcement agency that uses a system shall publicly post the policy set forth in subsection H and the report set forth in subsection I. Data shall not be publicly posted if it contains personal or case identifying information. If any data (i) contains an articulable concern for any person&#8217;s safety, (ii) is otherwise prohibited from public disclosure by federal or state statute, or (iii) may compromise sensitive criminal justice information if disclosed, such data may be excluded from being publicly posted.L\n\nA law-enforcement agency shall not use a system for the purpose of interfering with individuals engaged in lawful activities or tracking individuals on the basis of the content of lawfully protected speech.M\n\nA notification by a system for purposes set forth in subsection D does not, by itself, constitute reasonable suspicion as grounds for law enforcement to stop a vehicle. Prior to stopping a vehicle based on a notification, a law-enforcement officer shall:1\n\nDevelop independent reasonable suspicion for the stop; or2\n\nConfirm that the license plate or identifying characteristics of a vehicle match the information contained in the database used to generate the notification.N\n\nAny person who willfully and intentionally queries, accesses, or uses a system for a purpose other than set forth in subsection D, or who willfully and intentionally sells, shares, or disseminates system data or audit trail data in violation of subsection F, is guilty of a Class 1 misdemeanor.O\n\nAny evidence obtained as the result of a violation of subsection D, F, L, or M is not admissible by the Commonwealth in any criminal or civil proceeding, but such evidence may be admitted by a defendant in a criminal proceeding or a litigant, other than the Commonwealth, in a civil proceeding.P\n\nThis section does not apply to systems used:1\n\nFor the enforcement of traffic laws, which includes parking regulations, speed limits, tolling requirements, high-occupancy vehicle requirements, or on-road emissions monitoring;2\n\nBy the Department of Motor Vehicles at permanent weighing stations and in mobile weighing operations; or3\n\nBy any state or local agency or any private entity for non-criminal justice purposes.Q\n\nA vendor shall immediately notify the contracting law-enforcement agency under subsection C upon receipt of a subpoena duces tecum, execution of a search warrant, or any other request from a third party for any system data or audit trail data, unless disclosure of such subpoena duces tecum, search warrant, or request is otherwise prohibited by law.R\n\nPrior to or coincident with the implementation of an automatic license plate recognition system, a local law-enforcement agency shall take measures to promote public awareness on the use of such system.","order_by":null,"text":{"0":{"id":214891,"text":"For purposes of this section:\n\t\t\t&#8220;Audit trail&#8221; means all records of queries and responses in an automatic license plate recognition system, and all records of actions in which system data is accessed, entered, updated, shared, or disseminated, including the (i) date and time of access; (ii) license plate number or other data elements used to query the system; (iii) specific purpose, as set forth in subsection D, for accessing or querying the system, including the offense type for any criminal investigation; (iv) associated call for service or case number; and (v) username of the person or persons who accessed or queried the system.\n\t\t\t&#8220;Audit trail data&#8221; means all forms of data collected or generated by an automatic license plate recognition system for purposes of producing an audit trail.\n\t\t\t&#8220;Automatic license plate recognition system&#8221; or &#8220;system&#8221; means a system of one or more high-speed cameras used in combination with computer algorithms to convert images of license plates, vehicles, or a combination of both into computer-readable data.\n\t\t\t&#8220;Division&#8221; means the Division of Purchases and Supply of the Department of General Services.\n\t\t\t&#8220;Law-enforcement agency&#8221; means any agency or entity that employs law-enforcement officers as defined in &#xA7; 9.1-101.\n\t\t\t&#8220;Missing or endangered person&#8221; means a person who has been identified as missing or endangered based on information provided by the National Criminal Information Center, the National Center for Missing and Exploited Children, or the Missing Children Information Clearinghouse (&#xA7; 52-31 et seq.) or pursuant to a Virginia Amber Alert (&#xA7; 52-34.1 et seq.), a Virginia Critical Operation for a Disappeared Child Initiative Alert (&#xA7; 52-34.3:1 et seq.), a Virginia Senior Alert (&#xA7; 52-34.4 et seq.), a Virginia Blue Alert (&#xA7; 52-34.7 et seq.), a Virginia Critically Missing Adult Alert (&#xA7; 52-34.10 et seq.), a Virginia Missing Person with Autism Alert (&#xA7; 52-34.13 et seq.), or any substantially similar alert under the laws of another state or territory of the United States, the District of Columbia, or the United States.\n\t\t\t&#8220;Notification&#8221; means an alert from an automatic license plate recognition system that a license plate or vehicle matches a license plate or vehicle in a database utilized by the automatic license plate recognition system for comparison purposes.\n\t\t\t&#8220;Person associated with human trafficking&#8221; means a person who is either a suspected victim or an alleged perpetrator of either commercial sex trafficking or labor trafficking.\n\t\t\t&#8220;Publicly post&#8221; means to post on a website that is maintained by the agency or on any other website on which the agency generally posts information and that is available to the public or that clearly describes how the public may access such information.\n\t\t\t&#8220;Query&#8221; means a search of automatic license plate recognition system data based on information entered by the user, including a full or partial license plate number, any identifying characteristics of a vehicle, the date, time, or location of an image, or any other data that is searchable within the automatic license plate recognition system.\n\t\t\t&#8220;System data&#8221; means all forms of data collected or generated by an automatic license plate recognition system, including images of license plates, vehicles, any identifying characteristics of vehicles, the date, time, and location of an image, and any peripheral images collected from which analytical data may be extracted.\n\t\t\t&#8220;Vendor&#8221; means a business, company, corporation, or other nongovernmental entity that contracts with a law-enforcement agency for the installation, use, or maintenance of an automatic license plate recognition system.","type":"section","prefixes":["A"],"prefix":"A","entire_prefix":"A","prefix_anchor":"A","level":1,"next_prefix":"B"},"1":{"id":214892,"text":"Pursuant to \u00a7 2.2-1112, the Division of Purchases and Supply shall determine the automatic license plate recognition systems for use in the Commonwealth in accordance with this section. An automatic license plate recognition system shall not be approved by the Division for use by a law-enforcement agency unless:","type":"section","prefixes":["B"],"prefix":"B","entire_prefix":"B","prefix_anchor":"B","level":1,"prior_prefix":"A","next_prefix":"B1"},"2":{"id":214893,"text":"The vendor certifies that it will not sell or share any system data or audit trail data gathered in the Commonwealth, except upon request of the contracting law-enforcement agency for a purpose set forth in subsection F, and will only access system data or audit trail data upon request of the contracting law-enforcement agency for maintenance and quality assurance purposes;","type":"section","prefixes":["B","1"],"prefix":"1","entire_prefix":"B1","prefix_anchor":"B1","level":2,"prior_prefix":"B","next_prefix":"B2"},"3":{"id":214894,"text":"The vendor certifies that its system is capable of purging system data collected or generated in the Commonwealth after 21 days of the date of its capture, or earlier if requested by the contracting law-enforcement agency, in such a manner that the system data is destroyed and not recoverable by either the vendor or the contracting law-enforcement agency;","type":"section","prefixes":["B","2"],"prefix":"2","entire_prefix":"B2","prefix_anchor":"B2","level":2,"prior_prefix":"B1","next_prefix":"B3"},"4":{"id":214895,"text":"The vendor certifies that its system is capable of producing an audit trail and purging audit trail data collected or generated in the Commonwealth after two years of the date of its capture in such a manner that the audit trail data is destroyed and not recoverable by either the vendor or the contracting law-enforcement agency;","type":"section","prefixes":["B","3"],"prefix":"3","entire_prefix":"B3","prefix_anchor":"B3","level":2,"prior_prefix":"B2","next_prefix":"B4"},"5":{"id":214896,"text":"The databases used by the system to provide notifications as set forth in subsection D are updated at least every 24 hours, or as soon as practicable after such updates become available; and","type":"section","prefixes":["B","4"],"prefix":"4","entire_prefix":"B4","prefix_anchor":"B4","level":2,"prior_prefix":"B3","next_prefix":"B5"},"6":{"id":214897,"text":"The system meets information security standards as established by the Virginia Information Technologies Agency.","type":"section","prefixes":["B","5"],"prefix":"5","entire_prefix":"B5","prefix_anchor":"B5","level":2,"prior_prefix":"B4","next_prefix":"C"},"7":{"id":214898,"text":"(Effective July 1, 2026) A law-enforcement agency may enter into a contract with a vendor for the installation, use, or maintenance of a system approved by the Division. The contract shall specify that system data and audit trail data will be the property of the law-enforcement agency and that the system meets the requirements set forth in subsection B. The contract shall further specify that the vendor will immediately notify the law-enforcement agency upon receipt of any subpoena duces tecum, execution of any search warrant, or any other request from a third party for such system data or audit trail data, unless disclosure of such subpoena duces tecum, search warrant, or request is otherwise prohibited by law.","type":"section","prefixes":["C"],"prefix":"C","entire_prefix":"C","prefix_anchor":"C","level":1,"prior_prefix":"B5","next_prefix":"D"},"8":{"id":214899,"text":"A law-enforcement agency may use a system only (i) as part of a criminal investigation into an alleged violation of the Code of Virginia or any ordinance of any county, city, or town where there is a reasonable suspicion that a crime was committed; (ii) as part of an active investigation related to a missing or endangered person, including whether to issue an alert for such person, or a person associated with human trafficking; or (iii) to receive notifications related to a missing or endangered person, a person with an outstanding warrant, a person associated with human trafficking, a stolen vehicle, or a stolen license plate. All information necessary for the creation of an audit trail shall be entered in order to query system data. A law-enforcement agency shall not query or download system data unless such data is related to at least one of these purposes. A law-enforcement agency may download audit trail data for purposes of generating audit reports. A stop of a motor vehicle based on a notification from the system shall be consistent with subsection M.","type":"section","prefixes":["D"],"prefix":"D","entire_prefix":"D","prefix_anchor":"D","level":1,"prior_prefix":"C","next_prefix":"E"},"9":{"id":214900,"text":"System data shall be purged after 21 days of the date of its capture in such a manner that such data is destroyed and not recoverable by either the vendor or the law-enforcement agency. Audit trail data shall be purged after two years of the date of its capture in such a manner that such data is destroyed and not recoverable by either the vendor or the law-enforcement agency. However, if the system data or the audit trail data is part of an ongoing investigation, prosecution, or civil action, such data shall be retained by the law-enforcement agency until (i) the investigation concludes without any criminal charges or (ii) the final disposition of any criminal or civil matter related to the data, including any direct appeals and any writs of habeas corpus pursuant to Article 3 (&#xA7; 8.01-654 et seq.) of Chapter 25 of Title 8.01 or federal law, in accordance with applicable records retention law and policy.","type":"section","prefixes":["E"],"prefix":"E","entire_prefix":"E","prefix_anchor":"E","level":1,"prior_prefix":"D","next_prefix":"F"},"10":{"id":214901,"text":"System data and audit trail data shall not be subject to disclosure under the Virginia Freedom of Information Act (\u00a7 2.2-3700 et seq.). A law-enforcement agency shall not sell any system data or audit trail data. A law-enforcement agency shall not share system data or audit trail data with, or disseminate such data to, any database of any other state, federal, private, or commercial entity. A law-enforcement agency may share system data or audit trail data for the following purposes:","type":"section","prefixes":["F"],"prefix":"F","entire_prefix":"F","prefix_anchor":"F","level":1,"prior_prefix":"E","next_prefix":"F1"},"11":{"id":214902,"text":"With another law-enforcement agency for purposes set forth in subsection D, which may include allowing another law-enforcement agency to query system data, provided that the agency receiving such data shall comply with all of the provisions of this section;","type":"section","prefixes":["F","1"],"prefix":"1","entire_prefix":"F1","prefix_anchor":"F1","level":2,"prior_prefix":"F","next_prefix":"F2"},"12":{"id":214903,"text":"With the attorney for the Commonwealth for purposes set forth in subsection D or for complying with discovery or a court order in a criminal proceeding;","type":"section","prefixes":["F","2"],"prefix":"2","entire_prefix":"F2","prefix_anchor":"F2","level":2,"prior_prefix":"F1","next_prefix":"F3"},"13":{"id":214904,"text":"With a defendant or his counsel for purposes of complying with discovery or a court order in a criminal proceeding;","type":"section","prefixes":["F","3"],"prefix":"3","entire_prefix":"F3","prefix_anchor":"F3","level":2,"prior_prefix":"F2","next_prefix":"F4"},"14":{"id":214905,"text":"Pursuant to a court order or a court-issued subpoena duces tecum in any criminal or civil proceeding;","type":"section","prefixes":["F","4"],"prefix":"4","entire_prefix":"F4","prefix_anchor":"F4","level":2,"prior_prefix":"F3","next_prefix":"F5"},"15":{"id":214906,"text":"With the vendor for maintenance or quality assurance purposes; or","type":"section","prefixes":["F","5"],"prefix":"5","entire_prefix":"F5","prefix_anchor":"F5","level":2,"prior_prefix":"F4","next_prefix":"F6"},"16":{"id":214907,"text":"To alert the public to an emergency situation, a missing or endangered person, a person associated with human trafficking, or a person with an outstanding warrant.\n\t\t\t\tIn addition, the Department of State Police shall share system data obtained from any system installed, maintained, and operated on any limited access highway or any bridge, tunnel, or special structure under the jurisdiction of the Commonwealth Transportation Board or the Department of Transportation with any law-enforcement agency in the locality where such system is installed, maintained, or operated, and such law-enforcement agency may share such system data for the purposes set forth in this subsection.","type":"section","prefixes":["F","6"],"prefix":"6","entire_prefix":"F6","prefix_anchor":"F6","level":2,"prior_prefix":"F5","next_prefix":"G"},"17":{"id":214908,"text":"A law-enforcement agency that uses a system shall maintain records sufficient to facilitate public reporting as required by this section, the production of an audit trail, and discovery in criminal and civil proceedings, appeals, and post-conviction proceedings.","type":"section","prefixes":["G"],"prefix":"G","entire_prefix":"G","prefix_anchor":"G","level":1,"prior_prefix":"F6","next_prefix":"H"},"18":{"id":214909,"text":"A law-enforcement agency that uses a system shall establish a policy governing such use that is consistent with this section that includes:","type":"section","prefixes":["H"],"prefix":"H","entire_prefix":"H","prefix_anchor":"H","level":1,"prior_prefix":"G","next_prefix":"H1"},"19":{"id":214910,"text":"Training requirements for individuals who will use or access the system;","type":"section","prefixes":["H","1"],"prefix":"1","entire_prefix":"H1","prefix_anchor":"H1","level":2,"prior_prefix":"H","next_prefix":"H2"},"20":{"id":214911,"text":"The purposes for which the system can be used or accessed;","type":"section","prefixes":["H","2"],"prefix":"2","entire_prefix":"H2","prefix_anchor":"H2","level":2,"prior_prefix":"H1","next_prefix":"H3"},"21":{"id":214912,"text":"Procedures to ensure that the databases used by the system to provide notifications as set forth in subsection D are updated at least every 24 hours, or as soon as practicable after such updates become available;","type":"section","prefixes":["H","3"],"prefix":"3","entire_prefix":"H3","prefix_anchor":"H3","level":2,"prior_prefix":"H2","next_prefix":"H4"},"22":{"id":214913,"text":"Procedures to confirm the accuracy of any notifications made by the system before stopping a vehicle that are consistent with subsection M;","type":"section","prefixes":["H","4"],"prefix":"4","entire_prefix":"H4","prefix_anchor":"H4","level":2,"prior_prefix":"H3","next_prefix":"H5"},"23":{"id":214914,"text":"A prohibition against downloading system data that is not related to at least one of the purposes set forth in subsection D, except for downloads of audit trail data for purposes of generating audit reports;","type":"section","prefixes":["H","5"],"prefix":"5","entire_prefix":"H5","prefix_anchor":"H5","level":2,"prior_prefix":"H4","next_prefix":"H6"},"24":{"id":214915,"text":"An internal auditing procedure that occurs at least once every 30 days;","type":"section","prefixes":["H","6"],"prefix":"6","entire_prefix":"H6","prefix_anchor":"H6","level":2,"prior_prefix":"H5","next_prefix":"H7"},"25":{"id":214916,"text":"Procedures for the retention and destruction of system data and audit trail data that are consistent with subsection E;","type":"section","prefixes":["H","7"],"prefix":"7","entire_prefix":"H7","prefix_anchor":"H7","level":2,"prior_prefix":"H6","next_prefix":"H8"},"26":{"id":214917,"text":"A prohibition on the sale of system data and audit trail data and restrictions on the sharing of system data and audit trail data that are consistent with subsection F; and","type":"section","prefixes":["H","8"],"prefix":"8","entire_prefix":"H8","prefix_anchor":"H8","level":2,"prior_prefix":"H7","next_prefix":"H9"},"27":{"id":214918,"text":"Security procedures to protect the system, system data, and audit trail data from unauthorized access, destruction, use, modification, or disclosure.","type":"section","prefixes":["H","9"],"prefix":"9","entire_prefix":"H9","prefix_anchor":"H9","level":2,"prior_prefix":"H8","next_prefix":"I"},"28":{"id":214919,"text":"A law-enforcement agency that uses a system shall report to the Department of State Police by April 1 of each year, in a format to be determined by the Department of State Police, on its use of the system during the preceding calendar year, which shall include the following data:","type":"section","prefixes":["I"],"prefix":"I","entire_prefix":"I","prefix_anchor":"I","level":1,"prior_prefix":"H9","next_prefix":"I1"},"29":{"id":214920,"text":"The total number of cameras owned or leased by an agency as part of a system at the conclusion of each calendar year, including the number of such cameras designed to be affixed inside or on a motor vehicle, permanently affixed adjacent to a highway, or temporarily affixed or placed adjacent to a highway for purposes of capturing system data;","type":"section","prefixes":["I","1"],"prefix":"1","entire_prefix":"I1","prefix_anchor":"I1","level":2,"prior_prefix":"I","next_prefix":"I2"},"30":{"id":214921,"text":"A list of all state and federal databases with which the system data was compared, unless the existence of any such database itself is not public;","type":"section","prefixes":["I","2"],"prefix":"2","entire_prefix":"I2","prefix_anchor":"I2","level":2,"prior_prefix":"I1","next_prefix":"I3"},"31":{"id":214922,"text":"The total number of times the system was queried, including the specific purposes of the queries, as set forth in subsection D, and the offense types for any criminal investigation;","type":"section","prefixes":["I","3"],"prefix":"3","entire_prefix":"I3","prefix_anchor":"I3","level":2,"prior_prefix":"I2","next_prefix":"I4"},"32":{"id":214923,"text":"The race, ethnicity, age, and gender of any individual identified as a suspect and charged with a criminal offense as a result of a query of the system as part of a criminal investigation;","type":"section","prefixes":["I","4"],"prefix":"4","entire_prefix":"I4","prefix_anchor":"I4","level":2,"prior_prefix":"I3","next_prefix":"I5"},"33":{"id":214924,"text":"The number of motor vehicles stopped based on notifications from the system, including the specific reasons for the notifications as set forth in subsection D;","type":"section","prefixes":["I","5"],"prefix":"5","entire_prefix":"I5","prefix_anchor":"I5","level":2,"prior_prefix":"I4","next_prefix":"I6"},"34":{"id":214925,"text":"The race, ethnicity, age, and gender of the driver of any motor vehicle stopped based on a notification from the system;","type":"section","prefixes":["I","6"],"prefix":"6","entire_prefix":"I6","prefix_anchor":"I6","level":2,"prior_prefix":"I5","next_prefix":"I7"},"35":{"id":214926,"text":"Whether the agency allows any other law-enforcement agencies to access its system data, and if so, which other agencies have been granted such access;","type":"section","prefixes":["I","7"],"prefix":"7","entire_prefix":"I7","prefix_anchor":"I7","level":2,"prior_prefix":"I6","next_prefix":"I8"},"36":{"id":214927,"text":"The number of identified instances of unauthorized use of or access to the system, including the nature and circumstances of such instances; and","type":"section","prefixes":["I","8"],"prefix":"8","entire_prefix":"I8","prefix_anchor":"I8","level":2,"prior_prefix":"I7","next_prefix":"I9"},"37":{"id":214928,"text":"The number of subpoena duces tecum, search warrants, and any other requests received from a third party for system data or audit trail data, including the identity of the entity that requested the issuance of such subpoena duces tecum, executed such search warrant, or requested such data, and whether any data was provided to such entity, unless disclosure of such subpoena duces tecum, search warrant, or request is otherwise prohibited by law.","type":"section","prefixes":["I","9"],"prefix":"9","entire_prefix":"I9","prefix_anchor":"I9","level":2,"prior_prefix":"I8","next_prefix":"J"},"38":{"id":214929,"text":"The Department of State Police shall aggregate the data provided pursuant to subsection I and report it to the Governor, the General Assembly, and the Virginia State Crime Commission by July 1 of each year.","type":"section","prefixes":["J"],"prefix":"J","entire_prefix":"J","prefix_anchor":"J","level":1,"prior_prefix":"I9","next_prefix":"K"},"39":{"id":214930,"text":"A law-enforcement agency that uses a system shall publicly post the policy set forth in subsection H and the report set forth in subsection I. Data shall not be publicly posted if it contains personal or case identifying information. If any data (i) contains an articulable concern for any person&#8217;s safety, (ii) is otherwise prohibited from public disclosure by federal or state statute, or (iii) may compromise sensitive criminal justice information if disclosed, such data may be excluded from being publicly posted.","type":"section","prefixes":["K"],"prefix":"K","entire_prefix":"K","prefix_anchor":"K","level":1,"prior_prefix":"J","next_prefix":"L"},"40":{"id":214931,"text":"A law-enforcement agency shall not use a system for the purpose of interfering with individuals engaged in lawful activities or tracking individuals on the basis of the content of lawfully protected speech.","type":"section","prefixes":["L"],"prefix":"L","entire_prefix":"L","prefix_anchor":"L","level":1,"prior_prefix":"K","next_prefix":"M"},"41":{"id":214932,"text":"A notification by a system for purposes set forth in subsection D does not, by itself, constitute reasonable suspicion as grounds for law enforcement to stop a vehicle. Prior to stopping a vehicle based on a notification, a law-enforcement officer shall:","type":"section","prefixes":["M"],"prefix":"M","entire_prefix":"M","prefix_anchor":"M","level":1,"prior_prefix":"L","next_prefix":"M1"},"42":{"id":214933,"text":"Develop independent reasonable suspicion for the stop; or","type":"section","prefixes":["M","1"],"prefix":"1","entire_prefix":"M1","prefix_anchor":"M1","level":2,"prior_prefix":"M","next_prefix":"M2"},"43":{"id":214934,"text":"Confirm that the license plate or identifying characteristics of a vehicle match the information contained in the database used to generate the notification.","type":"section","prefixes":["M","2"],"prefix":"2","entire_prefix":"M2","prefix_anchor":"M2","level":2,"prior_prefix":"M1","next_prefix":"N"},"44":{"id":214935,"text":"Any person who willfully and intentionally queries, accesses, or uses a system for a purpose other than set forth in subsection D, or who willfully and intentionally sells, shares, or disseminates system data or audit trail data in violation of subsection F, is guilty of a Class 1 misdemeanor.","type":"section","prefixes":["N"],"prefix":"N","entire_prefix":"N","prefix_anchor":"N","level":1,"prior_prefix":"M2","next_prefix":"O"},"45":{"id":214936,"text":"Any evidence obtained as the result of a violation of subsection D, F, L, or M is not admissible by the Commonwealth in any criminal or civil proceeding, but such evidence may be admitted by a defendant in a criminal proceeding or a litigant, other than the Commonwealth, in a civil proceeding.","type":"section","prefixes":["O"],"prefix":"O","entire_prefix":"O","prefix_anchor":"O","level":1,"prior_prefix":"N","next_prefix":"P"},"46":{"id":214937,"text":"This section does not apply to systems used:","type":"section","prefixes":["P"],"prefix":"P","entire_prefix":"P","prefix_anchor":"P","level":1,"prior_prefix":"O","next_prefix":"P1"},"47":{"id":214938,"text":"For the enforcement of traffic laws, which includes parking regulations, speed limits, tolling requirements, high-occupancy vehicle requirements, or on-road emissions monitoring;","type":"section","prefixes":["P","1"],"prefix":"1","entire_prefix":"P1","prefix_anchor":"P1","level":2,"prior_prefix":"P","next_prefix":"P2"},"48":{"id":214939,"text":"By the Department of Motor Vehicles at permanent weighing stations and in mobile weighing operations; or","type":"section","prefixes":["P","2"],"prefix":"2","entire_prefix":"P2","prefix_anchor":"P2","level":2,"prior_prefix":"P1","next_prefix":"P3"},"49":{"id":214940,"text":"By any state or local agency or any private entity for non-criminal justice purposes.","type":"section","prefixes":["P","3"],"prefix":"3","entire_prefix":"P3","prefix_anchor":"P3","level":2,"prior_prefix":"P2","next_prefix":"Q"},"50":{"id":214941,"text":"A vendor shall immediately notify the contracting law-enforcement agency under subsection C upon receipt of a subpoena duces tecum, execution of a search warrant, or any other request from a third party for any system data or audit trail data, unless disclosure of such subpoena duces tecum, search warrant, or request is otherwise prohibited by law.","type":"section","prefixes":["Q"],"prefix":"Q","entire_prefix":"Q","prefix_anchor":"Q","level":1,"prior_prefix":"P3","next_prefix":"R"},"51":{"id":214942,"text":"Prior to or coincident with the implementation of an automatic license plate recognition system, a local law-enforcement agency shall take measures to promote public awareness on the use of such system.","type":"section","prefixes":["R"],"prefix":"R","entire_prefix":"R","prefix_anchor":"R","level":1,"prior_prefix":"Q"}},"ancestry":[{"id":15397,"edition_id":1,"name":"Use of Automatic License Plate Recognition Systems","identifier":"55.6","label":"chapter","depth":4,"order_by":1,"parent_id":12751,"metadata":{},"date_created":"2026-06-26 03:54:37","date_modified":"2026-06-26 03:54:37","permalink":{"id":178021,"object_type":"structure","relational_id":15397,"identifier":"55.6","token":"2.2\/II\/B\/55.6","url":"\/2.2\/II\/B\/55.6\/","edition_id":1,"permalink":0,"preferred":1}},{"id":12751,"edition_id":1,"name":"Transaction of Public Business","identifier":"B","label":"part","depth":3,"order_by":1,"parent_id":12750,"metadata":{},"date_created":"2026-06-26 03:43:51","date_modified":"2026-06-26 03:43:51","permalink":{"id":176445,"object_type":"structure","relational_id":12751,"identifier":"B","token":"2.2\/II\/B","url":"\/2.2\/II\/B\/","edition_id":1,"permalink":0,"preferred":1}},{"id":12750,"edition_id":1,"name":"Administration of State Government","identifier":"II","label":"subtitle","depth":2,"order_by":1,"parent_id":12749,"metadata":{},"date_created":"2026-06-26 03:43:51","date_modified":"2026-06-26 03:43:51","permalink":{"id":176253,"object_type":"structure","relational_id":12750,"identifier":"II","token":"2.2\/II","url":"\/2.2\/II\/","edition_id":1,"permalink":0,"preferred":1}},{"id":12749,"edition_id":1,"name":"Administration of Government","identifier":"2.2","label":"title","depth":1,"order_by":1,"parent_id":null,"metadata":{},"date_created":"2026-06-26 03:43:51","date_modified":"2026-06-26 03:43:51","permalink":{"id":171453,"object_type":"structure","relational_id":12749,"identifier":"2.2","token":"2.2","url":"\/2.2\/","edition_id":1,"permalink":0,"preferred":1}}],"structure_contents":[{"id":58641,"structure_id":15397,"section_number":"2.2-5517","catch_line":"Use of automatic license plate recognition systems by law-enforcement agencies","url":"\/2.2-5517\/","token":"2.2\/II\/B\/55.6\/2.2-5517","metadata":false}],"metadata":false,"official_url":"https:\/\/law.lis.virginia.gov\/vacode\/2.2-5517\/","history_text":"<p>This law was first created in 2025. The record of its establishment is cataloged in chapter <a href=\"https:\/\/legacylis.virginia.gov\/cgi-bin\/legp604.exe?251+ful+CHAP0720\">720<\/a> of that year\u2019s edition of \u201cActs of Assembly,\u201d the annual state publication listing all changes made to the Code of Virginia in that year.<\/p>","references":[{"id":56244,"section_number":"52-30.2","catch_line":"(Effective January 1, 2026) Prohibited practices; collection of data","order_by":null,"url":"\/52-30.2\/"}],"refers_to":[{"id":81448,"section_number":"2.2-1112","catch_line":"Standardization of materials, equipment and supplies","order_by":null,"url":"\/2.2-1112\/"},{"id":55569,"section_number":"2.2-3700","catch_line":"Short title; policy","order_by":null,"url":"\/2.2-3700\/"},{"id":65983,"section_number":"52-31","catch_line":"Missing Children Information Clearinghouse established","order_by":null,"url":"\/52-31\/"},{"id":57818,"section_number":"52-34.1","catch_line":"Definitions","order_by":null,"url":"\/52-34.1\/"},{"id":55158,"section_number":"52-34.10","catch_line":"Definitions","order_by":null,"url":"\/52-34.10\/"},{"id":72830,"section_number":"52-34.13","catch_line":"Definitions","order_by":null,"url":"\/52-34.13\/"},{"id":65816,"section_number":"52-34.3:1","catch_line":"Definitions","order_by":null,"url":"\/52-34.3_1\/"},{"id":82025,"section_number":"52-34.4","catch_line":"Definitions","order_by":null,"url":"\/52-34.4\/"},{"id":86761,"section_number":"52-34.7","catch_line":"Definitions","order_by":null,"url":"\/52-34.7\/"},{"id":78584,"section_number":"8.01-654","catch_line":"When and where petition filed; what petition to contain","order_by":null,"url":"\/8.01-654\/"},{"id":73488,"section_number":"9.1-101","catch_line":"(Effective July 1, 2026) Definitions","order_by":null,"url":"\/9.1-101\/"}],"permalink":{"id":178023,"object_type":"law","relational_id":58641,"identifier":"2.2-5517","token":"2.2\/II\/B\/55.6\/2.2-5517","url":"\/2.2-5517\/","edition_id":1,"permalink":0,"preferred":1},"url":"\/2.2-5517\/","token":"2.2\/II\/B\/55.6\/2.2-5517","dublin_core":{"Title":"Use of automatic license plate recognition systems by law-enforcement agencies","Type":"Text","Format":"text\/html","Identifier":"\u00a7 2.2-5517","Relation":"Code of Virginia"},"html":"\n\t\t\t\t\t\t<section id=\"A\"><p><span class=\"prefix-number\">A.<\/span> For purposes of this section:\n\t\t\t&#8220;Audit trail&#8221; means all records of queries and responses in an <span class=\"dictionary\">automatic license plate recognition system<\/span>, and all records of actions in which <span class=\"dictionary\">system data<\/span> is accessed, entered, updated, shared, or disseminated, including the (i) date and time of access; (ii) license plate number or other data elements used to <span class=\"dictionary\">query<\/span> the system; (iii) specific purpose, as set forth in subsection D, for accessing or querying the system, including the <span class=\"dictionary\">offense<\/span> type for any criminal investigation; (iv) associated call for service or case number; and (v) username of the person or persons who accessed or queried the system.\n\t\t\t&#8220;<span class=\"dictionary\">Audit trail data<\/span>&#8221; means all forms of data collected or generated by an <span class=\"dictionary\">automatic license plate recognition system<\/span> for purposes of producing an audit trail.\n\t\t\t&#8220;<span class=\"dictionary\">Automatic license plate recognition system<\/span>&#8221; or &#8220;system&#8221; means a system of one or more high-speed cameras used in combination with computer algorithms to convert images of license plates, vehicles, or a combination of both into computer-readable data.\n\t\t\t&#8220;<span class=\"dictionary\">Division<\/span>&#8221; means the <span class=\"dictionary\">Division<\/span> of Purchases and Supply of the Department of General Services.\n\t\t\t&#8220;<span class=\"dictionary\"><span class=\"dictionary\">Law<\/span>-enforcement agency<\/span>&#8221; means any agency or entity that employs <span class=\"dictionary\">law<\/span>-enforcement officers as defined in &#xA7; <a class=\"law\" title=\"(Effective July 1, 2026) Definitions\" href=\"\/9.1-101\/\">9.1-101<\/a>.\n\t\t\t&#8220;<span class=\"dictionary\">Missing or endangered person<\/span>&#8221; means a person who has been identified as missing or endangered based on information provided by the National Criminal Information Center, the National Center for Missing and Exploited Children, or the Missing Children Information Clearinghouse (&#xA7; <a class=\"law\" title=\"Missing Children Information Clearinghouse established\" href=\"\/52-31\/\">52-31<\/a> et seq.) or pursuant to a Virginia Amber Alert (&#xA7; <a class=\"law\" title=\"Definitions\" href=\"\/52-34.1\/\">52-34.1<\/a> et seq.), a Virginia Critical Operation for a Disappeared Child Initiative Alert (&#xA7; <a class=\"law\" title=\"Definitions\" href=\"\/52-34.3_1\/\">52-34.3:1<\/a> et seq.), a Virginia Senior Alert (&#xA7; <a class=\"law\" title=\"Definitions\" href=\"\/52-34.4\/\">52-34.4<\/a> et seq.), a Virginia Blue Alert (&#xA7; <a class=\"law\" title=\"Definitions\" href=\"\/52-34.7\/\">52-34.7<\/a> et seq.), a Virginia Critically Missing Adult Alert (&#xA7; <a class=\"law\" title=\"Definitions\" href=\"\/52-34.10\/\">52-34.10<\/a> et seq.), a Virginia Missing Person with Autism Alert (&#xA7; <a class=\"law\" title=\"Definitions\" href=\"\/52-34.13\/\">52-34.13<\/a> et seq.), or any substantially similar alert under the <span class=\"dictionary\">laws<\/span> of another state or territory of the United States, the District of Columbia, or the United States.\n\t\t\t&#8220;<span class=\"dictionary\">Notification<\/span>&#8221; means an alert from an <span class=\"dictionary\">automatic license plate recognition system<\/span> that a license plate or vehicle matches a license plate or vehicle in a database utilized by the <span class=\"dictionary\">automatic license plate recognition system<\/span> for comparison purposes.\n\t\t\t&#8220;<span class=\"dictionary\">Person associated with human trafficking<\/span>&#8221; means a person who is either a suspected victim or an alleged perpetrator of either commercial sex trafficking or labor trafficking.\n\t\t\t&#8220;<span class=\"dictionary\">Publicly post<\/span>&#8221; means to post on a website that is maintained by the agency or on any other website on which the agency generally posts information and that is available to the public or that clearly describes how the public may access such information.\n\t\t\t&#8220;<span class=\"dictionary\">Query<\/span>&#8221; means a search of <span class=\"dictionary\">automatic license plate recognition system<\/span> data based on information entered by the user, including a full or partial license plate number, any identifying characteristics of a vehicle, the date, time, or location of an image, or any other data that is searchable within the <span class=\"dictionary\">automatic license plate recognition system<\/span>.\n\t\t\t&#8220;<span class=\"dictionary\">System data<\/span>&#8221; means all forms of data collected or generated by an <span class=\"dictionary\">automatic license plate recognition system<\/span>, including images of license plates, vehicles, any identifying characteristics of vehicles, the date, time, and location of an image, and any peripheral images collected from which analytical data may be extracted.\n\t\t\t&#8220;<span class=\"dictionary\">Vendor<\/span>&#8221; means a business, company, corporation, or other nongovernmental entity that <span class=\"dictionary\">contracts<\/span> with a <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> for the installation, use, or maintenance of an <span class=\"dictionary\">automatic license plate recognition system<\/span>. <a id=\"paragraph-214891\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#A\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"B\"><p><span class=\"prefix-number\">B.<\/span> Pursuant to \u00a7&nbsp;<a class=\"law\" title=\"Standardization of materials, equipment and supplies\" href=\"\/2.2-1112\/\">2.2-1112<\/a>, the <span class=\"dictionary\">Division<\/span> of Purchases and Supply shall determine the <span class=\"dictionary\">automatic license plate recognition systems<\/span> for use in the Commonwealth in accordance with this section. An <span class=\"dictionary\">automatic license plate recognition system<\/span> shall not be approved by the <span class=\"dictionary\">Division<\/span> for use by a <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> unless: <a id=\"paragraph-214892\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#B\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"B1\" class=\"indent-1\"><p><span class=\"prefix-number\">1.<\/span> The <span class=\"dictionary\">vendor<\/span> certifies that it will not sell or share any <span class=\"dictionary\">system data<\/span> or <span class=\"dictionary\">audit trail data<\/span> gathered in the Commonwealth, except upon request of the contracting <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> for a purpose set forth in subsection F, and will only access <span class=\"dictionary\">system data<\/span> or <span class=\"dictionary\">audit trail data<\/span> upon request of the contracting <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> for maintenance and quality assurance purposes; <a id=\"paragraph-214893\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#B1\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"B2\" class=\"indent-1\"><p><span class=\"prefix-number\">2.<\/span> The <span class=\"dictionary\">vendor<\/span> certifies that its system is capable of purging <span class=\"dictionary\">system data<\/span> collected or generated in the Commonwealth after 21 days of the date of its capture, or earlier if requested by the contracting <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span>, in such a manner that the <span class=\"dictionary\">system data<\/span> is destroyed and not recoverable by either the <span class=\"dictionary\">vendor<\/span> or the contracting <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span>; <a id=\"paragraph-214894\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#B2\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"B3\" class=\"indent-1\"><p><span class=\"prefix-number\">3.<\/span> The <span class=\"dictionary\">vendor<\/span> certifies that its system is capable of producing an audit trail and purging <span class=\"dictionary\">audit trail data<\/span> collected or generated in the Commonwealth after two years of the date of its capture in such a manner that the <span class=\"dictionary\">audit trail data<\/span> is destroyed and not recoverable by either the <span class=\"dictionary\">vendor<\/span> or the contracting <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span>; <a id=\"paragraph-214895\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#B3\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"B4\" class=\"indent-1\"><p><span class=\"prefix-number\">4.<\/span> The databases used by the system to provide <span class=\"dictionary\">notifications<\/span> as set forth in subsection D are updated at least every 24 hours, or as soon as practicable after such updates become available; and <a id=\"paragraph-214896\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#B4\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"B5\" class=\"indent-1\"><p><span class=\"prefix-number\">5.<\/span> The system meets information security standards as established by the Virginia Information Technologies Agency. <a id=\"paragraph-214897\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#B5\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"C\"><p><span class=\"prefix-number\">C.<\/span> (Effective July 1, 2026) A <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> may enter into a <span class=\"dictionary\">contract<\/span> with a <span class=\"dictionary\">vendor<\/span> for the installation, use, or maintenance of a system approved by the <span class=\"dictionary\">Division<\/span>. The <span class=\"dictionary\">contract<\/span> shall specify that <span class=\"dictionary\">system data<\/span> and <span class=\"dictionary\">audit trail data<\/span> will be the property of the <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> and that the system meets the requirements set forth in subsection B. The <span class=\"dictionary\">contract<\/span> shall further specify that the <span class=\"dictionary\">vendor<\/span> will immediately notify the <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> upon receipt of any <span class=\"dictionary\">subpoena duces tecum<\/span>, execution of any <span class=\"dictionary\">search warrant<\/span>, or any other request from a third <span class=\"dictionary\">party<\/span> for such <span class=\"dictionary\">system data<\/span> or <span class=\"dictionary\">audit trail data<\/span>, unless disclosure of such <span class=\"dictionary\">subpoena duces tecum<\/span>, <span class=\"dictionary\">search warrant<\/span>, or request is otherwise prohibited by <span class=\"dictionary\">law<\/span>. <a id=\"paragraph-214898\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#C\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"D\"><p><span class=\"prefix-number\">D.<\/span> A <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> may use a system only (i) as part of a criminal investigation into an alleged violation of the Code of Virginia or any <span class=\"dictionary\">ordinance<\/span> of any county, city, or town where there is a reasonable suspicion that a <span class=\"dictionary\">crime<\/span> was committed; (ii) as part of an active investigation related to a <span class=\"dictionary\">missing or endangered person<\/span>, including whether to <span class=\"dictionary\">issue<\/span> an alert for such person, or a <span class=\"dictionary\">person associated with human trafficking<\/span>; or (iii) to receive <span class=\"dictionary\">notifications<\/span> related to a <span class=\"dictionary\">missing or endangered person<\/span>, a person with an outstanding warrant, a <span class=\"dictionary\">person associated with human trafficking<\/span>, a stolen vehicle, or a stolen license plate. All information necessary for the creation of an audit trail shall be entered in <span class=\"dictionary\">order<\/span> to <span class=\"dictionary\">query<\/span> <span class=\"dictionary\">system data<\/span>. A <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> shall not <span class=\"dictionary\">query<\/span> or download <span class=\"dictionary\">system data<\/span> unless such data is related to at least one of these purposes. A <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> may download <span class=\"dictionary\">audit trail data<\/span> for purposes of generating audit reports. A stop of a motor vehicle based on a <span class=\"dictionary\">notification<\/span> from the system shall be consistent with subsection M. <a id=\"paragraph-214899\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#D\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"E\"><p><span class=\"prefix-number\">E.<\/span> <span class=\"dictionary\">System data<\/span> shall be purged after 21 days of the date of its capture in such a manner that such data is destroyed and not recoverable by either the <span class=\"dictionary\">vendor<\/span> or the <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span>. <span class=\"dictionary\">Audit trail data<\/span> shall be purged after two years of the date of its capture in such a manner that such data is destroyed and not recoverable by either the <span class=\"dictionary\">vendor<\/span> or the <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span>. However, if the <span class=\"dictionary\">system data<\/span> or the <span class=\"dictionary\">audit trail data<\/span> is part of an ongoing investigation, <span class=\"dictionary\">prosecution<\/span>, or <span class=\"dictionary\">civil action<\/span>, such data shall be retained by the <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> until (i) the investigation concludes without any criminal charges or (ii) the final <span class=\"dictionary\">disposition<\/span> of any criminal or civil matter related to the data, including any direct <span class=\"dictionary\">appeals<\/span> and any <span class=\"dictionary\">writs<\/span> of <span class=\"dictionary\">habeas corpus<\/span> pursuant to Article 3 (&#xA7; <a class=\"law\" title=\"When and where petition filed; what petition to contain\" href=\"\/8.01-654\/\">8.01-654<\/a> et seq.) of Chapter 25 of Title 8.01 or federal <span class=\"dictionary\">law<\/span>, in accordance with applicable records retention <span class=\"dictionary\">law<\/span> and policy. <a id=\"paragraph-214900\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#E\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"F\"><p><span class=\"prefix-number\">F.<\/span> <span class=\"dictionary\">System data<\/span> and <span class=\"dictionary\">audit trail data<\/span> shall not be subject to disclosure under the Virginia Freedom of Information Act (\u00a7&nbsp;<a class=\"law\" title=\"Short title; policy\" href=\"\/2.2-3700\/\">2.2-3700<\/a> et seq.). A <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> shall not sell any <span class=\"dictionary\">system data<\/span> or <span class=\"dictionary\">audit trail data<\/span>. A <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> shall not share <span class=\"dictionary\">system data<\/span> or <span class=\"dictionary\">audit trail data<\/span> with, or disseminate such data to, any database of any other state, federal, private, or commercial entity. A <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> may share <span class=\"dictionary\">system data<\/span> or <span class=\"dictionary\">audit trail data<\/span> for the following purposes: <a id=\"paragraph-214901\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#F\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"F1\" class=\"indent-1\"><p><span class=\"prefix-number\">1.<\/span> With another <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> for purposes set forth in subsection D, which may include allowing another <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> to <span class=\"dictionary\">query<\/span> <span class=\"dictionary\">system data<\/span>, provided that the agency receiving such data shall comply with all of the provisions of this section; <a id=\"paragraph-214902\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#F1\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"F2\" class=\"indent-1\"><p><span class=\"prefix-number\">2.<\/span> With the attorney for the Commonwealth for purposes set forth in subsection D or for complying with <span class=\"dictionary\">discovery<\/span> or a <span class=\"dictionary\">court order<\/span> in a criminal proceeding; <a id=\"paragraph-214903\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#F2\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"F3\" class=\"indent-1\"><p><span class=\"prefix-number\">3.<\/span> With a <span class=\"dictionary\">defendant<\/span> or his <span class=\"dictionary\">counsel<\/span> for purposes of complying with <span class=\"dictionary\">discovery<\/span> or a <span class=\"dictionary\">court order<\/span> in a criminal proceeding; <a id=\"paragraph-214904\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#F3\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"F4\" class=\"indent-1\"><p><span class=\"prefix-number\">4.<\/span> Pursuant to a <span class=\"dictionary\">court order<\/span> or a court-issued <span class=\"dictionary\">subpoena duces tecum<\/span> in any criminal or civil proceeding; <a id=\"paragraph-214905\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#F4\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"F5\" class=\"indent-1\"><p><span class=\"prefix-number\">5.<\/span> With the <span class=\"dictionary\">vendor<\/span> for maintenance or quality assurance purposes; or <a id=\"paragraph-214906\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#F5\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"F6\" class=\"indent-1\"><p><span class=\"prefix-number\">6.<\/span> To alert the public to an emergency situation, a <span class=\"dictionary\">missing or endangered person<\/span>, a <span class=\"dictionary\">person associated with human trafficking<\/span>, or a person with an outstanding warrant.\n\t\t\t\tIn addition, the Department of State Police shall share <span class=\"dictionary\">system data<\/span> obtained from any system installed, maintained, and operated on any limited access highway or any bridge, tunnel, or special structure under the <span class=\"dictionary\">jurisdiction<\/span> of the Commonwealth Transportation Board or the Department of Transportation with any <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> in the locality where such system is installed, maintained, or operated, and such <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> may share such <span class=\"dictionary\">system data<\/span> for the purposes set forth in this subsection. <a id=\"paragraph-214907\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#F6\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"G\"><p><span class=\"prefix-number\">G.<\/span> A <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> that uses a system shall maintain records sufficient to facilitate public reporting as required by this section, the production of an audit trail, and <span class=\"dictionary\">discovery<\/span> in criminal and civil proceedings, <span class=\"dictionary\">appeals<\/span>, and post-<span class=\"dictionary\">conviction<\/span> proceedings. <a id=\"paragraph-214908\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#G\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"H\"><p><span class=\"prefix-number\">H.<\/span> A <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> that uses a system shall establish a policy governing such use that is consistent with this section that includes: <a id=\"paragraph-214909\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#H\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"H1\" class=\"indent-1\"><p><span class=\"prefix-number\">1.<\/span> Training requirements for individuals who will use or access the system; <a id=\"paragraph-214910\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#H1\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"H2\" class=\"indent-1\"><p><span class=\"prefix-number\">2.<\/span> The purposes for which the system can be used or accessed; <a id=\"paragraph-214911\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#H2\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"H3\" class=\"indent-1\"><p><span class=\"prefix-number\">3.<\/span> Procedures to ensure that the databases used by the system to provide <span class=\"dictionary\">notifications<\/span> as set forth in subsection D are updated at least every 24 hours, or as soon as practicable after such updates become available; <a id=\"paragraph-214912\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#H3\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"H4\" class=\"indent-1\"><p><span class=\"prefix-number\">4.<\/span> Procedures to confirm the accuracy of any <span class=\"dictionary\">notifications<\/span> made by the system before stopping a vehicle that are consistent with subsection M; <a id=\"paragraph-214913\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#H4\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"H5\" class=\"indent-1\"><p><span class=\"prefix-number\">5.<\/span> A prohibition against downloading <span class=\"dictionary\">system data<\/span> that is not related to at least one of the purposes set forth in subsection D, except for downloads of <span class=\"dictionary\">audit trail data<\/span> for purposes of generating audit reports; <a id=\"paragraph-214914\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#H5\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"H6\" class=\"indent-1\"><p><span class=\"prefix-number\">6.<\/span> An internal auditing procedure that occurs at least once every 30 days; <a id=\"paragraph-214915\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#H6\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"H7\" class=\"indent-1\"><p><span class=\"prefix-number\">7.<\/span> Procedures for the retention and destruction of <span class=\"dictionary\">system data<\/span> and <span class=\"dictionary\">audit trail data<\/span> that are consistent with subsection E; <a id=\"paragraph-214916\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#H7\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"H8\" class=\"indent-1\"><p><span class=\"prefix-number\">8.<\/span> A prohibition on the sale of <span class=\"dictionary\">system data<\/span> and <span class=\"dictionary\">audit trail data<\/span> and restrictions on the sharing of <span class=\"dictionary\">system data<\/span> and <span class=\"dictionary\">audit trail data<\/span> that are consistent with subsection F; and <a id=\"paragraph-214917\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#H8\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"H9\" class=\"indent-1\"><p><span class=\"prefix-number\">9.<\/span> Security procedures to protect the system, <span class=\"dictionary\">system data<\/span>, and <span class=\"dictionary\">audit trail data<\/span> from unauthorized access, destruction, use, modification, or disclosure. <a id=\"paragraph-214918\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#H9\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"I\"><p><span class=\"prefix-number\">I.<\/span> A <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> that uses a system shall report to the Department of State Police by April 1 of each year, in a format to be determined by the Department of State Police, on its use of the system during the preceding calendar year, which shall include the following data: <a id=\"paragraph-214919\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#I\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"I1\" class=\"indent-1\"><p><span class=\"prefix-number\">1.<\/span> The total number of cameras owned or leased by an agency as part of a system at the conclusion of each calendar year, including the number of such cameras designed to be affixed inside or on a motor vehicle, permanently affixed adjacent to a highway, or temporarily affixed or placed adjacent to a highway for purposes of capturing <span class=\"dictionary\">system data<\/span>; <a id=\"paragraph-214920\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#I1\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"I2\" class=\"indent-1\"><p><span class=\"prefix-number\">2.<\/span> A list of all state and federal databases with which the <span class=\"dictionary\">system data<\/span> was compared, unless the existence of any such database itself is not public; <a id=\"paragraph-214921\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#I2\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"I3\" class=\"indent-1\"><p><span class=\"prefix-number\">3.<\/span> The total number of times the system was queried, including the specific purposes of the queries, as set forth in subsection D, and the <span class=\"dictionary\">offense<\/span> types for any criminal investigation; <a id=\"paragraph-214922\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#I3\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"I4\" class=\"indent-1\"><p><span class=\"prefix-number\">4.<\/span> The race, ethnicity, age, and gender of any individual identified as a suspect and charged with a criminal <span class=\"dictionary\">offense<\/span> as a result of a <span class=\"dictionary\">query<\/span> of the system as part of a criminal investigation; <a id=\"paragraph-214923\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#I4\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"I5\" class=\"indent-1\"><p><span class=\"prefix-number\">5.<\/span> The number of motor vehicles stopped based on <span class=\"dictionary\">notifications<\/span> from the system, including the specific reasons for the <span class=\"dictionary\">notifications<\/span> as set forth in subsection D; <a id=\"paragraph-214924\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#I5\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"I6\" class=\"indent-1\"><p><span class=\"prefix-number\">6.<\/span> The race, ethnicity, age, and gender of the driver of any motor vehicle stopped based on a <span class=\"dictionary\">notification<\/span> from the system; <a id=\"paragraph-214925\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#I6\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"I7\" class=\"indent-1\"><p><span class=\"prefix-number\">7.<\/span> Whether the agency allows any other <span class=\"dictionary\">law<\/span>-enforcement agencies to access its <span class=\"dictionary\">system data<\/span>, and if so, which other agencies have been granted such access; <a id=\"paragraph-214926\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#I7\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"I8\" class=\"indent-1\"><p><span class=\"prefix-number\">8.<\/span> The number of identified instances of unauthorized use of or access to the system, including the nature and circumstances of such instances; and <a id=\"paragraph-214927\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#I8\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"I9\" class=\"indent-1\"><p><span class=\"prefix-number\">9.<\/span> The number of <span class=\"dictionary\">subpoena duces tecum<\/span>, <span class=\"dictionary\">search warrants<\/span>, and any other requests received from a third <span class=\"dictionary\">party<\/span> for <span class=\"dictionary\">system data<\/span> or <span class=\"dictionary\">audit trail data<\/span>, including the identity of the entity that requested the issuance of such <span class=\"dictionary\">subpoena duces tecum<\/span>, executed such <span class=\"dictionary\">search warrant<\/span>, or requested such data, and whether any data was provided to such entity, unless disclosure of such <span class=\"dictionary\">subpoena duces tecum<\/span>, <span class=\"dictionary\">search warrant<\/span>, or request is otherwise prohibited by <span class=\"dictionary\">law<\/span>. <a id=\"paragraph-214928\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#I9\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"J\"><p><span class=\"prefix-number\">J.<\/span> The Department of State Police shall aggregate the data provided pursuant to subsection I and report it to the Governor, the General Assembly, and the Virginia State <span class=\"dictionary\">Crime<\/span> Commission by July 1 of each year. <a id=\"paragraph-214929\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#J\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"K\"><p><span class=\"prefix-number\">K.<\/span> A <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> that uses a system shall <span class=\"dictionary\">publicly post<\/span> the policy set forth in subsection H and the report set forth in subsection I. Data shall not be publicly posted if it contains personal or case identifying information. If any data (i) contains an articulable concern for any person&#8217;s safety, (ii) is otherwise prohibited from public disclosure by federal or state <span class=\"dictionary\">statute<\/span>, or (iii) may compromise sensitive criminal justice information if disclosed, such data may be excluded from being publicly posted. <a id=\"paragraph-214930\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#K\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"L\"><p><span class=\"prefix-number\">L.<\/span> A <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> shall not use a system for the purpose of interfering with individuals engaged in lawful activities or tracking individuals on the basis of the content of lawfully protected speech. <a id=\"paragraph-214931\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#L\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"M\"><p><span class=\"prefix-number\">M.<\/span> A <span class=\"dictionary\">notification<\/span> by a system for purposes set forth in subsection D does not, by itself, constitute reasonable suspicion as grounds for <span class=\"dictionary\">law<\/span> enforcement to stop a vehicle. Prior to stopping a vehicle based on a <span class=\"dictionary\">notification<\/span>, a <span class=\"dictionary\">law<\/span>-enforcement officer shall: <a id=\"paragraph-214932\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#M\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"M1\" class=\"indent-1\"><p><span class=\"prefix-number\">1.<\/span> Develop independent reasonable suspicion for the stop; or <a id=\"paragraph-214933\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#M1\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"M2\" class=\"indent-1\"><p><span class=\"prefix-number\">2.<\/span> Confirm that the license plate or identifying characteristics of a vehicle match the information contained in the database used to generate the <span class=\"dictionary\">notification<\/span>. <a id=\"paragraph-214934\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#M2\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"N\"><p><span class=\"prefix-number\">N.<\/span> Any person who willfully and intentionally queries, accesses, or uses a system for a purpose other than set forth in subsection D, or who willfully and intentionally sells, shares, or disseminates <span class=\"dictionary\">system data<\/span> or <span class=\"dictionary\">audit trail data<\/span> in violation of subsection F, is guilty of a Class 1 <span class=\"dictionary\">misdemeanor<\/span>. <a id=\"paragraph-214935\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#N\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"O\"><p><span class=\"prefix-number\">O.<\/span> Any <span class=\"dictionary\">evidence<\/span> obtained as the result of a violation of subsection D, F, L, or M is not <span class=\"dictionary\">admissible<\/span> by the Commonwealth in any criminal or civil proceeding, but such <span class=\"dictionary\">evidence<\/span> may be admitted by a <span class=\"dictionary\">defendant<\/span> in a criminal proceeding or a <span class=\"dictionary\">litigant<\/span>, other than the Commonwealth, in a civil proceeding. <a id=\"paragraph-214936\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#O\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"P\"><p><span class=\"prefix-number\">P.<\/span> This section does not apply to systems used: <a id=\"paragraph-214937\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#P\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"P1\" class=\"indent-1\"><p><span class=\"prefix-number\">1.<\/span> For the enforcement of traffic <span class=\"dictionary\">laws<\/span>, which includes parking regulations, speed limits, tolling requirements, high-occupancy vehicle requirements, or on-road emissions monitoring; <a id=\"paragraph-214938\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#P1\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"P2\" class=\"indent-1\"><p><span class=\"prefix-number\">2.<\/span> By the Department of Motor Vehicles at permanent weighing stations and in mobile weighing operations; or <a id=\"paragraph-214939\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#P2\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"P3\" class=\"indent-1\"><p><span class=\"prefix-number\">3.<\/span> By any state or local agency or any private entity for non-criminal justice purposes. <a id=\"paragraph-214940\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#P3\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"Q\"><p><span class=\"prefix-number\">Q.<\/span> A <span class=\"dictionary\">vendor<\/span> shall immediately notify the contracting <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> under subsection C upon receipt of a <span class=\"dictionary\">subpoena duces tecum<\/span>, execution of a <span class=\"dictionary\">search warrant<\/span>, or any other request from a third <span class=\"dictionary\">party<\/span> for any <span class=\"dictionary\">system data<\/span> or <span class=\"dictionary\">audit trail data<\/span>, unless disclosure of such <span class=\"dictionary\">subpoena duces tecum<\/span>, <span class=\"dictionary\">search warrant<\/span>, or request is otherwise prohibited by <span class=\"dictionary\">law<\/span>. <a id=\"paragraph-214941\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#Q\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>\n\t\t\t\t\t\t<section id=\"R\"><p><span class=\"prefix-number\">R.<\/span> Prior to or coincident with the implementation of an <span class=\"dictionary\">automatic license plate recognition system<\/span>, a local <span class=\"dictionary\"><span class=\"dictionary\">law<\/span>-enforcement agency<\/span> shall take measures to promote public awareness on the use of such system. <a id=\"paragraph-214942\" class=\"section-permalink\" href=\"https:\/\/vacode.org\/2.2-5517\/#R\"><i class=\"fa fa-link\"><\/i><\/a><\/p><\/section>","plain_text":"                                 CODE OF VIRGINIA\n\nUSE OF AUTOMATIC LICENSE PLATE RECOGNITION SYSTEMS BY LAW-ENFORCEMENT AGENCIES\n(\u00a7 2.2-5517)\n\nA. For purposes of this section:\n\t\t\t&#8220;Audit trail&#8221; means all records of queries and responses in an\nautomatic license plate recognition system, and all records of actions in which\nsystem data is accessed, entered, updated, shared, or disseminated, including\nthe (i) date and time of access; (ii) license plate number or other data\nelements used to query the system; (iii) specific purpose, as set forth in\nsubsection D, for accessing or querying the system, including the offense type\nfor any criminal investigation; (iv) associated call for service or case number;\nand (v) username of the person or persons who accessed or queried the system.\n\t\t\t&#8220;Audit trail data&#8221; means all forms of data collected or generated\nby an automatic license plate recognition system for purposes of producing an\naudit trail.\n\t\t\t&#8220;Automatic license plate recognition system&#8221; or\n&#8220;system&#8221; means a system of one or more high-speed cameras used in\ncombination with computer algorithms to convert images of license plates,\nvehicles, or a combination of both into computer-readable data.\n\t\t\t&#8220;Division&#8221; means the Division of Purchases and Supply of the\nDepartment of General Services.\n\t\t\t&#8220;Law-enforcement agency&#8221; means any agency or entity that employs\nlaw-enforcement officers as defined in &#xA7; 9.1-101.\n\t\t\t&#8220;Missing or endangered person&#8221; means a person who has been\nidentified as missing or endangered based on information provided by the\nNational Criminal Information Center, the National Center for Missing and\nExploited Children, or the Missing Children Information Clearinghouse (&#xA7;\n52-31 et seq.) or pursuant to a Virginia Amber Alert (&#xA7; 52-34.1 et seq.), a\nVirginia Critical Operation for a Disappeared Child Initiative Alert (&#xA7;\n52-34.3:1 et seq.), a Virginia Senior Alert (&#xA7; 52-34.4 et seq.), a Virginia\nBlue Alert (&#xA7; 52-34.7 et seq.), a Virginia Critically Missing Adult Alert\n(&#xA7; 52-34.10 et seq.), a Virginia Missing Person with Autism Alert (&#xA7;\n52-34.13 et seq.), or any substantially similar alert under the laws of another\nstate or territory of the United States, the District of Columbia, or the United\nStates.\n\t\t\t&#8220;Notification&#8221; means an alert from an automatic license plate\nrecognition system that a license plate or vehicle matches a license plate or\nvehicle in a database utilized by the automatic license plate recognition system\nfor comparison purposes.\n\t\t\t&#8220;Person associated with human trafficking&#8221; means a person who is\neither a suspected victim or an alleged perpetrator of either commercial sex\ntrafficking or labor trafficking.\n\t\t\t&#8220;Publicly post&#8221; means to post on a website that is maintained by\nthe agency or on any other website on which the agency generally posts\ninformation and that is available to the public or that clearly describes how\nthe public may access such information.\n\t\t\t&#8220;Query&#8221; means a search of automatic license plate recognition\nsystem data based on information entered by the user, including a full or\npartial license plate number, any identifying characteristics of a vehicle, the\ndate, time, or location of an image, or any other data that is searchable within\nthe automatic license plate recognition system.\n\t\t\t&#8220;System data&#8221; means all forms of data collected or generated by\nan automatic license plate recognition system, including images of license\nplates, vehicles, any identifying characteristics of vehicles, the date, time,\nand location of an image, and any peripheral images collected from which\nanalytical data may be extracted.\n\t\t\t&#8220;Vendor&#8221; means a business, company, corporation, or other\nnongovernmental entity that contracts with a law-enforcement agency for the\ninstallation, use, or maintenance of an automatic license plate recognition\nsystem.\n\nB. Pursuant to \u00a7 2.2-1112, the Division of Purchases and Supply shall determine\nthe automatic license plate recognition systems for use in the Commonwealth in\naccordance with this section. An automatic license plate recognition system\nshall not be approved by the Division for use by a law-enforcement agency\nunless:\n\n   1. The vendor certifies that it will not sell or share any system data or\n   audit trail data gathered in the Commonwealth, except upon request of the\n   contracting law-enforcement agency for a purpose set forth in subsection F,\n   and will only access system data or audit trail data upon request of the\n   contracting law-enforcement agency for maintenance and quality assurance\n   purposes;\n\n   2. The vendor certifies that its system is capable of purging system data\n   collected or generated in the Commonwealth after 21 days of the date of its\n   capture, or earlier if requested by the contracting law-enforcement agency, in\n   such a manner that the system data is destroyed and not recoverable by either\n   the vendor or the contracting law-enforcement agency;\n\n   3. The vendor certifies that its system is capable of producing an audit trail\n   and purging audit trail data collected or generated in the Commonwealth after\n   two years of the date of its capture in such a manner that the audit trail\n   data is destroyed and not recoverable by either the vendor or the contracting\n   law-enforcement agency;\n\n   4. The databases used by the system to provide notifications as set forth in\n   subsection D are updated at least every 24 hours, or as soon as practicable\n   after such updates become available; and\n\n   5. The system meets information security standards as established by the\n   Virginia Information Technologies Agency.\n\nC. (Effective July 1, 2026) A law-enforcement agency may enter into a contract\nwith a vendor for the installation, use, or maintenance of a system approved by\nthe Division. The contract shall specify that system data and audit trail data\nwill be the property of the law-enforcement agency and that the system meets the\nrequirements set forth in subsection B. The contract shall further specify that\nthe vendor will immediately notify the law-enforcement agency upon receipt of\nany subpoena duces tecum, execution of any search warrant, or any other request\nfrom a third party for such system data or audit trail data, unless disclosure\nof such subpoena duces tecum, search warrant, or request is otherwise prohibited\nby law.\n\nD. A law-enforcement agency may use a system only (i) as part of a criminal\ninvestigation into an alleged violation of the Code of Virginia or any ordinance\nof any county, city, or town where there is a reasonable suspicion that a crime\nwas committed; (ii) as part of an active investigation related to a missing or\nendangered person, including whether to issue an alert for such person, or a\nperson associated with human trafficking; or (iii) to receive notifications\nrelated to a missing or endangered person, a person with an outstanding warrant,\na person associated with human trafficking, a stolen vehicle, or a stolen\nlicense plate. All information necessary for the creation of an audit trail\nshall be entered in order to query system data. A law-enforcement agency shall\nnot query or download system data unless such data is related to at least one of\nthese purposes. A law-enforcement agency may download audit trail data for\npurposes of generating audit reports. A stop of a motor vehicle based on a\nnotification from the system shall be consistent with subsection M.\n\nE. System data shall be purged after 21 days of the date of its capture in such\na manner that such data is destroyed and not recoverable by either the vendor or\nthe law-enforcement agency. Audit trail data shall be purged after two years of\nthe date of its capture in such a manner that such data is destroyed and not\nrecoverable by either the vendor or the law-enforcement agency. However, if the\nsystem data or the audit trail data is part of an ongoing investigation,\nprosecution, or civil action, such data shall be retained by the law-enforcement\nagency until (i) the investigation concludes without any criminal charges or\n(ii) the final disposition of any criminal or civil matter related to the data,\nincluding any direct appeals and any writs of habeas corpus pursuant to Article\n3 (&#xA7; 8.01-654 et seq.) of Chapter 25 of Title 8.01 or federal law, in\naccordance with applicable records retention law and policy.\n\nF. System data and audit trail data shall not be subject to disclosure under the\nVirginia Freedom of Information Act (\u00a7 2.2-3700 et seq.). A law-enforcement\nagency shall not sell any system data or audit trail data. A law-enforcement\nagency shall not share system data or audit trail data with, or disseminate such\ndata to, any database of any other state, federal, private, or commercial\nentity. A law-enforcement agency may share system data or audit trail data for\nthe following purposes:\n\n   1. With another law-enforcement agency for purposes set forth in subsection D,\n   which may include allowing another law-enforcement agency to query system\n   data, provided that the agency receiving such data shall comply with all of\n   the provisions of this section;\n\n   2. With the attorney for the Commonwealth for purposes set forth in subsection\n   D or for complying with discovery or a court order in a criminal proceeding;\n\n   3. With a defendant or his counsel for purposes of complying with discovery or\n   a court order in a criminal proceeding;\n\n   4. Pursuant to a court order or a court-issued subpoena duces tecum in any\n   criminal or civil proceeding;\n\n   5. With the vendor for maintenance or quality assurance purposes; or\n\n   6. To alert the public to an emergency situation, a missing or endangered\n   person, a person associated with human trafficking, or a person with an\n   outstanding warrant.\n   \t\t\t\tIn addition, the Department of State Police shall share system data\n   obtained from any system installed, maintained, and operated on any limited\n   access highway or any bridge, tunnel, or special structure under the\n   jurisdiction of the Commonwealth Transportation Board or the Department of\n   Transportation with any law-enforcement agency in the locality where such\n   system is installed, maintained, or operated, and such law-enforcement agency\n   may share such system data for the purposes set forth in this subsection.\n\nG. A law-enforcement agency that uses a system shall maintain records sufficient\nto facilitate public reporting as required by this section, the production of an\naudit trail, and discovery in criminal and civil proceedings, appeals, and\npost-conviction proceedings.\n\nH. A law-enforcement agency that uses a system shall establish a policy\ngoverning such use that is consistent with this section that includes:\n\n   1. Training requirements for individuals who will use or access the system;\n\n   2. The purposes for which the system can be used or accessed;\n\n   3. Procedures to ensure that the databases used by the system to provide\n   notifications as set forth in subsection D are updated at least every 24\n   hours, or as soon as practicable after such updates become available;\n\n   4. Procedures to confirm the accuracy of any notifications made by the system\n   before stopping a vehicle that are consistent with subsection M;\n\n   5. A prohibition against downloading system data that is not related to at\n   least one of the purposes set forth in subsection D, except for downloads of\n   audit trail data for purposes of generating audit reports;\n\n   6. An internal auditing procedure that occurs at least once every 30 days;\n\n   7. Procedures for the retention and destruction of system data and audit trail\n   data that are consistent with subsection E;\n\n   8. A prohibition on the sale of system data and audit trail data and\n   restrictions on the sharing of system data and audit trail data that are\n   consistent with subsection F; and\n\n   9. Security procedures to protect the system, system data, and audit trail\n   data from unauthorized access, destruction, use, modification, or disclosure.\n\nI. A law-enforcement agency that uses a system shall report to the Department of\nState Police by April 1 of each year, in a format to be determined by the\nDepartment of State Police, on its use of the system during the preceding\ncalendar year, which shall include the following data:\n\n   1. The total number of cameras owned or leased by an agency as part of a\n   system at the conclusion of each calendar year, including the number of such\n   cameras designed to be affixed inside or on a motor vehicle, permanently\n   affixed adjacent to a highway, or temporarily affixed or placed adjacent to a\n   highway for purposes of capturing system data;\n\n   2. A list of all state and federal databases with which the system data was\n   compared, unless the existence of any such database itself is not public;\n\n   3. The total number of times the system was queried, including the specific\n   purposes of the queries, as set forth in subsection D, and the offense types\n   for any criminal investigation;\n\n   4. The race, ethnicity, age, and gender of any individual identified as a\n   suspect and charged with a criminal offense as a result of a query of the\n   system as part of a criminal investigation;\n\n   5. The number of motor vehicles stopped based on notifications from the\n   system, including the specific reasons for the notifications as set forth in\n   subsection D;\n\n   6. The race, ethnicity, age, and gender of the driver of any motor vehicle\n   stopped based on a notification from the system;\n\n   7. Whether the agency allows any other law-enforcement agencies to access its\n   system data, and if so, which other agencies have been granted such access;\n\n   8. The number of identified instances of unauthorized use of or access to the\n   system, including the nature and circumstances of such instances; and\n\n   9. The number of subpoena duces tecum, search warrants, and any other requests\n   received from a third party for system data or audit trail data, including the\n   identity of the entity that requested the issuance of such subpoena duces\n   tecum, executed such search warrant, or requested such data, and whether any\n   data was provided to such entity, unless disclosure of such subpoena duces\n   tecum, search warrant, or request is otherwise prohibited by law.\n\nJ. The Department of State Police shall aggregate the data provided pursuant to\nsubsection I and report it to the Governor, the General Assembly, and the\nVirginia State Crime Commission by July 1 of each year.\n\nK. A law-enforcement agency that uses a system shall publicly post the policy\nset forth in subsection H and the report set forth in subsection I. Data shall\nnot be publicly posted if it contains personal or case identifying information.\nIf any data (i) contains an articulable concern for any person&#8217;s safety,\n(ii) is otherwise prohibited from public disclosure by federal or state statute,\nor (iii) may compromise sensitive criminal justice information if disclosed,\nsuch data may be excluded from being publicly posted.\n\nL. A law-enforcement agency shall not use a system for the purpose of\ninterfering with individuals engaged in lawful activities or tracking\nindividuals on the basis of the content of lawfully protected speech.\n\nM. A notification by a system for purposes set forth in subsection D does not,\nby itself, constitute reasonable suspicion as grounds for law enforcement to\nstop a vehicle. Prior to stopping a vehicle based on a notification, a\nlaw-enforcement officer shall:\n\n   1. Develop independent reasonable suspicion for the stop; or\n\n   2. Confirm that the license plate or identifying characteristics of a vehicle\n   match the information contained in the database used to generate the\n   notification.\n\nN. Any person who willfully and intentionally queries, accesses, or uses a\nsystem for a purpose other than set forth in subsection D, or who willfully and\nintentionally sells, shares, or disseminates system data or audit trail data in\nviolation of subsection F, is guilty of a Class 1 misdemeanor.\n\nO. Any evidence obtained as the result of a violation of subsection D, F, L, or\nM is not admissible by the Commonwealth in any criminal or civil proceeding, but\nsuch evidence may be admitted by a defendant in a criminal proceeding or a\nlitigant, other than the Commonwealth, in a civil proceeding.\n\nP. This section does not apply to systems used:\n\n   1. For the enforcement of traffic laws, which includes parking regulations,\n   speed limits, tolling requirements, high-occupancy vehicle requirements, or\n   on-road emissions monitoring;\n\n   2. By the Department of Motor Vehicles at permanent weighing stations and in\n   mobile weighing operations; or\n\n   3. By any state or local agency or any private entity for non-criminal justice\n   purposes.\n\nQ. A vendor shall immediately notify the contracting law-enforcement agency\nunder subsection C upon receipt of a subpoena duces tecum, execution of a search\nwarrant, or any other request from a third party for any system data or audit\ntrail data, unless disclosure of such subpoena duces tecum, search warrant, or\nrequest is otherwise prohibited by law.\n\nR. Prior to or coincident with the implementation of an automatic license plate\nrecognition system, a local law-enforcement agency shall take measures to\npromote public awareness on the use of such system.\n\nHISTORY: 2025, c. 720.","edition":{"id":1,"name":"2025","slug":"2025","date_created":"2026-06-21 22:39:22","date_modified":"2026-06-21 22:39:22","current":1,"order_by":1,"last_import":null}}