Automated License Plate Reader Policy (Police Department)

SCOPE

This policy governs theuse of automated license plate reader systems and information by the UC SanDiego Police Department (UCSD PD) on any property owned, leased, or controlledby the University of California, San Diego.

POLICY SUMMARY

This policy governs theuse of Automated License Plate Reader (ALPR) Systems by UCSD PD. This policyserves as the usage and privacy policy required by CA Civil Code 1798.90.51and 1798.90.53 to ensure that the collection, use, maintenance, sharing, anddissemination of ALPR Information is consistent with federal, state, and locallaw and local practices.

DEFINITIONS

ALPR means ALPR System andInformation collectively.

ALPR Information means information ordata collected using an ALPR System.

ALPR System means a searchablecomputerized database resulting from the operation of one or more mobile orfixed cameras combined with computer algorithms to read and convert images ofregistration plates and the characters they contain into computer-readabledata.

Authorized Users means the individualspermitted to install, operate or search within the UCSD PD ALPR System.

CampusALPR Authorityis the UC San Diego campus official who authorizes and oversees the operationof ALPR Systems and use of ALPR Information.

Major Change(s) are changesthat could have an effect on the privacy of individuals or security orgovernance of ALPR Systems or Information, including but not limited to changesrelated to ownership, technology, incidents, modification of scope, uses of AI,laws and regulations, risk assessments, vulnerabilities, or material updates orshifts in technologies.

PDALPR System(s)is/are the ALPR System(s) procured, used, or accessed by UCSD PD to assist withlaw enforcement and campus safety functions.

POLICY STATEMENT

UCSD PD may utilize PD ALPR Systems but only in accordancewith the rules and procedures and for the purposes authorized in this policy.

I. Authorized Users

Only Authorized Users may access PD ALPR Systems orInformation; however, access is only authorized when required to perform theduties of the user&s university job. Accessing a PD ALPR System or Informationwithout authorization is a violation of this policy.

The following are the Authorized Users of the UCSD PD ALPRSystem(s):

A. The Physical SecurityProgram Unit;

B. Dispatchers;

C. Patrol Operations;

D. Specialized ServicesDivision;

E. UCSD PD command; and

F. Audit and ManagementAdvisory Services (for compliance, auditing, or advisory purposes)

All Authorized Users (with the exception of AMAS personnel)must complete all applicable background checks and all required training priorto accessing any PD ALPR System or Information.

II. Authorized Purposes

Authorized Users may use or access PD ALPR Systems or PDALPR Information only for Authorized Purposes. The Authorized Purposes are:

A. Investigations of crimeschargeable as felonies under California State law;

B. Investigations of stalking,domestic or relationship violence, and restraining order violations;

C. Identification andrecovery of vehicles or license plates that are stolen or wanted, includingmotorized scooters and motorized bicycles;

D. Investigations oftraffic accidents that result in significant bodily injury, death, orsignificant damage to property and investigations of hit-and-runs;

E. Aiding with missingpersons cases including at-risk individuals and Amber and Silver Alerts; and

F. Monitoring, servicing,and maintaining the ALPR System for performance, reliability, and functionality,as well as to assess compliance with this policy, or assisting with monitoring,servicing, maintaining, or assessing compliance.

Using, or allowing others to use, the PD ALPR System or PDALPR Information, including equipment or database records, for a purpose thatis not an Authorized Purpose is a violation of this policy.

III. Training

AuthorizedUsers of the UCSD PD ALPR System (other than AMAS) must acknowledge that theyhave read and understood this policy and must complete the following requiredtrainings:

A. Manufacturer trainingand certification on the ALPR System;

B. UC San Diego Privacy101 Workshop or Privacy @ UC San Diego training;

C. Annual UC CyberSecurity Training Certification; and

D. InternationalAssociation of Directors of Law Enforcement Standards and Training (IADLST) andCalifornia Peace Officer Standards and Training (CA POST) course certifications(if the user is a member of the police department).

IV. Privacy and Security ofUCSD PD ALPR System

Any installation of an ALPR System or new use of ALPRInformation must undergo a privacy and security review by the Campus Privacy Office and the Office of InformationAssurance, respectively, for Protection Level 4, as defined by BFB-IS-3: Electronic InformationSecurity,prior to implementation and upon any Major Changes to the system, vendor, orprocesses for access. The Campus ALPR Authority must ensure that AuthorizedUsers use administrative, operational, technical, and physical safeguards toprotect ALPR information from unauthorized access, use, destruction,modification, or disclosure, including the following minimum safeguards:

A. Administrative:Username and password protected access to the ALPR system. Monitoring and auditing usage ofdatabase and ALPR Information. Appropriate training and access controls.

B. Physical: Securestorage of computers with access to ALPR Systems and Information.

C. Technical: Encryptionof ALPR information in transit and at rest.

V. Sharing of ALPRInformation

ALPR Information may not be disclosed to anyperson except as authorized by this policy. Unless expressly permitted by thispolicy, disclosure of ALPR Information is a violation of this policy.

ALPR Information may be disclosed to:

A. AuthorizedUsers for an Authorized Purpose.

B. The CampusALPR Authority for oversight and compliance.

C. AuditManagement and Advisory Services (AMAS) for oversight and compliance.

D. The Officeof Campus Counsel and UC Legal for oversight and compliance and in the event ofpotential, anticipated, or actual litigation.

E. IT staffassigned to maintain the ALPR System for maintenance and operational support.

F. CaliforniaCity, County, or State prosecutors in connection with a criminal investigationor prosecution initiated by UCSD PD.

G. Other LawEnforcement Agencies, but only if the purpose of the disclosure is:

a. To assistUCSD PD in its investigation of a crime chargeable as a felony under CaliforniaState law; or

b. In responseto a formal request from a Law Enforcement Agency from the State of Californiaor a political subdivision of the State of California or from anotherUniversity of California campus for assistance in locating a missing orendangered person or in investigating a crime chargeable as a felony underCalifornia State law, but only if the request is on official departmentalletterhead and includes (i) contact information for the officer making therequest, (ii) a case number, (iii) a description of the missing person or the crimeunder investigation, and (iv) a statement why the information being requestedfrom UCSD PD is necessary for the investigation.

Disclosure to Law Enforcement Agencies requires writtenapproval from the Campus ALPR Authority.

UCSD PD ALPR Information shall not be shared, disseminated,or used for civil immigration enforcement purposes. No access to UCSD PD ALPRInformation will be provided to federal immigration authorities unlesscompelled by a valid court order or judicial warrant.

UCSD PD ALPR Information may be aggregated,anonymized, and kept for traffic reporting and maintenance needs, provided thatanonymization meets reasonable standards to prevent re-identification.Aggregated and anonymized information may be provided to the Vice Chancellor - OperationsManagement and Capital Programs, who may use such aggregated, anonymizedinformation for campus planning and traffic-related purposes.

VI. ALPR InformationRequirements

A. Except as required for Auditing and Oversight as described below,ALPR Information in the UCSD PD ALPR System will be retained for no more than60 days, unless required for an active criminal investigation or to comply witha court order or other valid legal requirement. Aggregated, anonymizedinformation is not subject to the 60-day retention limit.

B. Accuracy of Data. UCSD PD ALPR data collection is automated such that license plate imagesand details of collection are included in the system without human review.Although infrequent, license plate translation may be incomplete or inaccurate. Before initiating anarrest or seeking a warrant based upon data collected by an ALPR system, a UCSDPD officer must first visually verify that the license plate characters and thestate of issuance match the data reported by the ALPR System and also confirmthat the physical description of the vehicle (make, model, color) aligns withthe reported ALPR data.

RESPONSIBILITIES

I. Implementation and Enforcement

The Vice Chancellor - Operations Management and Capital Programs (OMCP) is theCampus ALPR Authority and is responsible for implementing and enforcing thispolicy in accordance with California Civil Code 1798.90.5 et seq. TheVice Chancellor - OMCP may delegate the role of Campus ALPR Authority, but therole may not be further redelegated. The Campus ALPR Authority is responsiblefor establishing and implementing operating procedures for ALPR access and useconsistent with this policy.

II. Auditing and Oversight

A. UCSD PD shall beresponsible for storing and monitoring all logins and queries of the UCSD PDALPR System, as required by CA Civil Code 1798.90.52. At a minimum, thefollowing information must be maintained for every query of the ALPR system:username; the date and time of access, the purpose for the access; the licenseplate number or other data element(s) used to query the ALPR System; and thepurpose for accessing the information.

B. UC San Diego departments with Authorized Users mustconduct periodic monitoring to review access rules, logs, configuration, and toconfirm active individual accounts. The Campus ALPR Authority or their designeeshall periodically monitor querying activity via electronic logs to ensuresearches are tied to the purposes authorized by this Policy. In addition, Auditand Management Advisory Service is authorized to inspect all ALPR Systems andALPR Information and related records to ensure compliance with this policy,other university policies, and legal requirements.

III. RecordRetention

AuditLogs shall be retained for 5 years and then destroyed. Records pertaining topending, foreseeable, or ongoing litigation, open investigations, ongoing audits,or other lawful requests for records shall not be destroyed until these actionshave been completed or resolved.

IV. Contracting

The Procurement unit isresponsible for ensuring that ALPR contractscomply with this Policy and that any vendor supplying services related to anALPR System warrants that it will not utilize ALPR Information for its ownpurposes or provide ALPR Information to third parties. The Procurement unitwill also require all vendors to promptly notify the university in the eventAPLR Information is disclosed to third parties, for example in the event of adata breach.

V. Publication and Posting

A. In accordance with CA Civil Code 1798.90.53, the Campus ALPRAuthority will ensure that this policy is posted conspicuously on the UCSD PDweb site that is accessible to the public.

B. The Chief of UCSD PD isresponsible for ensuring that a public notice is posted at the entrance(s) ofany facility with fixed ALPR cameras associated with UCSD PD.

VI. Violations

Sanctions for violations of this policymay include disciplinary action up to and including termination ofemployment in accordance with the applicable disciplinary procedure.

PROCEDURES

None

FORMS

None

RELATED INFORMATION

A. https://police.ucsd.edu/resources/immigration.html

B. https://undoc.universityofcalifornia.edu/

C. CA Civil Code 1798.90.5

D. CA Civil Code 1798.90.51

E. CA Civil Code 1798.90.53

F. CA Civil Code 1798.90.55

G. CA Civil Code 1798.29(g) (1) (F).

H. University of California BFB-IS-3:Electronic Information Security

I. University of California PPSM-21 Selection andAppointment

J. UC Protection LevelClassification Guide

K. UC InstitutionalInformation Disposal Standard

L. UC San Diego Policy andProcedure Manual PPM 135-3 Network Security

M. UC San Diego Policy andProcedure Manual PPM 545-5 Automated License Plate Reader Policy (Department ofTransportation Services)

N. UC Records Retention Schedule

FREQUENTLY ASKEDQUESTIONS (FAQs)

1. What are ALPRs?

An Automated License Plate Recognition (ALPR or LPR) systemis a computer based, information gathering system that utilizes speciallydesigned cameras to rapidly capture an image of a vehicle license plate andrecognize the plate characters using optical character recognition technology in addition to make, model, color and speed data. This datacan then be searched for in a database.

The ALPR System collects: License plate image capture,license plate number, license plate state, portions of the vehicle andsurrounding areas within frame, and the location of the vehicle, date, and timethe image was taken, as well as the make, model, color, and speed of thevehicle (ALPR Information).

2. How does UCSD PD useALPRs?

UC San Diego PD uses both mobile and fixed ALPR Systems,which capture and store digital images that include license plates in areasvisible to the public and use character recognition algorithms to identify andstore plate information. The system creates a searchable computerizeddatabase.

UCSD PD utilizes ALPR technology to scan, detect, andidentify license plate numbers which appear on a listof license plate numbers and letters that law enforcement agencies use toidentify vehicles of interest (Hot Lists) and locating stolen vehicles.In capturing license plates, ALPR systems also capture images that can be usedfor criminal investigations. ALPR data is law enforcement information and willbe used solely for law enforcement purposes. Any non-law enforcement usage ofUCSD PD ALPR Information is strictly prohibited.

REVISION HISTORY

05/05/2026 This policy was originally issued.

	Section: Effective: 05/05/2026 Supersedes: New Next Review Date: 05/05/2029 Issuance Date: 05/05/2026 Issuing Office: Vice Chancellor – Operations Management and Capital Programs Automated License Plate Reader Policy (Police Department)
	SCOPE This policy governs theuse of automated license plate reader systems and information by the UC SanDiego Police Department (UCSD PD) on any property owned, leased, or controlledby the University of California, San Diego. POLICY SUMMARY This policy governs theuse of Automated License Plate Reader (ALPR) Systems by UCSD PD. This policyserves as the usage and privacy policy required by CA Civil Code 1798.90.51and 1798.90.53 to ensure that the collection, use, maintenance, sharing, anddissemination of ALPR Information is consistent with federal, state, and locallaw and local practices. DEFINITIONS ALPR means ALPR System andInformation collectively. ALPR Information means information ordata collected using an ALPR System. ALPR System means a searchablecomputerized database resulting from the operation of one or more mobile orfixed cameras combined with computer algorithms to read and convert images ofregistration plates and the characters they contain into computer-readabledata. Authorized Users means the individualspermitted to install, operate or search within the UCSD PD ALPR System. CampusALPR Authorityis the UC San Diego campus official who authorizes and oversees the operationof ALPR Systems and use of ALPR Information. Major Change(s) are changesthat could have an effect on the privacy of individuals or security orgovernance of ALPR Systems or Information, including but not limited to changesrelated to ownership, technology, incidents, modification of scope, uses of AI,laws and regulations, risk assessments, vulnerabilities, or material updates orshifts in technologies. PDALPR System(s)is/are the ALPR System(s) procured, used, or accessed by UCSD PD to assist withlaw enforcement and campus safety functions. POLICY STATEMENT UCSD PD may utilize PD ALPR Systems but only in accordancewith the rules and procedures and for the purposes authorized in this policy. I. Authorized Users Only Authorized Users may access PD ALPR Systems orInformation; however, access is only authorized when required to perform theduties of the user&s university job. Accessing a PD ALPR System or Informationwithout authorization is a violation of this policy. The following are the Authorized Users of the UCSD PD ALPRSystem(s): A. The Physical SecurityProgram Unit; B. Dispatchers; C. Patrol Operations; D. Specialized ServicesDivision; E. UCSD PD command; and F. Audit and ManagementAdvisory Services (for compliance, auditing, or advisory purposes) All Authorized Users (with the exception of AMAS personnel)must complete all applicable background checks and all required training priorto accessing any PD ALPR System or Information. II. Authorized Purposes Authorized Users may use or access PD ALPR Systems or PDALPR Information only for Authorized Purposes. The Authorized Purposes are: A. Investigations of crimeschargeable as felonies under California State law; B. Investigations of stalking,domestic or relationship violence, and restraining order violations; C. Identification andrecovery of vehicles or license plates that are stolen or wanted, includingmotorized scooters and motorized bicycles; D. Investigations oftraffic accidents that result in significant bodily injury, death, orsignificant damage to property and investigations of hit-and-runs; E. Aiding with missingpersons cases including at-risk individuals and Amber and Silver Alerts; and F. Monitoring, servicing,and maintaining the ALPR System for performance, reliability, and functionality,as well as to assess compliance with this policy, or assisting with monitoring,servicing, maintaining, or assessing compliance. Using, or allowing others to use, the PD ALPR System or PDALPR Information, including equipment or database records, for a purpose thatis not an Authorized Purpose is a violation of this policy. III. Training AuthorizedUsers of the UCSD PD ALPR System (other than AMAS) must acknowledge that theyhave read and understood this policy and must complete the following requiredtrainings: A. Manufacturer trainingand certification on the ALPR System; B. UC San Diego Privacy101 Workshop or Privacy @ UC San Diego training; C. Annual UC CyberSecurity Training Certification; and D. InternationalAssociation of Directors of Law Enforcement Standards and Training (IADLST) andCalifornia Peace Officer Standards and Training (CA POST) course certifications(if the user is a member of the police department). IV. Privacy and Security ofUCSD PD ALPR System Any installation of an ALPR System or new use of ALPRInformation must undergo a privacy and security review by the Campus Privacy Office and the Office of InformationAssurance, respectively, for Protection Level 4, as defined by BFB-IS-3: Electronic InformationSecurity,prior to implementation and upon any Major Changes to the system, vendor, orprocesses for access. The Campus ALPR Authority must ensure that AuthorizedUsers use administrative, operational, technical, and physical safeguards toprotect ALPR information from unauthorized access, use, destruction,modification, or disclosure, including the following minimum safeguards: A. Administrative:Username and password protected access to the ALPR system. Monitoring and auditing usage ofdatabase and ALPR Information. Appropriate training and access controls. B. Physical: Securestorage of computers with access to ALPR Systems and Information. C. Technical: Encryptionof ALPR information in transit and at rest. V. Sharing of ALPRInformation ALPR Information may not be disclosed to anyperson except as authorized by this policy. Unless expressly permitted by thispolicy, disclosure of ALPR Information is a violation of this policy. ALPR Information may be disclosed to: A. AuthorizedUsers for an Authorized Purpose. B. The CampusALPR Authority for oversight and compliance. C. AuditManagement and Advisory Services (AMAS) for oversight and compliance. D. The Officeof Campus Counsel and UC Legal for oversight and compliance and in the event ofpotential, anticipated, or actual litigation. E. IT staffassigned to maintain the ALPR System for maintenance and operational support. F. CaliforniaCity, County, or State prosecutors in connection with a criminal investigationor prosecution initiated by UCSD PD. G. Other LawEnforcement Agencies, but only if the purpose of the disclosure is: a. To assistUCSD PD in its investigation of a crime chargeable as a felony under CaliforniaState law; or b. In responseto a formal request from a Law Enforcement Agency from the State of Californiaor a political subdivision of the State of California or from anotherUniversity of California campus for assistance in locating a missing orendangered person or in investigating a crime chargeable as a felony underCalifornia State law, but only if the request is on official departmentalletterhead and includes (i) contact information for the officer making therequest, (ii) a case number, (iii) a description of the missing person or the crimeunder investigation, and (iv) a statement why the information being requestedfrom UCSD PD is necessary for the investigation. Disclosure to Law Enforcement Agencies requires writtenapproval from the Campus ALPR Authority. UCSD PD ALPR Information shall not be shared, disseminated,or used for civil immigration enforcement purposes. No access to UCSD PD ALPRInformation will be provided to federal immigration authorities unlesscompelled by a valid court order or judicial warrant. UCSD PD ALPR Information may be aggregated,anonymized, and kept for traffic reporting and maintenance needs, provided thatanonymization meets reasonable standards to prevent re-identification.Aggregated and anonymized information may be provided to the Vice Chancellor - OperationsManagement and Capital Programs, who may use such aggregated, anonymizedinformation for campus planning and traffic-related purposes. VI. ALPR InformationRequirements A. Except as required for Auditing and Oversight as described below,ALPR Information in the UCSD PD ALPR System will be retained for no more than60 days, unless required for an active criminal investigation or to comply witha court order or other valid legal requirement. Aggregated, anonymizedinformation is not subject to the 60-day retention limit. B. Accuracy of Data. UCSD PD ALPR data collection is automated such that license plate imagesand details of collection are included in the system without human review.Although infrequent, license plate translation may be incomplete or inaccurate. Before initiating anarrest or seeking a warrant based upon data collected by an ALPR system, a UCSDPD officer must first visually verify that the license plate characters and thestate of issuance match the data reported by the ALPR System and also confirmthat the physical description of the vehicle (make, model, color) aligns withthe reported ALPR data. RESPONSIBILITIES I. Implementation and Enforcement The Vice Chancellor - Operations Management and Capital Programs (OMCP) is theCampus ALPR Authority and is responsible for implementing and enforcing thispolicy in accordance with California Civil Code 1798.90.5 et seq. TheVice Chancellor - OMCP may delegate the role of Campus ALPR Authority, but therole may not be further redelegated. The Campus ALPR Authority is responsiblefor establishing and implementing operating procedures for ALPR access and useconsistent with this policy. II. Auditing and Oversight A. UCSD PD shall beresponsible for storing and monitoring all logins and queries of the UCSD PDALPR System, as required by CA Civil Code 1798.90.52. At a minimum, thefollowing information must be maintained for every query of the ALPR system:username; the date and time of access, the purpose for the access; the licenseplate number or other data element(s) used to query the ALPR System; and thepurpose for accessing the information. B. UC San Diego departments with Authorized Users mustconduct periodic monitoring to review access rules, logs, configuration, and toconfirm active individual accounts. The Campus ALPR Authority or their designeeshall periodically monitor querying activity via electronic logs to ensuresearches are tied to the purposes authorized by this Policy. In addition, Auditand Management Advisory Service is authorized to inspect all ALPR Systems andALPR Information and related records to ensure compliance with this policy,other university policies, and legal requirements. III. RecordRetention AuditLogs shall be retained for 5 years and then destroyed. Records pertaining topending, foreseeable, or ongoing litigation, open investigations, ongoing audits,or other lawful requests for records shall not be destroyed until these actionshave been completed or resolved. IV. Contracting The Procurement unit isresponsible for ensuring that ALPR contractscomply with this Policy and that any vendor supplying services related to anALPR System warrants that it will not utilize ALPR Information for its ownpurposes or provide ALPR Information to third parties. The Procurement unitwill also require all vendors to promptly notify the university in the eventAPLR Information is disclosed to third parties, for example in the event of adata breach. V. Publication and Posting A. In accordance with CA Civil Code 1798.90.53, the Campus ALPRAuthority will ensure that this policy is posted conspicuously on the UCSD PDweb site that is accessible to the public. B. The Chief of UCSD PD isresponsible for ensuring that a public notice is posted at the entrance(s) ofany facility with fixed ALPR cameras associated with UCSD PD. VI. Violations Sanctions for violations of this policymay include disciplinary action up to and including termination ofemployment in accordance with the applicable disciplinary procedure. PROCEDURES None FORMS None RELATED INFORMATION A. https://police.ucsd.edu/resources/immigration.html B. https://undoc.universityofcalifornia.edu/ C. CA Civil Code 1798.90.5 D. CA Civil Code 1798.90.51 E. CA Civil Code 1798.90.53 F. CA Civil Code 1798.90.55 G. CA Civil Code 1798.29(g) (1) (F). H. University of California BFB-IS-3:Electronic Information Security I. University of California PPSM-21 Selection andAppointment J. UC Protection LevelClassification Guide K. UC InstitutionalInformation Disposal Standard L. UC San Diego Policy andProcedure Manual PPM 135-3 Network Security M. UC San Diego Policy andProcedure Manual PPM 545-5 Automated License Plate Reader Policy (Department ofTransportation Services) N. UC Records Retention Schedule FREQUENTLY ASKEDQUESTIONS (FAQs) 1. What are ALPRs? An Automated License Plate Recognition (ALPR or LPR) systemis a computer based, information gathering system that utilizes speciallydesigned cameras to rapidly capture an image of a vehicle license plate andrecognize the plate characters using optical character recognition technology in addition to make, model, color and speed data. This datacan then be searched for in a database. The ALPR System collects: License plate image capture,license plate number, license plate state, portions of the vehicle andsurrounding areas within frame, and the location of the vehicle, date, and timethe image was taken, as well as the make, model, color, and speed of thevehicle (ALPR Information). 2. How does UCSD PD useALPRs? UC San Diego PD uses both mobile and fixed ALPR Systems,which capture and store digital images that include license plates in areasvisible to the public and use character recognition algorithms to identify andstore plate information. The system creates a searchable computerizeddatabase. UCSD PD utilizes ALPR technology to scan, detect, andidentify license plate numbers which appear on a listof license plate numbers and letters that law enforcement agencies use toidentify vehicles of interest (Hot Lists) and locating stolen vehicles.In capturing license plates, ALPR systems also capture images that can be usedfor criminal investigations. ALPR data is law enforcement information and willbe used solely for law enforcement purposes. Any non-law enforcement usage ofUCSD PD ALPR Information is strictly prohibited. REVISION HISTORY 05/05/2026 This policy was originally issued.