Congress is taking a closer look at a fast-growing surveillance tool that records where cars travel and when they were there.
As Sen. Josh Hawley of Missouri opens an investigation into Flock Safety and other automated license plate readers and the handling of collected motorist data, we examine New Jersey's regulations for limiting misuse while allowing police agencies to share information statewide.
New Jersey requires anyone authorized to use ALPR technology or access the collected data to complete directive-mandated training, and agencies must track and audit that training as part of their annual compliance reviews, according to online state policy.
Law enforcement agencies that use ALPR technology must track their compliance by:
Keeping a list of who is authorized to use ALPRs.
Recording when each authorized user last completed ALPR training.
Checking during annual audits that only trained, authorized people accessed the system.
Reviewing samples of system use to look for misuse or policy violations.
Reporting audit results to county and state oversight officials.
Story continues below photo gallery.
Police cannot freely access personal information linked to a license plate. They must have a specific, legitimate reason to look up identifying information about a vehicle owner, according to safeguards from the state attorney general's Directive 2022-12.
ALPR data is kept for three years.
The attorney general's directive reduced the retention period from five years to three years.
The directive created a statewide system so agencies can share ALPR information with one another.
It requires agencies to use standardized formats so the data is consistent statewide.
Each agency must have an ALPR coordinator.
Counties and the state also have designated coordinators.
The coordinators help oversee the program and how information is shared.
Yes. The directive requires annual audits of agencies' ALPR programs to check compliance and identify misuse.
Yes. It sets out a process for releasing ALPR data in criminal prosecutions.
Police cannot freely identify vehicle owners. Law enforcement can't use a license plate scan to get personal information about a vehicle owner. Officers must have a specific reason before accessing identifying information associated with a plate.
Oversight must exist at several levels. The directive calls for ALPR coordinators at all levels of law enforcement using the technology: local, county and state. The coordinators are responsible for oversight, accountability and monitoring the use of ALPR systems and data.
Data retention is limited. The attorney general's most recent policy reduced the storage period for ALPR data from five years to three years, limiting how long vehicle location records can be retained.
Annual audits must be conducted. Law enforcement agencies must conduct yearly audits of their ALPR programs. The audits are intended to verify proper use, identify potential misuse and document compliance with the directive.
Users are required to be trained in the technology. The attorney general's directive requires training for anyone who is authorized to use ALPR systems or access the data. That is intended to ensure users understand the rules and restrictions governing the technology.
There are restrictions on releasing ALPR data. There is a process for releasing ALPR data in criminal cases rather than allowing unrestricted disclosure.
All agencies must monitor for misuse of the technology and data.
The audit process includes reviews of ALPR activity and documentation to detect improper access or use. Agencies must report significant violations and complaints.
This article originally appeared on NorthJersey.com: As Flock faces scrutiny, here's how NJ regulates ALPRs