Virginia Governor Signs Warrant Requirement For Police Drone Use; Balks At Seven-Day Limit On ALPR Data Retention

from the aww...-and-he-was-doing-so-good-on-the-civil-liberties-front dept

Good news/bad news from the state of Virginia. Governor Terry McAuliffe had two bills land on his desk, both passed with overwhelming support, that would have assured additional privacy protections for the state's citizens. Unfortunately, he only signed one of them.

The one with his signature on it institutes a warrant requirement for law enforcement drone usage. McAuliffe originally sent this one back with a suggested "fixes" that would have rendered the proposed warrant requirement completely meaningless.

Rather than require a warrant for all law enforcement use of drones, the governor's amendments only require warrants for “active criminal investigations,” leaving the door open for persistent, untargeted drone surveillance. Rather than ban the use of evidence collected without a warrant by drones, the governor's amendments created a procedural loophole where otherwise forbidden evidence could be introduced under a different set of legal standards.
To their credits, the legislators who had passed the bill without massive loopholes refused to fold in the governor's suggested amendments. The second time it hit his desk, McAuliffe signed it. This passage can be added to the state's privacy "wins" column, which also includes a warrant requirement for Stingray use.

The bad news is that McAuliffe rejected a bill that would have placed a seven-day retention limit on data gathered by automatic license plate readers. McAuliffe argued -- correctly -- that this limit was significantly lower than any policy currently in place in Virginia. (And, most likely, anywhere in the nation.) Unfortunately, he used ALPR/law enforcement talking points to do so.
Many localities in Virginia retain this data for 60 days to two years. Seven days is a substantial reduction. Additionally, law enforcement agencies demonstrate that crimes are often not reported until several weeks later. Under this bill, essential data would not be available at the time of those reports. This is particularly concerning when considering implications for the National Capitol Region, where cross-state collaboration and information-sharing are essential to responding to potential criminal or terrorist activity occurring near Virginia’s borders.
Oh, "terrorism," you rascally, constantly useful justification! Where will you pop up next? (Probably not in areas actually loaded with terrorists, I would guess.)

Unlike drones and Stingrays, ALPRs weren't originally crafted for use by military personnel in war zones. But here we see the invocation of terrorism as a justification for passively scanning thousands-to-millions of license plates every day. Sure, any vehicle traveling in public areas can be observed, but multi-point collections of plate/location data gives anyone with access a very clear picture of someone's daily life. While we would expect people currently under investigation to be closely watched by police (and/or "tailed" by proxy by ALPR data), we don't expect everyone to be subject to the same level of scrutiny simply because the technology has liberated law enforcement officers from performing in-person surveillance.

The destruction of non-hit data within a short time frame shouldn't be a concern, no matter how much crime/terrorism is afoot in the Virginia area. The amount of plate/location data that can be hauled in by ALPRs is astounding. And the "cross-state collaborations" and "information-sharing" the governor points to only adds to the massive haul. If a potential suspect's information falls into the seven-day memory hole, there's a good chance it will return to the database within a matter of days.

As for the stated concern about the lag between criminal activity and its reporting? Well, what did officers do before they had historical ALPR data to rely on? Surely those investigative methods still exist. ALPRs may have made the job easier, but they didn't destroy previously-existent investigative techniques upon deployment.

On top of this, there's the fact that if McAuliffe doesn't pass this law with the limitation intact, state ALPR usage will continue to violate ANOTHER law.
[M]cAuliffe fails to mention [that] law enforcement agencies are already breaking Virginia’s Data Act by storing ALPR data, as the Virginia Attorney General determined in a 2013 legal opinion [PDF].
If he decides to pass the bill with the limit in place, his state may also enjoy a more favorable outcome to the ALPR-related lawsuit filed against it.
Five days after McAuliffe signed the bills, the [ACLU of Virginia] filed a lawsuit [PDF] against the Fairfax County Police Department, which, despite the Attorney General’s guidance, has been storing ALPR data for up to a year and sharing that data with other law enforcement agencies in the region.
And then there's the fact that ALPRs have been abused by state police and no one in Virginia law enforcement seems to know whether the systems are actually helping apprehend more criminals.

McAuliffe has already sided with his constituents' privacy on two previous bills. There's a lot of ground for compromise between the seven days the bill asks for and the "up to a year" time limit law enforcement agencies already enjoy. That this bill also landed on his desk with overwhelming legislative support is a pretty good indication that Virginians would like the retention needle pushed closer to one week. Hopefully, he'll make the right call and continue to allow his state to lead the nation in privacy protections.

Hide this

Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.

Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.

While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.

–The Techdirt Team

Filed Under: alpr, drones, license plate readers, privacy, surveillance, terry mcauliffe, virginia


Reader Comments

Subscribe: RSS

View by: Time | Thread


  • identicon
    David H, 7 May 2015 @ 5:25pm

    The bill is dead ... for now

    Hate to say it, but this post's hope / suggestion that something could still change is wrong. McAuliffe has vetoed it, and the bill is dead for this year. See http://lis.virginia.gov/cgi-bin/legp604.exe?151+sum+SB965

    McAuliffe wrongly claims the bill was rushed or needs more study. As a fig leaf, he says LPRs and other law enforcement tech issues will be studied by his "Secure Commonwealth" panel, which is run by public safety officials and composed of ... wait for it ... mostly law enforcement and their allies. See https://pshs.virginia.gov/initiatives/secure-commonwealth-panel/ You don't need 3 guesses to see how that plays out.

    The bottom line is that McAuliffe is perfectly fine with the surveillance state and law enforcement talking points.

    The bill's sponsor's vow to bring it back next year. Hopefully they can muster enough support to flat out override McAuliffe's inevitable veto / watering down next year.

    link to this | view in chronology ]

  • icon
    kenichi tanaka (profile), 7 May 2015 @ 6:17pm

    Our country has survived for more than 200 years without the retention of ALPR data. So why all the rush to retain this data? If I didn't know any better, I'd swear that our ELECTED OFFICIALS don't trust Americans any more, those same American morons who keep electing the same American morons who are in favor of these kind of bills/laws.

    Morons who support laws like The Patriot Act, ALPR data retentions, metadata retention and anything that compromises the privacy rights of any citizen in this country should not be voted into office.

    We need a law that says that no American can run for elected office if they support any law, amendment or resolution that compromises any of our constitutional rights.

    link to this | view in chronology ]

    • icon
      John Fenderson (profile), 8 May 2015 @ 7:57am

      Re:

      "Our country has survived for more than 200 years without the retention of ALPR data"

      Well, there were no license plates at all until Massachusetts issued the first one in 1903, so it's more like 112 years. It doesn't seem right to count the time earlier than that.

      link to this | view in chronology ]

  • icon
    kenichi tanaka (profile), 7 May 2015 @ 6:19pm

    Let me add that any politician who votes for such bills as I stated above should be removed from office immediately upon their vote.

    link to this | view in chronology ]

  • identicon
    Anonymous Coward, 7 May 2015 @ 6:44pm

    How about a law against the police abusing their power and terrorizing law abiding citizens. Or even better force the police to learn that laws that prohibit their already illegal dirty cop behavior.

    link to this | view in chronology ]


Follow Techdirt
Essential Reading
Techdirt Deals
Report this ad  |  Hide Techdirt ads
Techdirt Insider Discord

The latest chatter on the Techdirt Insider Discord channel...

Loading...
Recent Stories

This site, like most other sites on the web, uses cookies. For more information, see our privacy policy. Got it
Close

Email This

This feature is only available to registered users. Register or sign in to use it.