Virginia Governor Signs Warrant Requirement For Police Drone Use; Balks At Seven-Day Limit On ALPR Data Retention

from the aww...-and-he-was-doing-so-good-on-the-civil-liberties-front dept

Good news/bad news from the state of Virginia. Governor Terry McAuliffe had two bills land on his desk, both passed with overwhelming support, that would have assured additional privacy protections for the state’s citizens. Unfortunately, he only signed one of them.

The one with his signature on it institutes a warrant requirement for law enforcement drone usage. McAuliffe originally sent this one back with a suggested “fixes” that would have rendered the proposed warrant requirement completely meaningless.

Rather than require a warrant for all law enforcement use of drones, the governor’s amendments only require warrants for “active criminal investigations,” leaving the door open for persistent, untargeted drone surveillance. Rather than ban the use of evidence collected without a warrant by drones, the governor’s amendments created a procedural loophole where otherwise forbidden evidence could be introduced under a different set of legal standards.

To their credits, the legislators who had passed the bill without massive loopholes refused to fold in the governor’s suggested amendments. The second time it hit his desk, McAuliffe signed it. This passage can be added to the state’s privacy “wins” column, which also includes a warrant requirement for Stingray use.

The bad news is that McAuliffe rejected a bill that would have placed a seven-day retention limit on data gathered by automatic license plate readers. McAuliffe argued — correctly — that this limit was significantly lower than any policy currently in place in Virginia. (And, most likely, anywhere in the nation.) Unfortunately, he used ALPR/law enforcement talking points to do so.

Many localities in Virginia retain this data for 60 days to two years. Seven days is a substantial reduction. Additionally, law enforcement agencies demonstrate that crimes are often not reported until several weeks later. Under this bill, essential data would not be available at the time of those reports. This is particularly concerning when considering implications for the National Capitol Region, where cross-state collaboration and information-sharing are essential to responding to potential criminal or terrorist activity occurring near Virginia’s borders.

Oh, “terrorism,” you rascally, constantly useful justification! Where will you pop up next? (Probably not in areas actually loaded with terrorists, I would guess.)

Unlike drones and Stingrays, ALPRs weren’t originally crafted for use by military personnel in war zones. But here we see the invocation of terrorism as a justification for passively scanning thousands-to-millions of license plates every day. Sure, any vehicle traveling in public areas can be observed, but multi-point collections of plate/location data gives anyone with access a very clear picture of someone’s daily life. While we would expect people currently under investigation to be closely watched by police (and/or “tailed” by proxy by ALPR data), we don’t expect everyone to be subject to the same level of scrutiny simply because the technology has liberated law enforcement officers from performing in-person surveillance.

The destruction of non-hit data within a short time frame shouldn’t be a concern, no matter how much crime/terrorism is afoot in the Virginia area. The amount of plate/location data that can be hauled in by ALPRs is astounding. And the “cross-state collaborations” and “information-sharing” the governor points to only adds to the massive haul. If a potential suspect’s information falls into the seven-day memory hole, there’s a good chance it will return to the database within a matter of days.

As for the stated concern about the lag between criminal activity and its reporting? Well, what did officers do before they had historical ALPR data to rely on? Surely those investigative methods still exist. ALPRs may have made the job easier, but they didn’t destroy previously-existent investigative techniques upon deployment.

On top of this, there’s the fact that if McAuliffe doesn’t pass this law with the limitation intact, state ALPR usage will continue to violate ANOTHER law.

[M]cAuliffe fails to mention [that] law enforcement agencies are already breaking Virginia’s Data Act by storing ALPR data, as the Virginia Attorney General determined in a 2013 legal opinion [PDF].

If he decides to pass the bill with the limit in place, his state may also enjoy a more favorable outcome to the ALPR-related lawsuit filed against it.

Five days after McAuliffe signed the bills, the [ACLU of Virginia] filed a lawsuit [PDF] against the Fairfax County Police Department, which, despite the Attorney General’s guidance, has been storing ALPR data for up to a year and sharing that data with other law enforcement agencies in the region.

And then there’s the fact that ALPRs have been abused by state police and no one in Virginia law enforcement seems to know whether the systems are actually helping apprehend more criminals.

McAuliffe has already sided with his constituents’ privacy on two previous bills. There’s a lot of ground for compromise between the seven days the bill asks for and the “up to a year” time limit law enforcement agencies already enjoy. That this bill also landed on his desk with overwhelming legislative support is a pretty good indication that Virginians would like the retention needle pushed closer to one week. Hopefully, he’ll make the right call and continue to allow his state to lead the nation in privacy protections.




Filed Under: , , , , , ,

Rate this comment as insightful
Rate this comment as funny
You have rated this comment as insightful
You have rated this comment as funny
Flag this comment as abusive/trolling/spam
You have flagged this comment
The first word has already been claimed
The last word has already been claimed
Insightful Lightbulb icon Funny Laughing icon Abusive/trolling/spam Flag icon Insightful badge Lightbulb icon Funny badge Laughing icon Comments icon

Comments on “Virginia Governor Signs Warrant Requirement For Police Drone Use; Balks At Seven-Day Limit On ALPR Data Retention”

Subscribe: RSS Leave a comment
5 Comments
David Hsays:

The bill is dead ... for now

Hate to say it, but this post’s hope / suggestion that something could still change is wrong. McAuliffe has vetoed it, and the bill is dead for this year. See http://lis.virginia.gov/cgi-bin/legp604.exe?151+sum+SB965

McAuliffe wrongly claims the bill was rushed or needs more study. As a fig leaf, he says LPRs and other law enforcement tech issues will be studied by his “Secure Commonwealth” panel, which is run by public safety officials and composed of … wait for it … mostly law enforcement and their allies. See https://pshs.virginia.gov/initiatives/secure-commonwealth-panel/ You don’t need 3 guesses to see how that plays out.

The bottom line is that McAuliffe is perfectly fine with the surveillance state and law enforcement talking points.

The bill’s sponsor’s vow to bring it back next year. Hopefully they can muster enough support to flat out override McAuliffe’s inevitable veto / watering down next year.

kenichi tanakasays:

Our country has survived for more than 200 years without the retention of ALPR data. So why all the rush to retain this data? If I didn’t know any better, I’d swear that our ELECTED OFFICIALS don’t trust Americans any more, those same American morons who keep electing the same American morons who are in favor of these kind of bills/laws.

Morons who support laws like The Patriot Act, ALPR data retentions, metadata retention and anything that compromises the privacy rights of any citizen in this country should not be voted into office.

We need a law that says that no American can run for elected office if they support any law, amendment or resolution that compromises any of our constitutional rights.

Add Your Comment

Your email address will not be published. Required fields are marked *

Have a Techdirt Account? Sign in now. Want one? Register here

Comment Options:

Make this the or (get credits or sign in to see balance) what's this?

What's this?

Techdirt community members with Techdirt Credits can spotlight a comment as either the "First Word" or "Last Word" on a particular comment thread. Credits can be purchased at the Techdirt Insider Shop »

Follow Techdirt

Techdirt Daily Newsletter

Techdirt Deals
Report this ad??|??Hide Techdirt ads
Techdirt Insider Discord
The latest chatter on the Techdirt Insider Discord channel...
Loading...
Older Stuff
12:25 Australian Privacy Commissioner Says 7-Eleven Broke Privacy Laws By Scanning Customers' Faces At Survey Kiosks (6)
10:50 Missouri Governor Doubles Down On 'View Source' Hacking Claim; PAC Now Fundraising Over This Bizarrely Stupid Claim (45)
10:45 Daily Deal: The All-in-One Microsoft, Cybersecurity, And Python Exam Prep Training Bundle (0)
09:43 Want To Understand Why U.S. Broadband Sucks? Look At Frontier Communications In Wisconsin, West Virginia (8)
05:36 Massachusetts College Decides Criticizing The Chinese Government Is Hate Speech, Suspends Conservative Student Group (71)
19:57 Le Tigre Sues Barry Mann To Stop Copyright Threats Over Song, Lights Barry Mann On Fire As Well (21)
16:07 Court Says City Of Baltimore's 'Heckler's Veto' Of An Anti-Catholic Rally Violates The First Amendment (15)
13:37 Two Years Later, Judge Finally Realizes That A CDN Provider Is Not Liable For Copyright Infringement On Websites (21)
12:19 Chicago Court Gets Its Prior Restraint On, Tells Police Union Head To STFU About City's Vaccine Mandate (158)
10:55 Verizon 'Visible' Wireless Accounts Hacked, Exploited To Buy New iPhones (8)
10:50 Daily Deal: The MacOS 11 Course (0)
07:55 Suing Social Media Sites Over Acts Of Terrorism Continues To Be A Losing Bet, As 11th Circuit Dumps Another Flawed Lawsuit (11)
02:51 Trump Announces His Own Social Network, 'Truth Social,' Which Says It Can Kick Off Users For Any Reason (And Already Is) (100)
19:51 Facebook AI Moderation Continues To Suck Because Moderation At Scale Is Impossible (26)
16:12 Content Moderation Case Studies: Snapchat Disables GIPHY Integration After Racist 'Sticker' Is Discovered (2018) (11)
13:54 Arlo Makes Live Customer Service A Luxury Option (8)
12:05 Delta Proudly Announces Its Participation In The DHS's Expanded Biometric Collection Program (5)
11:03 LinkedIn (Mostly) Exits China, Citing Escalating Demands For Censorship (14)
10:57 Daily Deal: The Python, Git, And YAML Bundle (0)
09:37 British Telecom Wants Netflix To Pay A Tax Simply Because Squid Game Is Popular (32)
06:41 Report: Client-Side Scanning Is An Insecure Nightmare Just Waiting To Be Exploited By Governments (35)
20:38 MLB In Talks To Offer Streaming For All Teams' Home Games In-Market Even Without A Cable Subscription (10)
15:55 Appeals Court Says Couple's Lawsuit Over Bogus Vehicle Forfeiture Can Continue (15)
13:30 Techdirt Podcast Episode 301: Scarcity, Abundance & NFTs (0)
12:03 Hollywood Is Betting On Filtering Mandates, But Working Copyright Algorithms Simply Don't Exist (66)
10:45 Introducing The Techdirt Insider Discord (4)
10:40 Daily Deal: The Dynamic 2021 DevOps Training Bundle (0)
09:29 Criminalizing Teens' Google Searches Is Just How The UK's Anti-Cybercrime Programs Roll (19)
06:29 Canon Sued For Disabling Printer Scanners When Devices Run Out Of Ink (41)
20:51 Copyright Law Discriminating Against The Blind Finally Struck Down By Court In South Africa (7)
More arrow