Report 2019-118 Recommendation 49 Responses

Report 2019-118: Automated License Plate Readers: To Better Protect Individuals' Privacy, Law Enforcement Must Increase Its Safeguards for the Data It Collects (Release Date: February 2020)

Recommendation #49 To: Sacramento County Sheriff's Department

To ensure that ALPR system access is limited to agency staff who have a need and a right to use ALPR data, by April 2020, Sacramento should review all user accounts and deactivate accounts for separated employees, inactive users, and others as necessary.

Annual Follow-Up Agency Response From October 2021

The Sacramento County Sheriff's Office initially reviewed all user accounts and deactivated accounts for employees who had not accessed their accounts within six (6) months. All ALPR accounts are currently set to deactivate after 90 days of inactivity automatically. Furthermore, user accounts for personnel who separate from the Sheriff's Office or no longer need access to the ALPR system are deactivated. When an account is deactivated after 90 days, and the user account needs to be reactivated, the employee must go through the approval process and complete the required ALPR training course before being granted access. As of October 2021, 495 of 2237 employees (22.1%) have access to the ALPR system.

California State Auditor's Assessment of Annual Follow-Up Status: Fully Implemented


1-Year Agency Response

As of April 20, 2021, the Sacramento County Sheriff's Department had not provided a response on the recommendations in this audit.

California State Auditor's Assessment of 1-Year Status: Pending


6-Month Agency Response

The Sacramento County Sheriff's Department did not provide a six-month response to this recommendation.

California State Auditor's Assessment of 6-Month Status: Pending


60-Day Agency Response

The Sacramento County Sheriff's Department did not provide a 60-day response.

California State Auditor's Assessment of 60-Day Status: Pending


All Recommendations in 2019-118

Agency responses received are posted verbatim.