ORDINANCE NO. NS.300.897 AN ORDII..{A.I..{CE OF THE BOARD OF SUPERVISORS OF THE COUNTY OF SANTA CLARA ADDING DIVISION A4O OF THE COUNTY OF SANTA CLARA ORDINANCE CODE RELATING TO SURVEILLANCE.TECHNOLOGY AND COMMUNITYSAFETY Summary This Ordinance adds Division 440 relating to the Boardapproval requirement for the acquisition and operation of surveillance equipment, and for a related surveillance use policy. THE BOARD OF SUPERVISORS OF THE COUNTY OF SANTA CLARA ORDAINS AS FOLLOWS: Title A of the Ordinance Code of the County of Santa Clara is hereby amended by adding. a new Division to be numbered and titled and to read as follows: DIVISION A4O SURVEILLANCE-TECHNOLOGY AND COMMUNITY.SAFETY Sec.440-1. Findings. The California Constitution provides that all people have an inalienable right to privacy, which is just as explicitly described in the California Constitution as the right to enjoy and defend life and liberty; the right to acquire, possess, and protect property; and the right to pursue and obtain safety and happiness. State and federal courts, including both the California Supreme Court and the United States Supreme Court, have affirmed individuals' fundamental right to privacy, and the Board finds that protecting and safeguarding this right is a vital part of its duties. Acknowledging the significance of protecting the privacy of County citizens, the Board finds that surveillance technology may also be a valuable tool to bolster community safety and aid in the investigation and prosecution of crimes. To balance the public's right to privacy with the need to promote and ensure community safety, the Board finds that any decision to use surveillance technology must be judiciously balanced with an assessment of the costs to the County and the protection of privacy, civil liberties and civil rights. The Board finds that proper transparency, oversight, and accountability are fundamental to minimizing the risks posed by surveillance technologies. The Board finds it essential to have an informed public Ordinance NS-300.897 re Surveillance-Technology and Community-Safety Page I of 10 sl24lt6 discussion before deploying surveillance technology, and that safeguards should be in place to address potential privacy, civil liberties, and civil rights issues before any new surveillance technology is deployed. The Board finds that if surveillance technology is acquired and deployed, there must be continued oversight and regular evaluation to ensure that safeguards are being followed and that the Board is assessing the surveillance technology's benefits and potential benefits in addition to its costs and potential costs. Sec. 440-2. Board Approval Requirement for Acquisition and Operation of Surveillance Equipment, and for Related Surveillance Use Policy (A) Countv Deoartments Other than the Sheriff s Office and l)istrict Attornev's Office. Each County department other than the Sheriff s Office and District Attorney's Office must obtain Board approval at a properly-noticed public meeting, on the regular (non-consent) calendar, before any of the following: (1) (2) (3) (4) Seeking funds for surveillance technology, including but not limited to, applying for a grant, or accepting state or federal funds, or in-kind or other donations; Acquiring new suryeillance technology, including but not limited to procuring that technology without the exchange of monies or other consideration; Using surveillance technology for a pu{pose, in a manner, or in a location not previously approved by the Board; or Entering into an agreement with a non-County entity to acquire, share, or otherwise use surveillance technology or the information it provides. Those County departments must also obtain Board approval of a Surveillance Use Policy at a properly-noticed public meeting, on the regular (non-consent) calendar, before engaging in any of the activities described in subsections (A)(2), (AX3), and (A)(a). (B) Sheriff s Office and District Attorne)¡'s Office. Other than with respect to surveillance technology limited to use in law enforcement investigations and prosecutions as specifically defined in Sec. 440-9 of this Division, and subject to Sec. 440-2(C) below, the Sheriff s Office and District Attorney's Office must notify the Board, and obtain Board approval, at a properly-noticed public meeting, on the regular (non-consent) calendar, before any of the following: (1) Seeking funds for surveillance technology, including but not limited to, applying for a grant, or accepting state or federal funds, or in-kind or other donations; Ordinance NS-300. 897 re Surveillance-Technology and Community-Safety Page 2 of l0 sl24/t6 (2) (3) (4) Acquiring new surveillance technology, including but not limited to procuring that technology without the exchange of monies or other consideration; Using surveillance technology for a purpose, in a manner, or in a location not previously approved by the Board; or Entering into an agreement with a non-County entity to acquire, share, or otherwise use surveillance technology. The Sheriff s Offîce and the District Attorney's Office must also notify the Board, and obtain Board approval, of a Surveillance Use Policy at a properly-noticed public meeting, on the regular (non-consent) calendar, before engaging in any of the activities described in subsections (B)(2), (BX3), and (B)(a). (C) In enacting this Division, the Board is not limiting its rights under Government Code section 25303, including without limitation, its right to supervise the official conduct of all county officers, to require reports, or to exercise budgetary authority over the district attorney and sheriff. (D) Consistent with California Government Code section 25303, however, in receiving notification and approving or denying the actions in subsections (B)(1), (BX2), (BX3), and (B)(a), and approving, and/or denying any Surveillance Use Policy, the Board shall not "obstruct the investigative function of the sheriff of the county nor shall it obstruct the investigative and prosecutorial function of the district attorney." (E) To the extent the Board or a court of law determines that approving or denying the actions in subsections (B)(1), (BX2), (BX3), or (B)(4), or approving or denying the Surveillance Use Policy would unlawfully "obstruct" the applicable function of the sheriff or district attorney under Government Code section 25303, the Board shall simply receive and discuss notification from the Sheriff s Office or District Attorney's Office regarding subsections (B)(1), (BX2), (BX3), or B(4) and receive and discuss the applicable Surveillance Use Policy at a properly-noticed public meeting, on the regular (non-consent) calendar. Sec. 440-3. Information Required Unless it is not reasonably possible or feasible to do so (e.g., exigent circumstances, a natural disaster, or technological problems prevent it, etc.), the County department seeking approval under Section A40-2 of this Division must submit to the Board an Anticipated Surveillance Impact Report and a proposed Surveillance Use Policy before the public meeting. The County shall publicly release printed and online copies of Ordinance NS-300.897 re Surveillance-Technology and Community-Safety Page 3 of l0 5/24116 the Anticipated Surveillance Impact Report and proposed Surveillance Use Policy before the public meeting. Sec. 440-4. Determination by Board that Benefits Outweigh Costs and Concerns Before approving any action described in Section 440-2(A) and A40-2(B) of this Division, the Board shall assess whether the benefits to the impacted County department(s) and the community of the surveillance technology outweigh the costsincluding both the financial costs and reasonable concerns about the impact on and safeguards for privacy, civil liberties, and civil rights. Sec. 440-5. Compliance for Existing Surveillance Technologies Each County department possessing or using surveillance technology before the effective date of this Ordinance shall submit a proposed Surveillance Use Policy for that surveillance technology no later than one-hundred eighty (180) days following the effective date of this Ordinance, for review and approval by the Board at a properlynoticed public meeting, on the regular (non-consent) calendar. If a County department is unable to meet this 180-day timeline, the Department may notify the Board in writing of the department's request to extend this period and the reasons for that request. The Board may grant County departments extensions of up to 90 days beyond the 180-day timeline to submit a proposed Surveillance Use Policy. Consistent with California Government Code section 25303, in approving or denying a Surveillance Use Policy from the Sheriff s Office or the District Attorney's Office, the Board shall not "obstruct the investigative function of the sheriff of the county nor shall it obstruct the investigative and prosecutorial function of the district attomey." To the extent the Board or a court of law determines that approving or denying the Surveillance Use Policy would unlawfully "obstruct" under Government Code section 25303, the Board shall simply receive and discuss the applicable Surveillance Use Policy at a properly-noticed public meeting, on the regular (non-consent) calendar. Sec. (A) 440-6. Oversight Following Board Approval A County department that obtained approval for the use of surveillance technology or the information it provides under Section 440-2(A)(3) or 440-2(AX4), A402(BX3),440-2(BX4), or A40-5 of this Division, must submit an Annual Surveillance Report within twelve (12) months of Board approval, and annually thereafter on or before November l. Similarly, if the Board received but did not approve a Surveillance Use Policy from the Sheriff s Office or District Attorney's office because of limitations of the Board's authority under Government Code Ordinance NS-300.897 re Surveillance-Technology and Community-Safety Page 4 of 10 5l24lt6 section 25303, the Sheriff s Office or District Attorney's Office, as applicable, must still submit an Annual Surveillance Use Report within twelve (12) months of the Board's receipt of the Surveillance Use Policy, and annually thereafter on or before November 1. (B) Based upon information provided in the Annual Surveillance Report, the Board shall determine whether the benefits to the impacted County department(s) and the community of the surveillance technology outweigh the costs and whether reasonable safeguards exist to address reasonable concerns regarding privacy, civil liberties, and civil rights impacted by deployment of the surveillance technology. If the benefits or reasonably anticipated benefits do not outweigh the costs or civil liberties or civil rights are not reasonably safeguarded, the Board shall consider (1) directing that the use of the surveillance technology cease; (2) requiring modifications to the Surveillance Use Policy that are designed to address the Board's concerns; and/or (3) directing a report-back from the department regarding steps taken to address the Board's concems. (C) No later than January 15 of each fiscal year, the Board shall hold a public meeting, with Annual Surveillance Reports agendized on the regular (non-consent) calendar, and publicly release a report that includes the following information for the prior year: (1) A summary of all requests for Board approval and all notifications and Surveillance Use Policies received by the Board pursuant to Section A40-2 or Section 440-5 of this Division, including whether the Board approved, rejected, or received the proposal or notification, and,/or required changes to a proposed Surveillance Use Policy before approval; and, (2) All Annual Surveillance Reports submitted. Sec.A40-7. Defïnitions The following definitions apply to this Division: (A) "Annual Surveillance Report" means a written report concerning specific surveillance technology that includes all of the following: (l) A description of how the surveillance technology was used, including whether it captured images, sound, or information regarding members of the public who are not suspected of engaging in unlawful conduct; Ordinance NS-300. 897 re Surveillance-Technology and Community-Safety Page 5 of l0 sl24t16 (2) (3) (4) (s) (6) (7) 'Whether and how often data acquired through the use of the surveillance technology was shared with outside entities, the name of any recipient entity, the type(s) of data disclosed, under what legal standard(s) the information was disclosed, and the justification for the disclosure; A summary of community complaints or concerns about the surveillance technology; The results of any non-privileged internal audits, any information about violations of the Surveillance Use Policy, and any actions taken in response; Whether the surveillance technology has been effective at achieving its identified purpose; Statistics and information about public records act requests; Total annual costs for the surveillance technology, including personnel and other ongoing costs, and what source of funding will fund the technology in the comingyear. (B) "CounQr department" means any County department with arecognized County budget unit. (C) "Surveillance technology" means any electronic device, system using an electronic device, or similar technological tool used, designed, or primarily intended to collect, retain, process, or share audio, electronic, visual, location, thermal, olfactory or similar information specifically associated with, or capable of being associated with, any individual or group. Examples of surveillance technology include, but are not limited to, drones with cameras or monitoring capabilities, automated license plate readers, closed-circuit cameras/televisions, cell-site simulators, International Mobile Subscriber Identity (IMSD trackers, Global Positioning System (GPS) technology, radio-frequency identification (RFID) technology, biometrics-identification technology, and facial-recognition technology. For purposes of this Division, surveillance technology does not include standard word-processing software; information-technology-protection tools such as webfiltering; medical equipment used to diagnose, treat, or prevent disease or injury; Public Defender or District Attorney case-management databases; publicly available databases; or standard telephone-message equipment that stores the author of a document or the time a phone message was left on a County voicemail, for example. For purposes of the acquisition and annual reporting requirements in this Division, surveillance technology also does not include County-owned cell phones with the Ordinance NS-300.897 re Surveillance-Technology and Community-Safety Page 6 of l0 5/24116 capacity to capture audio or video footage; or recording devices used exclusively with the express consent of everyone captured on the recording devices; but use of a County-owned cell phone or recording device for an illegal or unauthorized surveillance purpose violates this Division. (D) "Anticipated Surveillance Impact Report" means a publicly-released written report including at a minimum the following: (l) (2) (3) (4) (s) (E) Information describing the surveillance technology and how it works; Information on the proposed purpose(s) for the surveillance technology; The location(s) it may be deployed; The potential impact(s) on civil liberties and privacy, and a description of whether there is a plan to address the impact(s); and, The fiscal costs for the surveillance technology, including initial purchase, personnel and other ongoing costs, and any current orpotential sources of funding. "surveillance Use Policy" means a publicly-released policy for use of the surveillance technology, vetted through County Counsel and submitted to and approved by the Board at a properly-noticed public meeting on the regular (nonconsent) calendar. The Surveillance Use Policy shall at a minimum specify the following: (l) (2) (3) (4) (s) (6) (7) Purpose: The specific purpose(s) for the surveillance technology. Authorized Use: The uses that are authorized,the rules and processes required before that use, and the uses that are prohibited. Data Collection: The information that can be collected by the surveillance technology. Data Access: The individuals who can access or use the collected information, and the rules and processes required before access or use of the information. Data Protection: The safeguards that protect information from unauthorized access, including, but not limited to, encryption, access-control, and accessoversight mechanisms. Data Retention: The time period, if any, for which information collected by the surveillance technology will be routinely retained, the reason that retention period is appropriate to further the purpose(s), the process by which the information is regularly deleted after that period lapses, and the conditions that must be met to retain information beyond that period. Public Access: If and how collected information can be accessed by members of the public, including criminal defendants. Ordinance NS-300.897 re Surveillance-Technology and Community-Safety Page 7 of l0 5l24lt6 (8) (9) (10) (F) Sec. Third-Part]¡ Data-Sharing: If and how other Counly or non-County entities can access or use the information, including any required justification and legal standard necessary to do so, and any obligation(s) imposed on the recipient of the information. Training: The training, if any, required for any individual authorized to use the surveillance technology or to access information collected by the surveillance technology, including whether there are training materials. Oversight: The mechanisms to ensure that the Surveillance Use Policy is followed, including, but not limited to, identifying personnel assigned to ensure compliance with the policy, internal recordkeeping of the use of the technology or access to information collected by the technology, technical measures to monitor for misuse, any independent person or entity with oversight authority, and the sanctions for violations of the policy. "Exigent circumstances" means the County Sheriff s Office or District Attorney's Office's good faith belief that an emergency involving danger of death or serious physical injury to any person requires use of the surveillance technology or the information it provides. 440-8. Severability The provisions of this Division are severable. If any section, subsection, paragraph, sentence, clause or phrase of this Division is for any reason held unconstitutional or invalid, the remaining parts of this Division shall remain fully effective. If the application of any part of this Division to any person or circumstance is held invalid, the application of that part of this Division shall not be affected regarding other persons or circumstances. Sec. 440-9. Temporary Acquisition and Use of Surveillance Equipment Related to Law Enforcement Investigations and Prosecutions Notwithstanding the provisions of this Division, the County Sheriff s Office and District Attorney's Office may temporarily acquire or temporarily use surveillance technology in exigent circumstances without following the provisions of this ordinance before that acquisition or use unless a State law or federal law preempts or conflicts with this exigent-circumstances exception in any manner (e.g., Civil Code sections 1798.90.5, et seq.; and Government Code section 53166). However, if the Sheriff s Office or District Attorney's Ofhce acquires or uses surveillance technology in exigent circumstances under this subdivision, that Office must (1) report that acquisition or use to the Board of Supervisors in writing within 90 days following the end of those circumstances; (2) submit a proposed Surveillance Use Policy to the Board regarding that Ordinance NS-300.897 re Surveillance-Technology and Community-Safety Page 8 of l0 5l24lt6 surveillance technology within 90 days following the end of those circumstances; and (3) include that surveillance technology in the department's next Annual Surveillance Report to the Board following the end of those circumstances. If the Sheriff s Offìce or District Attorney's Office is unable to meet the 90-day timeline to submit a proposed Surveillance Use Policy to the Board, that Office may notify the Board in writing of the Office's request to extend this period and the reasons for that request. The Board may grant extensions of up to 90 days beyond the original 90-day timeline to submit a proposed Surveillance Use Policy. Sec.A.40-10. Enforcement This Division does not confer any rights upon any person or entity other than the Board of Supervisors or its designee to seek the cancellation or suspension of a County contract. This Division does not confer a private right of action upon any person or entity to seek injunctive relief against the County or any individual unless that person or entity has first provided written notice to the County Executive and the Board of Supervisors, by serving the Clerk of the Board, regarding the specific alleged violation of this Division; and has provided the County Executive and the Board with at least 90 days to investigate and achieve compliance regarding any alleged violation. If the specific alleged violation is not remedied within 90 days of that written notice, a person or entity may seek injunctive relief in a court of competent jurisdiction. If it is shown that the violation is the result of arbitrary or capricious action or conduct by the County or an officer thereof in his or her official capacity, the prevailing complainant in an action for injunctive relief may collect from the County reasonable attorney's fees-computed at one hundred dollars ($1OO¡ per hour, but not to exceed seven thousand five hundred dollars ($7,500)-if he or she is personally obligated to pay the fees. However, a prevailing complainant may not recover attorney's fees under this section and under Government Code section 800 for the same arbitrary or capricious action or conduct. Sec. 440-11.. Retaliation is a Ground for Discipline It shall be a ground for disciplinary action for a County employee to retaliate against any individual who makes a good-faith complaint to the County Executive's Office that there has been a failure to comply with any part of this Division. Sec. 440-L2. Intentional Misuse of Surveillance Equipment is a Misdemeanor It shall be a misdemeanor to intentionally use County-owned surveillance technology (1) for a purpose or in a manner that is specifically prohibited in a Boardapproved Surveillance Use Policy, or (2) without complying with the terms of this Division with respect to that County-owned surveillance technology. Unless otherwise Ordinance NS-300.897 re Surveillance-Technology and Community-Safety Page 9 of 10 5l24lt6 prohibited by law, either the District Attorney or County Counsel may prosecute violation of this Division. a PASSED AND ADOPTED by the Board of Supervisors of the County of Santa by the following vote: Clara, State of California, on AYES: NOES: ABSENT ABSTAIN DAVE CORTESE, President Board of Supervisors ATTEST: MEGAN DOYLE Clerk of the Board of Supervisors APPROVED AS TO FORM AND LEGALITY: ,ill M. COELHO Assistant County Counsel 13t7046 Ordinance NS-300.897 re Surveillance-Technology and Community-Safety Page 10 of l0 sl24lt6