For purposes of this article, the following words, terms and phrases shall have these definitions:
Annual surveillance reportmeans an annual written report concerning a specific surveillance technology.
(a) The annual surveillance report will include all of the following:
(1) A general description of how the surveillance technology was used; and
(2) A general description of whether and how often data acquired through the use of the surveillance technology item was shared with outside entities, the name of any recipient entity, the type(s) of data disclosed, under what legal standard(s) the information was disclosed, and the justification for the disclosure(s); and
(3) A summary of community complaints or concerns about the surveillance technology item; and
(4) The results of any internal audits required by the Surveillance Use Policy, any information about violations of the Surveillance Use Policy, and a general description of any actions taken in response; and
(5) Information, including crime statistics, that help the city council assess whether the surveillance technology has been effective at achieving its identified purposes; and
(6) Statistics and information about any related Public Records Act requests; and
(7) Total annual costs for the surveillance technology, including personnel and other ongoing costs, and what source of funding will fund the technology in the coming year; and
(8) Any requested modifications to the Surveillance Use Policy and a detailed basis for the request; and
(9) Where applicable, a general breakdown of what physical objects the surveillance technology hardware was installed upon, using general descriptive terms; for surveillance technology software, a general breakdown of what data sources the surveillance technology was applied to; and
(b) The annual surveillance report will not contain the specific records that a surveillance technology item collects, stores, exchanges, or analyzes and/or information protected, restricted and/or sealed pursuant to state and/or federal laws, including information not required to be released by the Public Records Act.
Exigent circumstancesmeans a city department's good faith belief that an emergency involving imminent danger of death or serious physical injury to any person, or imminent danger of significant property damage, requires the use of the surveillance technology or the information it provides.
Personal communication devicemeans a cellular telephone that has not been modified beyond stock manufacturer capabilities, a personal digital assistant, a wireless capable tablet or similar wireless two-way communications and/or portable Internet accessing devices, whether procured or subsidized by a city entity or personally owned, that is used in the regular course of conducting city business.
Surveillance impact reportmeans a written report including at a minimum the following:
(a) Information describing the surveillance technology and how it works, including product descriptions from manufacturers; and
(b) Information on the proposed purpose(s) for the surveillance technology; and
(c) If applicable, the location(s) it may be deployed and crime statistics for any location(s); and
(d) An assessment identifying any potential impact on civil liberties and civil rights and discussing any plans to safeguard the rights of the public; and
(e) The fiscal costs for the surveillance technology, including initial purchase, personnel and other ongoing costs, and any current or potential sources of funding; and
(f) Whether use or maintenance of the technology will require data gathered by the technology to be handled or stored by a third-party vendor on an ongoing basis; and
(g) A summary of the experience, if any, other governmental entities have had with the proposed technology, including information about the effectiveness, any known adverse information about the technology such as unanticipated costs, failures, civil rights or civil liberties abuses.
Surveillance technologymeans any software, electronic device, system utilizing an electronic device, or similar used, designed, or primarily intended to collect, retain, process, or share audio, electronic, visual, location, thermal, olfactory or similar information specifically associated with, or capable of being associated with, any individual or group by a city department. Examples of surveillance technology, includes, but is not limited to, the following: cell site simulators (Stingrays); automatic license plate readers; gunshot detectors (ShotSpotter); facial recognition software; gait analysis software; video cameras that record audio or video and can transmit or be remotely accessed. It also includes software designed to monitor social media services or forecast criminal activity or criminality and biometric identification hardware or software.
(a) "Surveillance technology" does not include the following devices, hardware or software:
(1) Office hardware, such as televisions, computers, credit card machines, copy machines, telephones and printers, that are in widespread use by city departments and used for routine city business and transactions; and
(2) City databases and enterprise systems that contain information kept in the ordinary course of city business, including, but not limited to, human resource, permit, license and business records; and
(3) City databases and enterprise systems that do not contain any data or other information collected, captured, recorded, retained, processed, intercepted, or analyzed by surveillance technology, including, payroll, accounting, or other fiscal databases; and
(4) Information technology security systems, including firewalls and other cybersecurity systems; and
(5) Physical access control systems, employee identification management systems, and other physical control systems; and
(6) Infrastructure and mechanical control systems, including those that control or manage street lights, traffic lights, electrical, natural gas, or water or sewer functions; and
(7) Manually-operated technological devices used primarily for internal city and department communications and are not designed to surreptitiously collect surveillance data, such as radios, personal communication devices and email systems; and
(8) Manually-operated, non-wearable, handheld cameras, audio recorders and video recorders that are not designed to be used surreptitiously and whose functionality is limited to manually capturing and manually downloading video and/or audio recordings; and
(9) Surveillance devices that cannot record or transmit audio or video or be remotely accessed, such as image stabilizing binoculars or night vision equipment; and
(10) Computers, software, hardware or devices used in monitoring the work and work-related activities involving city buildings, employees, contractors and volunteers or used in conducting internal investigations involving city employees, contractors and volunteers; and
(11) Medical equipment and systems used to record, diagnose, treat, or prevent disease or injury and are used and/or kept in the ordinary course of providing city services; and
(12) Parking ticket devices; and
(13) Police department interview room, holding cell and police department internal security audio/video recording systems; and
(14) Police department computer aided dispatch (CAD), records/case management, LiveScan, booking, Department of Motor Vehicles, California Law Enforcement Telecommunications Systems (CLETS), 9-1-1 and related dispatch and operation or emergency services systems; and
(15) Police department early warning systems.
Surveillance Use Policymeans a policy adopted by the city council at a regularly scheduled city council meeting for use of the surveillance technology that at a minimum specifies the following:
(a) Purpose.The specific purpose(s) that the surveillance technology item is intended to advance.
(b) Authorized Use.The uses that are authorized, and the rules and processes required prior to such use.
(c) Data collection.The information that can be collected by the surveillance technology, including "open source" data.
(d) Data access.The category of individual who can access or use the collected information, and the rules and processes required prior to access or use of the information.
(e) Data protection.The general safeguards that protect information from unauthorized access, including encryption and access control mechanisms. Nothing in this subsection shall be construed to require the disclosure of information that could reveal vulnerabilities to, or otherwise increase the potential for an attack on, an information technology system of the city.
(f) Data retention.The time period, if any, for which information collected by the surveillance technology will be routinely retained, the reason such retention period is appropriate to further the purpose(s), the process by which the information is regularly deleted after that period lapses, and the specific conditions that must be met to retain information beyond that period.
(g) Public access.How collected information can be accessed or used by members of the public, including criminal defendants.
(h) Third party data sharing.If and how other city or non-city entities can access or use the information, including any required justification or legal standard necessary to do so and any obligations imposed on the recipient of the information.
(i) Training.The training required for any individual authorized to use the surveillance technology or to access information collected by the surveillance technology.
(j) Auditing and oversight.The mechanisms to ensure that the Surveillance Use Policy is followed, including internal personnel assigned to ensure compliance with the policy, internal record keeping of the use of the technology or access to information collected by the technology, technical measures to monitor for misuse, any independent person or entity with oversight authority, and the legally enforceable sanctions for violations of the policy.
(Ord. 2527 § 1, 2018; Ord. 2684, 3/3/2026)