Loading...
The URL can be used to link to this page
Your browser does not support the video tag.
Home
My WebLink
About
2024-05-06 PTAC Agenda Packet
Date:Monday, May 6, 2024 Time:5:00 p.m. Location:City Hall, Bldg. C, Conference Room B-111 276 Fourth Avenue, Chula Vista Regular Privacy Protection and Technology Advisory Commission Meeting _____________________________________________________________________________ In-Person Public Comments: Submit a request to speak to the Commission Secretary before the close of the public comment period on an item or before the close of the general Public Comment period for non-agenda items. Electronic Public Comments: At www.chulavistaca.gov/boardmeetings, locate the meeting, and click the comment bubble icon. Select the item and click on "Leave comment." You may also email PTAC@chulavistaca.gov. eComments, emails, and other written comments must be received by noon for a regular meeting. Time Allotted for Speaking: (subject to change by the presiding officer) - Consent Calendar (any or all items): 3 minutes - Agenda Items (not on Consent): 3 minutes - General Public Comment (not on agenda): 3 minutes Individuals who use a translator will be allotted twice the amount of time. Agenda Packet: Materials provided to the Commission, including staff reports, draft resolutions, and other materials related to any open-session item on this agenda, are available for public review at www.chulavistaca.gov/boardmeetings or the City Clerk's Office at 276 Fourth Ave, Chula Vista. Accessibility: In compliance with the Americans with Disabilities Act, if you need special assistance to participate in this meeting, contact PTAC@chulavistaca.gov or (619) 691-5041. Providing at least 48 hours' notice will help ensure that reasonable arrangements can be made. Pages 1.CALL TO ORDER 2.ROLL CALL Commissioners Batson, Chambers, Godinez, Gonzales, Lake, Ruiz, Williams, and Wood. 3.PRESENTATIONS Action on presentation items is typically limited to the Commission receiving the presentation and providing direction or feedback to staff unless otherwise noticed on the agenda. 3.1 Presentation by Deputy City Manager Courtney Chase: Keeping Chula Vista Safe, Clean and Well-Maintained, a Status Update on Measure P 4 Recommended Action: Hear the presentation. 4.ACTION ITEMS The Item(s) listed in this section of the agenda will be considered individually by the Commission and are expected to elicit discussion and deliberation. If you wish to speak on any item, please fill out a "Request to Speak" form and submit it to the Secretary prior to the meeting or submit an electronic comment per the instructions on page one of this agenda. 4.1 Technology Impact Report: Presentation of Automated License Plate Reader Technology and Program 29 Recommended Action: Hear the presentation, provide feedback, and take action as appropriate. 4.2 Approve Meeting Minutes 99 Recommended Action: Approve the minutes dated: March 11, 2024 4.3 Consider Setting a Time Limit for Meetings and Adopting Related Meeting Conduct Rules 101 Recommended Action: Adopt a resolution setting a time limit of two hours for Commission meetings and related meeting conduct rules. 4.4 Approve the Fiscal Year 2023/24 Annual Report of Commission Activities for Submission to the City Council 104 Recommended Action: Approve the annual report of activities for submission to the City Council by July 1, 2024. City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 2 of 106 5.PUBLIC COMMENTS 106 The public may address the Commission on any subject matter within the Commission’s jurisdiction that is not listed as an item on the agenda. State law generally prohibits the Commission from discussing or taking action on any issue not included on the agenda. The Commission may schedule the topic for future discussion or refer the matter to staff. 7.CHAIR'S COMMENTS 8.COMMISSIONERS' COMMENTS 9.ADJOURNMENT to the regular meeting on July 1, 2024, at 5:00 p.m. City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 3 of 106 Keeping Chula Vista Safe, Clean and Well -Maintained A Status Update on Measure P Presented by: Courtney Chase, Deputy City Manager Page 4 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Background on Measure P ½ Cent Sales Tax on Retail Sales Voter Approved on November 8, 2016 Collection Began April 1, 2017 10-Year Period, Set to Expire in 2027 Instituted the Citizens’ Oversight Committee Established the Infrastructure, Facilities and Equipment Expenditure Plan which established the most critical priority items for funding Key Highlights Page 5 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Evaluation of City Infrastructure Page 6 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Background on Measure P Approved Expenditure Plan Priorities Pave, maintain and repair residential streets and fix potholes Upgrade or replace aging police, fire and 911 emergency response facilities, vehicles and equipment Replace storm drains to prevent sinkholes Upgrade irrigation systems to conserve water and save energy Make essential repairs to older libraries, senior center and recreation centers Improve our Traffic Signal Systems Page 7 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda 42%City Infrastructure Projects Replacement of the City network & upgrades to telecommunications has allowed for Smart City functionality which reduces traffic congestion and associated carbon emissions, enhances energy savings in City buildings, provides advanced citizen engagement through the capabilities of virtual City Hall, and enables enhanced security at City parks and other locations. City Network Upgrade Over 300 residential street segments were in failing condition and required major rehabilitation and repairs at costs significantly more than typical preventative maintenance. Measure P funding allowed for major asphalt replacement and rehabilitation on these streets placing them into a sustainable cycle of preventative maintenance for years to come. Residential Street Rehab & Repair Measure P has funded a multitude of much- needed upgrades and repairs at Chula Vista's largest park, covering nearly 60 acres, including reconstruction of the basketball courts, bleachers, picnic benches, and drinking fountains; expansion of ADA access; and new restroom facilities. Rohr Park Renovation Page 8 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda 42%City Infrastructure Projects Measure P funding has allowed for the rehabilitation of more than 160 Corrugated Metal Pipe (CMP) locations including storm drain repairs of over 19,000 linear feet outside the right of way. Drainage Funding from Measure P has been utilized to repair over 7,640 damaged sidewalk locations exhibiting moderate -to- small heave displacements including the replacement of 130 sidewalk panels throughout the city. Sidewalks Measure P funding has allowed for traffic signal modifications and upgrades to 11 existing signalized intersections. These upgrades improve visibility, provide for protected left turn movements, and replaced failing and outdated traffic signals at various locations citywide. Traffic Signals Page 9 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Public Safety Projects $30 million in Measure P funding has facilitated major rehabilitation of Fire Stations throughout the City-Including the design and construction of new Fire Stations 3 and 5 and reconstruction of Fire Station 1, improving emergency services and response times in the community. Fire Facilities and Equipment Funding from Measure P has secured a new $1.4 million PremierOne Computer Aided Dispatch (CAD) System, a critical component of the 911 emergency service framework, ensuring that the system remains stable and reliable with expanded technological capabilities directly impacting response times and officer safety. Police Dispatch Center 37% Page 10 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Public Facility Renovations The Loma Verde Community Center underwent a $22.5 million renovation and has a new multi-purpose gymnasium, dance rooms, crafts room, fitness room, game room, restrooms, two new pools and splash pad, shower/changing rooms, and classrooms. Loma Verde Community Center The Chula Vista Civic Center Library opened its doors in 1976, and thanks to Measure P, the City has been able to address significant infrastructure repairs including replacing the roof, restroom renovations for ADA access, and electrical/HVAC upgrades. All with the focus of increasing access to services and materials for the public. Civic Center Library 21% Page 11 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Community Facilities Page 12 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Parks, Fields & Courts Page 13 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Energy & Water Page 14 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Public Safety Page 15 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Storm Drains Page 16 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Streets Page 17 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Sidewalks Page 18 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Measure P Financials 22% Current Expenditure Allocation 37%42% City Infrastructure Projects Public Safety Public Facility Renovations $165.5M 10Y Expected (2016) $244.8M 10Y Projected Actual v. Projected Revenues Sales Tax Revenues were originally estimated to generate $16 million per year Updated 2023 revenue estimates are projected to generate >$25 million per year The Infrastructure, Facilities and Equipment Plan includes long -term financing of approximately $70.8 million from the issuance of bonds via Resolution 2017-089 on June 6, 2017, in order to expedite the most critically needed repairs or replacements of citywide infrastructure. City has paid down the bond debt principal by 49% ($34.7 million) as of FY22-23 Page 19 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Measure P Citizens’ Oversight Committee Meeting:4th Thursday Quarterly (Jan, Apr, Jul, Oct) The committee is comprised of nine members consisting of five At-Large members, with at least one from each Council district, and four Designated members selected from candidates brought forward by select nominating authorities. The main function of the Measure P Citizens’ Oversight Committee (COC) is to review and report on City compliance with the provisions of Measure P, particularly with respect to the City’s accounting and expenditure of Measure P revenues. David Garcias (Term Exp. 2025) Chair: Page 20 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Measure P Citizens’ Oversight Committee Meeting:4th Thursday Quarterly (Jan, Apr, Jul, Oct) The main function of the Measure P Citizens’ Oversight Committee (COC) is to review and report on City compliance with the provisions of Measure P, particularly with respect to the City’s accounting and expenditure of Measure P revenues. Specific duties include: Review and comment on each year’s Finance Department Report, Measure P Spending Plan, and Auditor Report. Prepare an annual report regarding the Finance Department Report for presentation to the City Council at a Public Meeting Work with City staff to identify and apply ‘best practices’ for tracking and reporting on Measure P revenues and expenditures relative to other City revenue and expenditures. Role & Function The committee is comprised of nine members appointed to four-year terms, consisting of five At-Large members, with at least one from each Council district, and four Designated members selected from candidates nominated by the following Nominating Authorities: Chula Vista Chamber of Commerce Alliance of Californians for Community Empowerment San Diego & Imperial Counties Labor Union San Diego Taxpayers Association Parks and Recreation Commission Sustainability Commission David Garcias (Term Exp. 2025) Chair: About Page 21 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Maintaining Local Funding without Raising Taxes Funding is set to expire, unless voters choose to renew it. To continue upgrading and maintain streets, underground storm drains and other local infrastructure the City is considering a November 2024 ballot measure to renew this source of funding for an additional 10 years at the current rate, without raising taxes. Page 22 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Continued Funding Could be Used To: Fix potholes and pave and maintain local streets Clean up trash and litter along streets sidewalks and in other public areas Keep existing parks and recreations facilities safe, clean, and well-maintained Repair infrastructure including sidewalks, curbs and storm drains Make improvements to roads and intersections to better manage traffic congestion on City streets Repair or replace aging underground stormwater pipes that are at risk of collapse and creating sinkholes Address homeless encampments and increase cleanup efforts Page 23 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Fiscal Accountability and Local Control Required public disclosure of all spending Essential purchases such as groceries, prescription medicine, diapers, and feminine hygiene products would continue to be exempt from sales tax All funds must stay local in Chula Vista and no funds can be taken away by the State Renewal of local funding at current rates, with no increase to local sales tax Any local funding measure would include fiscal accountability requirements, including: Page 24 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Ballot Measure Planning Voter Survey Election Timing Tax Rate Political Landscape Non-Advocacy Communication Existing comms Informational mailers / digital ads Internal and external audiences Seek feedback Refine proposal Community readiness? Ballot Resolution/ Ordinance 75 words Projects & Programs Ballot Argument & Signers Official Vote (>88 days before Election) Volunteer leaders Fundraising Website/Social Endorsements Grassroots Lawn Signs Mailers Digital Ads Get Out the Vote © 2023 We are Here Nov 2024 election: Council Action Summer 2024 Page 25 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda "By successfully leveraging and investing our Measure P revenue to fund our priority infrastructure needs, the City has delivered on their promise to maintain a stronger, safer Chula Vista and improving the quality of life for our residents and visitors. " -DAVID GARCIAS CHAIR, MEASURE P CITIZENS OVERSIGHT COMMITTEE Page 26 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Delivering on the Promise... Page 27 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda QUESTIONS Page 28 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda STAFF CONTACT Miriam Foxx, Captain Roxana Kennedy, Chief of Police Page 1 of 15 May 6, 2024 ITEM TITLE: Technology Impact Report: Presentation and Discussion of the Automated License Plate Reader Technology and Program TECHNOLOGY CLASSIFICATION: Surveillance DEPARTMENT: Police RECOMMENDATION Hear the presentation, provide feedback, and take action as appropriate. DISCUSSION On September 13, 2023, the Police Department received notice of a $3,037,986 award from the California Board of State and Community Corrections (“BSCC”) Organized Retail Theft Prevention Grant Program. The Organized Retail Theft Prevention Grant Program was established via Senate Bill 154 (SB 154) (Chapter 43, Statutes of 2022). Organized Retail Theft Prevention Grant Program funds are to support local law enforcement agencies in preventing and responding to organized retail theft, motor vehicle or motor vehicle accessory theft, or cargo theft. Each year, the City of Chula Vista experiences a high rate of vehicle theft and theft of vehicle accessories. Since 2018, there have been 4,224 vehicle thefts, an average of 768 per year. Vehicle thefts have increased by 28.5% in 2022 compared to the last three years. Between 2018-2022, there was an average increase of 8.5% in vehicle theft each year. In addition, only a small number of auto thefts result in arrests. In the past five years, only 373 arrests have been made for the 4,224 vehicle thefts that have occurred, resulting in a clearance rate of 8.8%. In other words, more than 91% of vehicle thefts go without an offender being arrested or held accountable for their actions. Vehicle accessory thefts, including catalytic converters, have also been an ongoing issue in the city. Precious metals inside the catalytic converters are expensive, making catalytic converters lucrative for thieves to steal. Since 2020, there have been 666 cases of vehicle accessory theft. These thefts have been steadily increasing since 2020. More specifically, over a three-year period between 2020 and 2023, there was a 42% increase in cases of vehicle accessory theft in Chula Vista. Unfortunately, the clearance rate for arrests of catalyt ic converter thieves is almost non- existent, due to the lack of evidence to identify suspects. The problem of vehicle theft and catalytic converter theft has a significant impact on the City of Chula Vista. With grant funding, the Police Department is able to help locate stolen vehicles and, Page 29 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 2 of 15 STAFF CONTACT Miriam Foxx, Captain Roxana Kennedy, Chief of Police arrest vehicle theft suspects to reduce victimization among the residents of Chula Vista. The Police Department’s strategy is both proactive and reactive. The Police Department’s plan includes additional operational, investigative, and analytical resources, while simultaneously enhancing existing technologies to improve actionable evidence that helps identify and apprehend criminal suspects and deters vehicle thefts or thefts of catalytic converters. The grant covers the 38-month project period of October 1, 2023 to December 1, 2026. When the project activity period ends on December 1, 2026, there will be a 6-month period of January 1, 2027 to June 1, 2027 for completion of the Final Local Evaluation Report (conducted by SANDAG). Resources for Operations, Investigations, and Analysis Funding from BSCC has been granted to fund a Police Agent as a dedicated vehicle theft investigator, to oversee the Police Department’s Automated License Plate Recognition (ALPR) program, and to help oversee the grant itself. Funding has also been granted for overtime for police operations intended to curtail vehicle thefts and apprehend theft suspects, for prevention materials and tools such as steering wheel locks and specialized paint to mark catalytic converters, for educational and community outreach materials, for enhanced training for investigators, and for increased flexibility through the acquisition of five detective vehicles. The BSCC is also providing funding to acquire contractual services with SANDAG to perform grant program evaluation and analysis. Enhancing Existing Technologies Additionally, funding from the BSCC grant expands the current Police Department ALPR program. The Police Department currently deploys four mobile ALPR cameras, which are affixed to patrol vehicles. With this grant funding, 150 (currently 101 have been installed) fixed ALPR cameras will be strategically installed in key intersections and thoroughfares likely to be traversed by criminal suspects during or immediately after committing a crime. The expanded use of ALPR cameras will have a significant positive impact on both vehicle theft and vehicle accessory theft by providing information to solve vehicle theft cases, while simultaneously having a positive impact on the investigation of many other crimes committed in Chula Vista. The Police Department intends to promote community safety, solve crime, reduce crime, and be transparent with the community about the expanded use of this technology. About Automated License Plate Recognition ALPR technology originated in the United Kingdom in the mid-1970s and has been widely used by law enforcement worldwide since 20011. A January 2012 Police Executive Research Forum (PERF) Technology Summit in Washington D.C.2 showed 71% of surveyed police departments in the United States employed ALPR systems to some extent and 85% planned to acquire or expand their use of LPR systems in the next five years. Most law enforcement agencies in San Diego County now use ALPR systems in some capacity. In recent years, many municipalities in San Diego County have expanded their ALPR programs to include fixed ALPR systems and have publicized numerous success stories attributed to the use of ALPR technology. 1 Cohen, I. M., Plecas, D., & McCormick, A. V. (2007). A Report on the Utility of the Automated License Plate Recognition System in British Columbia. Retrieved from http://cebcp.org/wp-content/lpr/BritishColumbiaLPRreport.pdf 2 Police Executive Research Forum (2012). Critical Issues in Policing Series: “How Are Innovations in Technology Transforming Policing?” Retrieved from https://www.policeforum.org/assets/docs/Critical_Issues_Series/how%20are%20innovations%20in%20technology%20 transforming%20policing%202012.pdf Page 30 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda STAFF CONTACT Miriam Foxx, Captain Roxana Kennedy, Chief of Police Page 3 of 15 Today, ALPR systems have become commonplace because they are an effective strategy to deter criminals who would victimize our community, and to apprehend criminal offenders. The use of ALPR systems have become a standard and expected practice in police investigations throughout the region and the nation. Use of Automated License Place Recognition Systems in San Diego County ALPR systems involve the use of digital camera systems paired with software to identify license plate numbers. ALPR systems function by automatically taking a photographic image of a vehicle’s license plate and transforming that image into alphanumeric characters using optical character recognition or similar software. The images often include the license plate as well as enough of the car to allow for identification of the make and model. The images and data about the license plate number and geolocation of the image are stored in the ALPR system for a pre -determined period of time, after which the images and data are automatically purged from the system. No personal identifying information is generated or stored in the ALPR system. Page 31 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 4 of 15 STAFF CONTACT Miriam Foxx, Captain Roxana Kennedy, Chief of Police Below is an example of what an ALPR image often looks like. History of the Chula Vista Police Department ALPR Program and Related Technologies On October 9, 2007, the City Council approved a Police Department proposal to fund the purchase of ALPR camera systems. The proposal included the purchase of camera systems mounted to three marked, routine police vehicles used by uniformed patrol officers. On February 1, 2011, the City Council approved a Police Department proposal to fund the purchase of a fourth ALPR camera system. In 2017, due to vendor issues and aging equipment, the department switched ALPR vendors from 3M/PIPS to Vigilant Solutions, which included a subscription to the Vigilant ALPR database, also known as the Law Enforcement Archival Reporting Network (LEARN). Vigilant’s LEARN service provides the subscribing law enforcement agency with the right to grant other authorized entities the limited ability to search that agency’s ALPR data (sometimes known as “data sharing”). The LEARN service also provides entities with the capability of creating proactive alerts (sometimes known as “hot list” notifications) for wanted vehicles, should a wanted license plate be scanned by a subscribing ALPR system. On April 9, 2020, the ACLU submitted a Public Records Act request regarding the Department’s subscription to Vigilant’s LEARN database. The Department researched its Vigilant ALPR system and provided the list of Vigilant LEARN agencies the Department both shared and received data from. Included on the list of agencies were Immigration and Customs Enforcement (ICE) and the United States Border Patrol (USBP). Although the Department’s perspective was focused on solving and preventing crime in the interest of community safety, the Department simultaneously consulted with the City Attorney’s office to ensure legal compliance with the California Values Act of 2018 (SB54). Because ALPR data did not include Personally Identifiable Information (PII), nor did it contain any immigration-related information, the City Attorney’s office concluded that the ALPR program and related data sharing was not in violation of SB54. By December 8, 2020, published media reports suggested the Police Department’s ALPR system violated both SB54 and 2015 California State Senate Bill 34, which required law enforcement agencies to seek public input and City Council approval prior to starting or operating an ALPR system. The City Council requested a Staff Report on the Police Department’s ALPR program. Between March 23, 2021 and April 20, 2021, the Police Department provided two reports to the City Council and held a public forum related to its ALPR system. At the conclusion of the April 20th meeting, the City Council unanimously reauthorized the ALPR pr ogram, Page 32 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda STAFF CONTACT Miriam Foxx, Captain Roxana Kennedy, Chief of Police Page 5 of 15 directed staff to organize listening sessions throughout the City, and directed staff to evaluate the feasibility of establishing a group for oversight of the ALPR program. Between April 20, 2021 and April 25, 2022, a City steering committee was created to develop a community task force focused on providing advice related to the City’s use of technology and privacy. On January 18, 2022, the City Council directed staff to develop a privacy protection and technology transparency policy and engaged a consultant to provide support for the development of the policy. In April 2022, the City Manager appointed 12 individuals to the Chula Vista Technology and Privacy Advisory Task Force, consisting of Chula Vista residents and subject matter experts who were charged with assisting with the development of comprehensive policy recommendations on technology and privacy issues. Between April 25, 2022 and September 26, 2022 the newly-formed Technology and Privacy Advisory Task Force held a series of public meetings, town-hall meetings, educational sessions of city technologies, and tours of various city departments. The task force ultimately adopted a final set of recommendations for the City Manager to consider in the development of a citywide policy. The majority of the recommendations were incorporated into a proposed policy governing privacy protection and technology transparency. On November 1, 2022 the City Council adopted Policy 112-04, Privacy Protection and Technology Transparency Policy. The policy defined different types of city technology and classified them into three groups: Surveillance Technology (technology designed or primarily intended for the purpose of surveillance), Sensitive Technology (technology that generates or collects sensitive personal information but is not designed or intended to be used for surveillance), and General Technology (any other type of technology). The policy also provided direction for enhanced controls and oversight for Sensitive Technologies and Surveillance Technologies. Among other things, the Privacy Protection and Technology Transparency policy outlines that new Surveillance Technologies require a Use Policy (to regulate use of the technology) and Surveillance Technology Impact Report (to evaluate impacts of the technology), submitted for input to a Privacy Protection and Technology Advisory Commission, prior to acquisition of new technology. On July 25, 2023 the City Council adopted Ordinance 3553, creating a Privacy Protection and Technology Advisory Commission. Current Police Department ALPR System: Currently, the Police Department operates a maximum of four marked patrol cars equipped with ALPR camera systems that operate while the vehicles are in use. Patrol cars are assigned to patrol officers on an available basis and are not assigned based on geography. Due to shift overlaps, patrol cars may not be used on some shifts (e.g.. a day shift officer drives one, making it unavailable for the next shift, but available for an officer on the overnight shift to drive). Page 33 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 6 of 15 STAFF CONTACT Miriam Foxx, Captain Roxana Kennedy, Chief of Police The department’s ALPR system has two primary functions. First, while the ALPR-equipped car is in use, the system compares license plate numbers to one or more existing databases of vehicles of interest to law enforcement agencies and alerts the officer operating an ALPR-equipped car when a vehicle of interest has been observed. This process typically occurs within seconds. At this point, the “automated” part of the process ends and officers must then independently validate that the ALPR system has accurately interpreted the license plate, validate that the license plate matches the vehicle of interest, verify that the alert is valid (e.g., not expired or otherwise deemed invalid), and make an informed decision as to what action to take, if any. An alert alone does not justify a traffic stop or detention. The officer must conduct these verification steps prior to any enforcement action. The second function is the ability for officers to manually search the database for a specific vehicle related to an official investigation (crimes, missing persons etc.). The department currently subscribes to Vigilant Solutions, which provides data storage for CVPD ALPR images and allows officers to search for images from the department’s images, those collected by other law enforcement agencies, and those from commercial entities that are willingly shared with law enforcement. Commercial systems are widely used by non-public entities such as shopping malls, apartment complexes, home-owners associations, amusement parks, and parking garages. Commercial systems greatly outnumber law enforcement systems. This manual search function is the part of the system that is most invaluable to the department as it used in almost every investigation conducted. There are hundreds of instances where cases would not be solved without the use of the ALPR system. Regulations surrounding the use and auditing of the Department’s ALPR systems are governed by Chula Vista Police Department Policy § 460. The policy, publicly available on the Department’s webpage, outlines specific requirements for access, administration, operation, data sharing, retention, and measures for accountability. As stated earlier, there are 101 out of the 150 fixed ALPR systems installed. Unlike mobile ALPR cameras, fixed ALPR systems cannot be readily moved throughout the City to drive through crime scenes or areas with an increased risk of crimes such as shopping malls. Mobile ALPR systems are sometimes operated in an area where a significant crime has occurred, and potentially help detectives to identify vehicles associated with suspects. Fixed ALPR cameras can support interdiction of crimes in-progress when users are logged into the system and can receive real time alerts. In mobile systems, an officer driving an ALPR- equipped patrol vehicle can be immediately alerted to a potential criminal offense or criminal offender, allowing the officer to take immediate action to investigate the alert and potentially stop a crime in progress, locate a missing person, or identify a wanted vehicle. On the other hand, fixed ALPR cameras can be mounted on traffic lights and poles in major thoroughfares, points of ingress or egress into or out of the city limits and positioned in areas with high traffic density. Since criminal offenders are not bound to stay within a particular location within the city, or even within the city limits, a fixed ALPR camera’s ability to capture images from key locations 24 hours a day provides detectives with significantly improved capability to identify and locate vehicles involved in crimes that have victimized members of our community. Oversight of the ALPR System The ALPR program is overseen by a Police Captain, who manages a designated Police Lieutenant and a Police Sergeant. The team oversees the ALPR system with the support of the Police Page 34 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda STAFF CONTACT Miriam Foxx, Captain Roxana Kennedy, Chief of Police Page 7 of 15 Technology Manager. In accordance with the BSCC grant, the Police Department intends to add a new Police Agent to assist the team with oversight, training, and auditing of the ALPR system. Access and Security of the ALPR System The department will continue to restrict access to the ALPR system to limited employees and positions that need access to ALPR data to conduct their official duties. Examples include sworn personnel, police dispatchers, crime analysts, and other similar positions. Employees are required to receive a minimum of two-hours of training before accessing the system. All access to the ALPR system is regulated not only by departmental policies that restrict its use, but also by federal and state laws. The ALPR system is compliant with Criminal Justice Information Ser vices (“CJIS”), which requires the Police Department to safeguard the civil liberties of individuals and businesses, and to shield private and sensitive information. CJIS compliance is central to all of the Police Department’s sensitive information sources, including the ALPR system. Under CJIS regulations, a user is required to demonstrate that they have the right to access the data, and that they have a bona fide reason to access the data. This requirement is sometimes referred to as the need-to-know/right-to-know standard. In other words, whenever a user accesses the ALPR system, they must first attribute the inquiry to a specific police investigation. This attribute, the reason that the user accesses the system, is required and is logged in the system for future auditing. System access logs can be audited by a system administrator or department manager to assure compliance with regulations and that each inquiry meets the need-to-know/right-to-know standard. By law, the Police Department is required to conduct audits of the system’s usage, and currently audits the system quarterly. Federal authorities also conduct periodic audits of the Police Department’s CJIS systems to ensure compliance with security laws, database access limitations, and training requirements. Ownership and Protection of ALPR Data Under the terms of the agreement for an expanded ALPR system, all ALPR data, including but not limited to license plate data, images, geospatial data, user data, logging data, and system management data is owned and controlled exclusively by the City of Chula Vista. ALPR data shall not be sold for any reason and shall not be shared without the permission of the City, unless required by law. ALPR data is stored on servers residing in the United States, is encrypted end to end, and systems are protected against compromise. In the sixteen years that the Police Department has operated an ALPR system there have been no reports of a data breach. Retention of ALPR Data Since 2021, the Police Department’s ALPR system retained photographs and data for a period of one year, after which the information was automatically purged from the system. This retention period gives the department a reasonable amount of time to conduct an inquiry during the early phases of a police investigation, while helping reduce risks to the individual liberties and privacy of our community. As a matter of standard investigative practice, specific ALPR data that is determined to be evidence in a police investigation (such as a record and photograph of a suspect vehicle) is migrated to the Police Department’s pre-existing digital evidence management system. ALPR data is automatically purged from the ALPR system after the 30-day retention period. Data Sharing of ALPR Data Page 35 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 8 of 15 STAFF CONTACT Miriam Foxx, Captain Roxana Kennedy, Chief of Police Since 2017, the Police Department has authorized specific law enforcement agencies limited access to search its ALPR data. The authorization is sometimes broadly referred to as “data sharing.” Data sharing does not transmit nor provide wholesale ALPR data to any agency, nor does it provide any agency with direct or comprehensive access to the Police Department’s ALPR data. Instead, the phrase “data sharing” in the context of the Police Department’s ALPR system refers to the capability that an authorized law enforcement agency’s ALPR system may, during the course of conducting a search of their own ALPR data during an investigation, simultaneously search the ALPR data of any other agency that has permitted it. In other words, one jurisdiction is searching for a suspect’s vehicle in its ALPR system, can also search for the vehicle in other jurisdictions that have so authorized it. Actual ALPR data (such as the license plate or photograph) is only shared between agencies when there is a “hit” to an active search. Other law enforcement agencies may similarly authorize sharing their data with the department, allowing investigations in Chula Vista to find suspect vehicles that have fled the city. Data sharing authorizations are crucial since crime is not limited to the city limits, and criminal offenders commonly traverse city and county jurisdictions in the process of committing criminal acts. Sharing information with other vetted law enforcement agencies is essential to solve crime. Suspects move about the community and look for opportunities to perpetrate crime, especially regarding auto theft or auto accessory theft. By sharing and receiving ALPR data, agencies can leverage each other’s data to solve more cases quickly, potentially reducing the number of victims and thus driving crime rates down, making communities safer as a byproduct. Each agency’s access and use of ALPR data is still governed by CJIS and by state laws, helping protect individual rights to liberty and privacy. Since 2021, the Police Department has limited ALPR data sharing to only those agencies located within the State of California, who are all governed by SB 54 and other state requirements. The list of agencies with whom the department has authorized to share data is maintained on the Police Department’s website and is updated quarterly. The Chula Vista Police Department does not permit the sharing of ALPR data gathered by the City or its contractors/subcontractors for purpose of federal immigration enforcement, pursuant to California Values Act (Government Code § 7282.5; Government Code § 7284.2 et seq) – these federal immigration agencies include Immigrations and Customs Enforcement (ICE) and Customs and Border Patrol (CBP). Strategic Deployment of Fixed ALPR Cameras The Police Department has had sixteen years of experience using ALPR technology to bolster and support police investigations and identify suspects in criminal investigations, with the primary goal of protecting the community, solving crime, and holding offenders accountable. Within the region, the use of ALPR systems has become commonplace, and a standard practice in effective criminal investigations. The addition of 150 fixed ALPR cameras will significantly improve the department’s capacity to keep the community safe. The number of fixed ALPR cameras is consistent with many other jurisdictions in the San Diego region. Page 36 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda STAFF CONTACT Miriam Foxx, Captain Roxana Kennedy, Chief of Police Page 9 of 15 Each fixed ALPR camera will be strategically installed(installation is currently still in progress) in key intersections and thoroughfares likely to be traversed by criminal suspects during or immediately after committing a crime. Below is a visual representation of a proposed deploymen t strategy for fixed ALPR cameras throughout the city. Location of Fixed ALPR Cameras Page 37 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 10 of 15 STAFF CONTACT Miriam Foxx, Captain Roxana Kennedy, Chief of Police The location of each fixed ALPR camera was carefully chosen based on a number of factors, including but not limited to rates of traffic density on city roadways, locations of ingress and egress points to and from the city limits, geographic land features, population densities throughout the city, key areas and hotspots from auto theft crimes and catalytic converter thefts, and more. Key consideration was also given to ensuring appropriate and equitable distribution of systems to maximize effectiveness while minimizing inequitable impacts on micro communities. The following diagram and table provide population density statistics and were analyzed in developing the location for fixed ALPR cameras. Population Density and Number of ALPR Cameras by City Council District City Council District Population Density (per sq. mi.) Number of Fixed ALPR Cameras 1 3,969 23 2 7,509 49 3 4,517 22 4 7,903 56 The next pages are visual representations of population density by census tract and areas where vehicle and vehicle accessory theft occur most in the city and a map depicting ALPR placement and vehicle theft/vehicle accessory theft. Hotspots for Auto Theft and Theft of Vehicle Accessories Hotspots Compared to Location of Fixed ALPR Cameras Page 38 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda STAFF CONTACT Miriam Foxx, Captain Roxana Kennedy, Chief of Police Page 11 of 15 101 Cameras Installed. Expect the remaining cameras to be installed by the end of the second quarter of 2024. Expanded ALPR System Provider The Police Department has conducted extensive research regarding the installation of fixed ALPR cameras at street intersections and on roadways, and is using the ALPR solution from Flock Group, Inc. Flock pairs license plate and state recognition with other vehicle attributes such as color, type, make and objects (roof rack, bumper stickers, etc.) based on image analytics (not car registration data). Flock is the only ALPR provider that offers a “Visual Search” feature, which allows investigators to search ALPR data not only by license plate number but also by vehicle description and attributes such as make, model, color and more. Flock positions cameras to capture images of the rear of vehicles to provide license plate data and the vehicle’s color and make while reducing the chance of accidentally capturing the faces of drivers or passengers. This supports the ethical use of the system in that it does not have a filter for people, no facial recognition component, no traffic enforcement, or indiscriminate evidence. Additionally, Flock is the only ALPR provider to interface with the Police Department's pre-existing digital evidence management system, Evidence.com, simplifying the process for investigators that need to save evidence for later prosecution. The Flock system enables neighborhoods, schools, businesses, and law enforcement to work together across an entire city to solve and prevent crime. The Flock platform can alert law enforcement when a wanted or stolen vehicle license plate is recognized by a camera. At the same time, the Flock platform includes a public transparency portal helping maintain public trust without compromising transparency or human privacy. The agreement with Flock Group, Inc. satisfies requirements for a single source contract. The agreement was negotiated based on Flock’s demonstrated competence and qualifications for the services provided, pursuant to Chula Vista Municipal Code section 2.56.110(A)(1). In order to procure these services, Flock Group, Inc. was chosen based on their unique knowledge, skills, and abilities not available from other sources. In accordance with Chula Vista Municipal Code Page 39 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 12 of 15 STAFF CONTACT Miriam Foxx, Captain Roxana Kennedy, Chief of Police sections 2.56.110(H)(3) and 2.56.070(B)(4), award of this contract to Flock is not subject to competitive bidding requirements. Adherence to Privacy Protection and Transparency Policy ALPR technology is defined as Surveillance Technology by the City’s Privacy Protection Technology and Transparency Policy (112-4; effective 11/01/2022). As such, staff has adhered to all requirements of the Privacy Protection Technology and Transparency Policy. This includes sharing a revised version of the Police Department’s Use Policy related to ALPR (previously reviewed by the City Council), a Surveillance Technology Impact Report, and this Staff Report. Measuring Effectiveness of the ALPR System Tracking specific data and quantifying data related to ALPR success stories or the number of cases ALPR technology helps to solve is highly complex. Simply put, ALPR data may help narrow or expedite an investigation by providing a resource to investigate the potential presence of related vehicles (or lack thereof) concerning the location and time of a specific crime. All ALPR data requires a trained investigator to evaluate, investigate, and confirm or refute if the data is connected to the crime. As a result, ALPR data does not solve crimes in and of itself. ALPR data alone is unlikely to be the sole reason for solving a crime. In addition, ALPR data is one of many potential tools that our officers and investigators may utilize to help them identify vehicles of interest during a criminal investigation or to help eliminate a potential vehicle from suspicion. Tracking statistical data about specific success of any of these tools is not practical. About 25,000 crimes are reported to the Police Department each year. These crimes must be investigated, and the department maintains a small complement of sworn detectives. Investigations take dozens of hours of investigative work, and some take hundreds of hours. It is neither practical nor efficient for the investigative division to track quantitative data about each action, database search, or other investigative step in every case under investigation. This tracking would be incredibly time- consuming for each detective, who may have a simultaneous workload of 30-60 ongoing investigations representing countless victims in our community seeking justice. As a result, the Police Department does not make it a practice to track the types of minute details for many investigative processes for reasons of practicality. Although measuring the statistical effectiveness of this technology or other tools is impractical, the department does track and capture statistical data related to ALPR inquiries and usage, and date related to crimes and their investigations. Examples of Success Stories (Other Law Enforcement Agencies) Associated with ALPR Use The Department also tracks anecdotal information about specific success stories associated with ALPR use. A small number of success stories are highlighted below. Located an at-risk missing person using ALPR images that assisted detectives by providing real-time information about their whereabouts. Made several arrests in a homicide investigation because an ALPR image provided detectives with a location frequented by the suspects. Used the system to identify the suspect truck in a fatal hit and run. Located a suspect in a countywide fraud and theft series when detectives noticed the same car was in the area every time crimes were committed. ALPR data allowed them to query vehicles in the area when the crimes occurred. Located a fugitive child molestation suspect swapping cars frequently to avoid capture. A confidential tip about his new vehicle allowed detectives to use ALPR data to find frequent scanned locations. They waited for him nearby and made an arrest. Page 40 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda STAFF CONTACT Miriam Foxx, Captain Roxana Kennedy, Chief of Police Page 13 of 15 Detectives broke up a fentanyl smuggling ring using unsuspecting motorists. Provided with a vehicle description, using ALPR data, we were able to find a matching car and observe the suspects removing the fentanyl. Chula Vista Police Department Success Stories Associated with the ALPR Program 24-04676: ALPR assisted officers in locating an occupied stolen vehicle. The driver was arrested and booked for various felony charges. The vehicle was not damaged, and no one was injured. 24-04193: Officers respond to an ALPR notification and locate the vehicle abandoned near a motel. The vehicle was ultimately recovered without incident. No arrests in that incident were made. The vehicle had been stolen out of the upper Los Angeles area. 24-04580: ALPR assisted officers in locating an occupied stolen vehicle. The driver was arrested and booked for various felony charges without incident. 24-04537: ALPR assisted officers in locating an occupied stolen and embezzled vehicle. The driver was arrested and booked for various felony charges, and it was discovered he also had an outstanding felony warrant. The owner of the embezzled vehicle had just filed the report with a neighboring agency and was able to recover their vehicle from the Chula Vista Police Department the same afternoon. 24-114030 (SDSD Case): Regional Auto Theft Task Force (RATT) detectives located an occupied stolen vehicle. RATT and Chula Vista PD patrol units locate the vehicle and arrested the driver for various felony charges without incident. 24-04645: ALPR assisted officers in locating an occupied stolen and embezzled vehicle. The driver was arrested and booked for various felony charges without incident. 24-04959: Patrol responds to a possible domestic violence incident. ALPR assisted officers in determining the suspect's vehicle's license plate since they had fled the scene prior to officers' arrival. The suspect was not located, but through an investigation, it was learned the suspect had an active felony warrant for his arrest. 24-05029: Patrol responded to an ALPR hit and locates an occupied stolen vehicle. Officers follow the vehicle into Imperial Beach and detain the driver. I also responded to assist. It was determined the elderly driver was an innocent purchaser of a vehicle. He drove the vehicle home to his elderly wife who was waiting for him. Both were released at the scene and the vehicle was returned to its rightful owner who "couldn't believe the police found her car." The elderly driver was understandable of Chula Vista PD officer's actions to detain him and had no prior criminal history. Information regarding the fraudulent purchase was provided. This experience was a good learning experience for training officers on scene, who learned about "Innocent Purchasers." 24-03963: Traffic Division officers investigating a felony hit and run collision utilized ALPR cameras, which ultimately led them to the suspect's vehicle. The vehicle was towed for evidence for the ongoing investigation. 24-05350: Patrol responds to an ALPR hit and locates the stolen vehicle. The driver failed to yield, and a pursuit ensued. The driver fled on foot and was not located. Inside the vehicle, among other Page 41 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 14 of 15 STAFF CONTACT Miriam Foxx, Captain Roxana Kennedy, Chief of Police things, a sawed-off shotgun was located. It was learned the vehicle was wanted by the Carlsbad Police Department on a sexual assault and robbery investigation. Carlsbad Police responded to take possession of the vehicle and the evidence for their investigation. 24-05284: Patrol responds to a family disturbance where it was learned through an investigation the suspect, a juvenile, carjacked the vehicle from a family member. During that special form of robbery, the mother was injured significantly. ALPR cameras were utilized which ultimately led to the recovery of the vehicle and the arrest of the juvenile. The juvenile was booked into the juvenile detention center on carjacking charges without incident. 24-02456: Dispatch airs an ALPR hit for a stolen vehicle. Patrol searches the area and locates the vehicle. Juvenile suspect was arrested. 24-04938: A vehicle was stolen from a local business parking lot. ALPR hits showed the vehicle nearby where it from originally stolen from. Patrol checked motel parking lots and located the vehicle in a local motel parking lot. Officers staged and waited for the vehicle to be occupied. The vehicle was stopped, and the driver was arrested. 24-4574: Patrol responded to an ALPR hit and conducted a stop. The registered owner was driving the vehicle and said he found it himself and was not able to get in touch with anyone to have it removed from LE Databases. 2024: The US Marshals Fugitive Apprehension Team responded to another jurisdiction for a sexual assault suspect who had escaped from a detention facility. ALPR cameras were used and effectively guided Task Force Officers to the suspect's last known locations, where he was eventually located and re-arrested. Due to ALPR's assistance, time was saved since no stakeouts were needed. 24-04027: ALPR assisted Patrol in identifying a hit and run suspect vehicle. In one incident, the suspect's vehicle was identified within minutes of the initial call coming into dispatch. Conclusion The Police Department anticipates the expansion of the pre-existing ALPR program, will have significant positive impacts on the overall number of vehicle thefts or vehicle accessory thefts in Chula Vista. The ALPR program has proven effective at increasing the solvability rate for criminal investigations, and the department seeks to improve solvability from the single-digit percentage rate currently to double-digit percentage rates in the future. CURRENT- YEAR FISCAL IMPACT On October 17, 2023, City Council accepted the Organized Retail Theft Prevention Grant from the California Board of State and Community Corrections (BSCC). The funding from BSCC expands the current Police Department ALPR Program by strategically installing 150 fixed ALPR cameras in key intersections and thoroughfares throughout the city. The chart below outlines the spending plan of the grant funds. CATEGORY FY 23/24 FY 24/25 FY 25/26 FY 26/27 44-MONTH TOTAL Agent Salaries and Benefits $140,074 $194,523 $204,248 $104,615 $643,460 Overtime $34,570 $69,140 $69,140 $34,570 $207,420 Page 42 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda STAFF CONTACT Miriam Foxx, Captain Roxana Kennedy, Chief of Police Page 15 of 15 License Plate Reader Cameras & Subscription (Flock Safety) $472,500 $450,000 $450,000 $1,372,500 Integration into Existing Traffic Camera Software; Camera Installation Costs $124,500 $124,500 Auto Theft Steering Wheel Locks $8,758 $8,758 Education Flyers/Postcards $1,000 $1,000 High Heat Resistant Paint for Catalytic Converters $378 $756 $756 $378 $2,268 Local Evaluation Plan/Report (SANDAG) $24,000 $48,000 $48,000 $24,250 $144,250 Five (5) Detective Vehicles $250,000 $250,000 Western States Auto Theft Investigators Conference $2,550 $2,550 $2,550 $7,650 Indirect Costs (10%) $75,458 $79,647 $80,619 $40,456 $276,180 TOTAL BSCC FUNDING $1,133,788 $844,616 $855,313 $204,269 $3,037,986 ONGOING FISCAL IMPACT Because the grant period covers multiple fiscal years, subsequent budgets will include allocations as outlined in the chart above. ATTACHMENT(S) 1. Surveillance Technology Impact Report (STIR) - Automated License Plate Readers (ALPRs) 2. Chula Vista Police Department Policy PDM 460- Automated License Plate Readers (ALPRs) 3. Privacy Protection & Technology Advisory Commission PowerPoint Presentation Page 43 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Surveillance Technology Impact Report Automated License Plate Recognition October 17, 2023 315 Fourth Avenue, MS P-200, Chula Vista, CA 91910 www.chulavistapd.org (619) 691-5150 fax (619) 585-5610 SUMMARY Automated License Plate Recognition (ALPR) systems involve the use of digital camera systems paired with software to identify license plate numbers. ALPR systems function by automatically taking a photographic image of a vehicle’s license plate and transforming that image into alphanumeric characters using optical character recognition or similar software. The images often include the license plate as well as enough of the car to allow for identification of the make and model. The images and data about the license plate number and geolocation of the image are stored in the ALPR system for a pre-determined period, after which the images and data are automatically purged from the system. No personal identifying information is generated or stored in the ALPR system. ALPR technology originated in the United Kingdom in the mid-1970s and has been widely used by law enforcement worldwide since 2001. A January 2012 Police Executive Research Forum (PERF) Technology Summit in Washington D.C. showed 71% of surveyed police departments in the United States employed ALPR systems to some extent and 85% planned to acquire or expand their use of ALPR systems in the next five years. Today, most law enforcement agencies in San Diego County also use ALPR systems in some facet. In recent years, many municipalities in San Diego County have expanded their ALPR programs to include fixed ALPR systems and have publicized numerous success stories attributed to the use of ALPR technology. The above table shows San Diego County Law Enforcement agencies that currently have ALPR systems and the number of fixed/mobile devices. The “ * “ shows agencies that are in the process of procuring ALPR systems. Since it was originally authorized by the City Council in 2007, an ALPR system has been a component of the Police Department’s crime-fighting and investigative strategy and has been used to identify vehicles associated with criminal suspects, missing persons, and other vehicles related to official police investigations. ALPR improves the Department’s ability to narrow the focus of investigations managed by its limited investigative resources, deter the occurrence of crime, and enhance public safety. Page 44 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Surveillance Technology Impact Report: Automated License Plate Recognition Page 2 Currently, the Police Department operates a maximum of four marked patrol cars equipped with ALPR camera systems that operate while the vehicles are in use. Patrol cars are assigned to patrol officers on an available basis and are not assigned based on geography. Due to shift overlaps, patrol cars may not be used on some shifts (i.e. a day shift officer drives one, making it unavailable for the next shift, but available for an officer on the overnight shift to drive). ALPR systems do not collect nor store sensitive personal information. As a result of state grant funding that includes the expansion of the Police Department’s ALPR system, and under an action item brought before the City Council on October 17, 2023, the Police Department proposes to expand the Department’s ALPR program to add 150 fixed-location ALPR cameras. Unlike mobile ALPR cameras, fixed ALPR systems cannot be readily moved throughout the city to drive through crime scenes or areas with an increased risk of crimes such as shopping malls. (Mobile ALPR systems are sometimes operated in an area where a significant crime has occurred, and potentially help detectives to identify vehicles associated with suspects.) Fixed ALPR cameras also have a reduced capability for immediate interdiction of crimes in-progress. While fixed ALPR cameras have the capacity of alerting personnel to a crime in-progress, the alerting process is multi-layered, is dependent on which users are logged into the system at any given time, and often goes through third-party personnel in the Police Department’s communications center. In mobile systems, an officer driving an ALPR-equipped patrol vehicle can be immediately alerted to a potential criminal offense or criminal offender, allowing the officer to take immediate action to investigate the alert and potentially stop a crime in progress, locate a missing person, or identify a wanted vehicle. But fixed ALPR cameras can be mounted on traffic lights and poles in major thoroughfares, points of ingress or egress into or out of the city limits and positioned in areas with high traffic density. Since criminal offenders aren’t bound to stay within a particular location within the city, or even within the city limits, a fixed ALPR camera’s ability to capture images from key locations 24 hours a day provides detectives with significantly improved capability to identify and locate vehicles involved in crimes that have victimized members of our community. POTENTIAL FOR DISPROPORTIONATE ADVERSE IMPACTS, AND MITIGATION The Police Department is aware of concerns that ALPR data will be shared with other agencies that engage in immigration enforcement. Community members have also expressed concern that ALPR data will be used for purposes other than law enforcement, or could disproportionately affect specific communities or cultures. The Police Department is also aware of concerns that ALPR data may be used to track the movements of people around sensitive areas, such as houses of worship, health clinics and may be used to infringe upon the First Amendment rights of individuals. The Chula Vista Police Department has had an ALPR program since 2007. At the inception of the program the department put safeguards in place to minimize or mitigate potential disproportionate impacts. Access to the ALPR system is limited only to employees with a justifiable need related to their official duties, such as sworn officers, dispatchers, and crime analysts. The department established a comprehensive use policy requiring that all users attend a minimum of 2-hours training. The department requires that only authorized users may access the system, and then only when necessary to conduct their official duties, otherwise known as a need-to-know and right-to-know basis. Authorized users can only access the system for the purposes of a police investigation, and user activity in the system is logged for auditing by supervisory or management personnel. Page 45 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Surveillance Technology Impact Report: Automated License Plate Recognition Page 3 The department’s use policy also specifies which law enforcement agencies we may authorize to search Chula Visa’s ALPR data. The ability to share ALPR data with other agencies is restricted to command personnel for the department. As a matter of practice, the department shares ALPR data with only California state law enforcement agencies. The department does not share data with federal law enforcement agencies, nor with any law enforcement agency for the purpose of immigration enforcement. The department’s use policy was recently updated based on the proposed expansion of the ALPR System, and includes a change to the department’s retention guidelines. The department proposes to reduce the retention of ALPR data from one year, to 30-days. The ALPR system will be configured to automatically purge ALPR data after the 30-day period expires. ALPR is content-neutral; it does not identify the race of the driver or the registered owner of the vehicle. To ensure that the Police Department continues to build trust in the community and mitigates any potential disparate impacts, the Police Department will continue to adhere to its use policy of limiting access and use of the ALPR system to official investigations or community caretaking functions, and limiting access to the ALPR system to trained and authorized department personnel. Further, the Police Department will continue to audit the ALPR system on a regular basis to provide a measure of proactive accountability. In doing so, the department can mitigate the likelihood of disparate treatment of individuals based on factors not related to true police investigations and simultaneously minimize perceived oversurveillance of specific communities or demographics of our city. The department does not collect data on the demographics about the owners or operators of vehicles. The ALPR program operates as a stand-alone system and does not capture nor store personally identification information. The department recently decided to expand the ALPR program to add fixed camera locations throughout the city. These locations were determined based on population density, traffic patterns, ingress locations, egress locations into and out of the city and crime data, and locations were identified so as to distribute ALPR cameras in such a way to minimize the potential for disparate impacts on local communities. POTENTIAL FOR ADVERSE IMPACTS ON THE SECURITY AND ACCESS TO SENSITIVE PERSONAL INFORMATION, AND MITIGATION ALPR systems do not collect nor store sensitive personal identifiable information and are stand-alone systems. The system also does not access outside or third-party databases that contain personal identification information. Nonetheless, the Police Department tightly controls access to the ALPR system and logs user activity in the system for proactive audits. Access to the system is granted only with authorization, after training, and only through unique usernames and passwords for each authorized user. Department policies prohibit sharing usernames and passwords. FINANCIAL IMPACTS AND FUNDING SOURCE Approval of the Police Department’s proposal to accept $3,037,986 in grant funds from the Board of State and Community Corrections for the Organized Retail Theft Prevention Grant Program, and to therefore expand the Police Department’s ALPR system, will designate $1,372,500 of grant funds for the expanded ALPR system. Because the grant period covers three fiscal years, subsequent budgets will include allocations for the expanded ALPR system based on costs provided by the provider. Currently, these costs are estimated at $472,500 in year one and $450,000 a year for year two and year three. This is in addition to the annual costs of the Police Department’s pre-existing ALPR system, estimated at $73,000 per year. Page 46 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Surveillance Technology Impact Report: Automated License Plate Recognition Page 4 POTENTIAL TECHNOLOGY ALTERNATIVES ALPR is a technological capability rather than a specific tool. While a variety of tools exist that can perform the functions of ALPR, the Police Department is not aware of any other technology that does what ALPRs technology can do. Page 47 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 48 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 49 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 50 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 51 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 52 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 53 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 54 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Privacy Protection & Technology Advisory Commission May 6, 2024 Chula Vista Police Department Page 55 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Chief Roxana Kennedy Chula Vista Police Department Page 56 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Organized Retail Theft Prevention Grant program Chula Vista Police Department Page 57 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Organized Organized Retail Theft Prevention Grant Program ▪Prevention and Response to: ▪Organized retail theft ▪Motor vehicle theft ▪Motor vehicle accessory theft ▪Cargo theft California State Funded Grant Page 58 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Chula Vista Cases: Vehicle and Vehicle Accessory Theft Is Up 0 100 200 300 400 500 600 700 800 900 Vehcile Theft Vehicle Accessory Theft 2020 2021 2022 2023 Avg. 28.5% 42% Increase for 2023 compared to the average of the prior 3 years. Page 59 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda 3-Year Grant of $3.037 Million to combat Auto and Auto Accessory Theft City of Chula Vista Award Auto Theft Detective Operational Support Community Engagement Data Analysis and Reporting Enhanced ALPR Program Page 60 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda ALPR Program Goals Community Safety Solving Crime Crime Reduction Transparency Page 61 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda What is an Automatic License Plate Reader Digital camera systems paired with software to identify license plate numbers. •Mounted on Vehicles •Fixed locations (Traffic Signal Poles) •Stand Alone System •No sensitive personal information is contained in the system. Page 62 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Current ALPR Program •Motorola Mobile ALPR Cameras mounted to (4) patrol vehicles. Page 63 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Current ALPR Program •Vigilant LEARN Vehicle Manager License Plate Recognition Software Page 64 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda ALPR Expansion + 150 Fixed Flock Falcon ALPR Cameras Throughout the City Page 65 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda What you get with Flock Safety: •Indiscriminate evidence from fixed locations •All maintenance is included •INFRASTRUCTURE-FREE •Reduce time to value and utility costs with full-service deployment. •24/7 coverage •Capture objective vehicle data around •Real-Time Alerts •NCIC •NCMEC (Amber Alert) •Custom Hot Lists •Ethically Made •No people •No facial recognition •No traffic enforcement Page 66 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda •Footage owned by City •Will never be sold or shared by Flock •30-day retention, then deleted •Short retention period ensures that all data not associated with a crime is automatically deleted & unrecoverable •Takes human bias out of crime-solving by detecting objective data, and detecting events that are objectively illegal (ex. Stolen vehicles) •Data is stored on AWS Government Cloud servers with end-to-end encryption. •Search reason is required for audit trail •Not facial recognition software •Not predictive policing •No Sensitive Personal Information is contained in Flock •Not used for traffic enforcement •Not connected to registration data or 3rd party databases (Carfax, DMV) •Transparency portal Privacy Concerns Page 67 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Transparency Portal Transparency •Customized by the department •Usage metrics •Downloadable search audits Dashboard (Internal) •Measure crime patterns •Audit Search History Page 68 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda What this IS and is NOT What this IS •License plate recognition •Used to solve crimes •Adheres to all state laws •Alerts officers of wanted vehicles •Gathers objective evidence and facts about vehicles, not people. What this NOT •Not facial recognition •Not tied to Sensitive Personal Information •Not used for traffic enforcement •Data not stored beyond 30 days •Automatically deletes every 30 days. Page 69 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda How This Technology Prevents Crime? Proactive • Real-time alerts when stolen or wanted vehicles enter the city. Investigative •Used by detectives to investigate crimes. Results •As clearance rates increase, crime rates decrease. Flock cameras serve as a deterrent. Page 70 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Deployment Strategy Cover the ingress and egress points of the city Consider major intersections, population density and vehicle traffic patterns. Hot spots where crime occurs in the city Page 71 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda 31 Ingress and Egress Locations in Chula Vista Page 72 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Council District Population Density Per Square Mile Page 73 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 74 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 75 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda ALPR Placement and Hot Spots for Vehicle and Vehicle Accessory Theft 2023 Page 76 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 77 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Proposed ALPR Placement and Hot Spots for Violent Crime Calls for Service Violent Crime 2023 ALPR Placement and Hot Spots for Violent Crime Page 78 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Automatic License Plate Readers in San Diego County 2023 Per Square Mile LE Jurisdiction Fixed ALPR Cameras Mobile ALPR Cameras Total Total per Square mi. Carlsbad 128 24 152 3.27 Chula Vista 150 4 154 2.88 Coronado 9 0 9 1.13 El Cajon 40 4 44 2.77 Escondido 2*4 6 18.75 La Mesa 20 4 24 2.19 National City 96*0 96 10.55 Oceanside 10 0 10 0.24 Port of San Diego 5 0 5 1.33 San Diego City 500 27 527 1.54 San Diego County 20†39 59 N/A * Pending † Includes Fixed locations in Del Mar, Encinitas, Solana Beach Page 79 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Transparency Portal https://transparency.flocksafety.com/chula-vista-ca-pd Page 80 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Success Stories •24-04676 - Stolen Vehicle Recovery & Arrest (District 2) •(Located within One day of being reported) •24-04193 - Stolen Vehicle Recovery (District 2) •(DNA Evidence Awaiting Processing/ Vehicle Located Same Day it was Reported) •24-04580 - Stolen Vehicle Recovery & Arrest (District 2) •(Suspect had Narcotics in his Possession/ Elderly Victim - Theft Mar 27th - Located Apr 6) •24-04537 - Stolen Vehicle Located & Arrest (District 4) •(Same-day report and recovery) •24-114030 (Original case-SDSD Case) – Stolen Vehicle Located & Arrest (District 2) •(Regional Auto Theft Task Force Case Theft Mar 29th /Located Apr 2) •24-04645 - Stolen Vehicle Located & Arrest (District 4) •(Rental Vehicle / Located within One day of being reported) Page 81 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Success Stories •24-04938 - Stolen Vehicle Located & Arrest – (Patrol Officers used it as a Proactive tool and directed them to an area to search Same-day report and vehicle located) •24-04574 – Stolen Vehicle Located (ALPR Alert – Registered Owner in possession/ Did not call police to say it was recovered. Theft 03-28 / Recovery 04-6) •24-04959 – Domestic Violence Case, ALPR used for plate info; Suspect w/ No Bail warrant and on the run for 10 years. DV Victim with Injuries.(Suspect Identified Same Day) •24-05029 - Elderly victim who was an innocent purchaser of the stolen vehicle. •Stolen Mar 29 / Recovery Apr 15 •24-03963 - Felony Hit and Run (w/injuries) •Officers identified the vehicle within minutes of the call for service by searching the Flock ALPR database shortly after taking the report. Page 82 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Success Stories Continued •24-03963 - Felony Hit and Run (with injuries)(District 2) •(Officers identified the vehicle within minutes of the call by searching Flock Safety shortly after taking the report.) •24-05350 - Carlsbad PD Stolen Vehicle.(District 2) •Pursuit: The suspect is not in custody and is wanted on Sexual Assault/ Robbery Suspect. A sawed -off shotgun was recovered. (Theft Apr 19 / Recovery Apr 21) •24-05284 - Carjacking Vehicle. The suspect was taken into custody and booked.(District 4) •The victim was rendered unconscious & significantly injured. (Same-day report and recovery) •24-05456 - Stolen Vehicle Recovery & Arrest (Theft 04-20 / Recovery 04-22)(District 4) •2024 (2 Homicide cases), ALPR was used to assist the investigation. ALPR used to locate an escaped sexual assault felon from a Northern CA Detention facility. (Hours after the incident) Total number of stolen vehicles recovered: 12 Total number of arrests for stolen vehicle possession/auto theft: 9 Page 83 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Quarterly Progress Report (Oct 1st – Dec. 31st '23) Area of Focus Motor Vehicle Theft and Motor Vehicle Accessory Theft Inputs and Implementation Established and Update ALPR Policy 460 Established Quality Assurance with SANDAG Goals and Objectives 1.Decrease the # of Vehicle Stolen and Catalytic Converters Stolen 2.Installation of Implementation of Fixed ALPRs 3.Increase Public Awareness on Vehicle Theft and Catalytic Converter Theft Challenges and Highlights Staffing Levels Hindered Filling the Auto Theft Detective Position Installation Process Purchased 5 Detective Vehicles Page 84 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Quarterly Progress Report (Jan 1st – Mar. 31st '24) Area of Focus Motor Vehicle Theft and Motor Vehicle Accessory Theft Inputs and Implementation Installed 101 Flock Security ALPR Cameras Hired (1) Auto Theft Detective Trained Department Employees on Use of the System and Reporting for Auto Theft Related Cases Goals and Objectives 1.Decrease the # of Vehicle Stolen and Catalytic Converters Stolen 2.Continuation Installation of Implementation of Fixed ALPRs 3.Increase Public Awareness on Vehicle Theft and Catalytic Converter Theft Challenges and Highlights (1) Proactive Flock ALPR Operation Auditing Cameras Use and Function Installing the 49 Remaining Cameras (12) Stolen Vehicles Recovered w/ Flock Security (9) Suspects Arrested using Flock Security Page 85 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda The Chula Vista Police Department gave this presentation to the Chula Vista City Council on Oct. 17th. City Council approved (5 – 0) the expansion of the program: City Council accepted $3,037,986 in grant funds from the California BSCC for the Organized Retail Theft Prevention Grant Program, adding one Police Agent to the police department's authorized staffing level. Approved Agreement Number BSCC 1146-23 with the Board of State Community Corrections and appropriated $1,133,788 to the Fiscal Year 2023-24 Police Grants Section of the State Grants Fund. Approved a Flock Group, Inc. agreement for 150 fixed Automated License Plate Recognition (ALPR) cameras. Approved an agreement with SANDAG for the Organized Retail Theft Grant Program. In Closing Page 86 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Chula Vista Police Department Page 87 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Flock Safety CJIS Compliance Overview MARCH 1, 2024 CJIS Overview The Criminal Justice Information Services (CJIS) Division of the US Federal Bureau of Investigation (FBI) provides state, local, and federal law enforcement and criminal justice agencies access to criminal justice information (CJI) — for example, fingerprint records and criminal histories. Law enforcement and other government agencies in the United States must ensure that their use of cloud services for the transmission, storage, or processing of CJl complies with the CJIS Security Policy, which establishes minimum security requirements and controls to safeguard CJI. The CJIS Security Policy integrates presidential and FBI directives, federal laws, and the criminal justice community’s Advisory Policy Board decisions, along with guidance from the National Institute of Standards and Technology (NIST). The Policy is periodically updated to reflect evolving security requirements. The CJIS Security Policy defines 16 areas that private contractors such as cloud service providers must evaluate to determine if their use of cloud services can be consistent with CJIS requirements. These areas correspond closely to NIST 800-53, the foundation of Flock Safety’s (Flock) security program has been built-on. Flock Safety and CJIS Applicability Flock’s Automated License Plate Reader (ALPR) and FlockOS leverages plate number extract files from National, State, and local hotlist databases to provide real time alerting to Law Enforcement agencies. The most common hotlist extract file used with our solutions is the National Crime Information Center (NCIC) file. This file represents vehicles of interest submitted by agencies across the US and contains license plate number and state, reason, vehicle description, and Originating Agency Identifier (ORI) number of the submitting law enforcement agency. : flocksafety.com f 1 oc k sa fe t y (886) 901-1781 | support@flocksafety.com Page 88 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda ) up Flock Safety has implemented the safeguards and technologies to meet or exceed the “minimum standards of security requirements” outlined in the FBI’s CJIS Security Policy (currently v5.9.3, dated September 14, 2023). This document provides a summary of the processes and technologies implemented by Flock Safety for compliance with the FBI’s CJIS Security Policy. CJIS data is stored and processed in Amazon’s AWS GovCloud environment. Flock Safety and CJIS Security Policy Flock signs the CJIS Security Addendum in states with CJIS Information Agreements. These tell state law enforcement authorities responsible for compliance with CJIS Security Policy how Flock’s cloud security controls help protect the full lifecycle of data and ensure appropriate background screening of operating personnel with access to CJl. Flock continues to work with state governments to enter into CJIS Information Agreements. Flock has assessed the operational policies and procedures of Flock OS, and will attest to their ability in the applicable services agreements to meet FBI requirements for the use of in-scope services. Policy Area 1—Information Exchange Agreements As part of all Flock contracts for service, whether as part of a purchase, trial, or shared access agreement* Flock Safety and the agency sign an “Information Exchange Agreement” in the form of a Memorandum of Understanding (MOU). This MOU represents the commitment between the agency and Flock Safety to ensure prevention of unauthorized disclosure, alteration, or misuse of the CJIS data leveraged by the law enforcement agency via the Flock Safety solution. *An agency who has not purchased Flock Safety cameras but has access to cameras purchased by another entity Policy Area 2—Security Awareness Training Flock Safety employees including those that interact with CJIS data or access infrastructure that processes CJIS data complete an annual Security Awareness Training. Our training program to employees includes topics such as identifying Insider Threat, Social Engineering tactics, and specific training for teams responsible for engineering applications and infrastructure. flocksafety.com f { oc k Sa f e t y (886) 901-1781 | support@flocksafety.com Page 89 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Policy Area 3—Incident Response Flock Safety maintains an incident response plan that defines the roles and responsibilities of essential personnel upon detection of an incident. This plan is shared with personnel responsible for incident response and is rehearsed annually. Policy Area 4—Auditing and Accountability Flock Safety’s Security Operation Center utilizes Amazon Guard Duty that analyzes Cloudtrail logs and has deployed Security Information and Event Management (SIEM) technology that captures relevant details including successful/unsuccessful log-on attempts to change passwords, actions by privileged users, and attempts to destroy audit logs. Audit logs include date, time, type of event, user identities, and outcomes and are retained for a period of one year. Policy Area 5—Access Control Flock Safety utilizes identity providers and Identify Access and Management (IdAM) policies within AWS for Account Management and enforcement of Least Privilege. These solutions provide automated system account management, auditing, and required re-authentication based on inactivity. Flock also provides options for Single Sign On that enable customers to direct governance for customer's Flock OS user accounts. Customer, employee, and resource connections are encrypted using a secured web connection, HTTPS and TLS. Policy Area 6—Identification and Authentication All Flock Safety users have a Universally Unique Identification (UUID-128 bit) that identifies them throughout the Flock Safety platform. This UUID is maintained throughout the lifecycle of the user’s account including name change, role changes or permissions changes. Flock Safety requires the use of secure passwords and provides multi factor authentication (MFA) solutions for authentication to the platform. Flock employees with privileged access to confidential resources within the AWS cloud environment are required to use a hardware based token. : flocksafety.com flock safet y (886) 901-1781 | support@flocksafety.com Page 90 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Policy Area 7—Configuration Management Flock Safety collaborates with AWS as our cloud infrastructure provider to align existing architecture with best practices defined by the AWS Well-Architected Framework that are designed to reduce risks around security, reliability, and operational excellence. The Well Architected Framework requires compliance with configuration benchmarks published by the Center for Internet Security (CIS). Flock is a recognized AWS partner through demonstrated adherence to AWS Well Architected Framework. Flock maintains documentation to illustrate the data flow from products, components involved in processing and storage, integration with agency partners, integrations with commercial partners, and logical locations of infrastructure. Policy Area 8—Media Protection Flock Safety uses the AWS GovCloud infrastructure that is CUIS compliant for storing and processing of CJIS data. Hardware protections for storage, transport and sanitization are the responsibility of AWS as defined by the AWS shared responsibility model. AWS maintains custody of all assets until sanitized using industry accepted standards. Policy Area 9—Physical Protection Flock Safety utilizes AWS Services hosted within AWS Commercial, Ohio Region, and US GovCloud (US-East) data centers that are safeguarded from man-made and natural disasters at the Environmental, Perimeter, Infrastructure and Data Layers. Refer to AWS Data Center Overview for a description of implemented physical security safeguards. Policy Area 10—Systems and Communications Protection Flock Safety processes and stores CJIS data within the United States, within AWS GovCloud and uses AES 256 symmetric encryption, FIPS 140-2-compliant APIs and HTTPS (Transport Layer Security [TLS]) to encrypt communications. Flock OS provides a user interface and customer portal that is offered through a separate identity provider than the identity governance platform that engineering teams use to support compute, storage, and network services. : flocksafety.com f 1 Oc k Sa fe t y (886) 901-1781 | support@flocksafety.com Page 91 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Flock maintains logical system boundaries between cloud infrastructure, devices, and customer and administrative users. This separation is maintained through AWS Security Groups, Web Application Firewalls, and AWS Services designed to prevent and detect intrusions and denial of service attempts. Policy Area 11—Formal Audits Flock Safety performs routine reviews to confirm controls exist and operate effectively. SOC 2 audits are performed by an external firm annually to demonstrate compliance with general security standards. Flock signs agreements with partner agencies to enable the right to audit upon agencies request. Policy Area 12—Personnel Security Identification, state of residency and national fingerprint-based record checks are conducted prior to granting unescorted access to unencrypted criminal justice information. Access for users who are terminated are immediately revoked. Flock maintains an inventory of users with unescorted CJI and conducts regular reviews to validate each user’s access. Flock Safety employees that have access to CJIS data or access infrastructure that handles CJIS data undergo Security Awareness Training, sign the FBI Criminal Justice Information Services Security Addendum. Policy Area 13—Mobile Devices FlockOS is cloud hosted and delivered as both a web and a mobile application. Flock has collaborated with law enforcement customers to design applications that are compatible with agency requirements for Mobile Device Management, Malicious Code Protection, Device Certificates, Authentication, and Access Control. Policy Area 14: System and Services Acquisition Flock safety maintains an inventory of system and infrastructure resources and updates components prior to end of contract and support. : flocksafety.com f { Oc k Sa f et y (886) 901-1781 | support@flocksafety.com Page 92 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda cp Policy Area 15: System and Information Integrity Flock Safety has deployed tools that perform testing of software, firmware and system infrastructure for vulnerabilities and remediates vulnerabilities according to timeframes based on severity. Flock Safety has deployed security technologies and processes to monitor system activity for indicators of attack, unauthorized connections or actions, and the introduction of malicious code. The security technologies deployed include malware protection that analyzes files for malicious code and takes mitigating actions including alerating Flock’s security operations center for resolution. Flock Safety retains customer images and audio recordings according to customers’ defined retention schedule or adheres to the standard retention schedule of thirty days. We have built our platform to erase data from storage locations automatically according to defined policies. Policy Area 16: Maintenance Flock Safety has established a process to document changes made to system components in the environment, capture details of testing performed, and log activities performed by an administrator. Flock Safety’s CJIS infrastructure is maintained by AWS Services per the AWS Responsibility Model. AWS performs maintenance of equipment to safeguard against loss of continued operability within AWS data centers. Maintenance is carried out by qualified persons who document actions completed. Additional References Flock Safety’s Trust Site FBI CJIS Security Policy AWS CJIS Policy AWS Shared Responsibility Model AWS Risk and Compliance 3 flocksafety.com f 1 Oc k sa f et y (886) 901-1781 | support@flocksafety.com Page 93 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Mariluz Zepeda From: Privacy Protection and Technology Advisory Commission To: Robert Subject: RE: [Records Center] PD Records Request :: PO00270-040424 From: Robert < Sent: Monday, May 06, 2024 1:39 AM To: Privacy Protection and Technology Advisory Commission <PTAC@chulavistaca.gov> Subject: Re: [Records Center] PD Records Request :: P0O00270-040424 | You don't often get email from. Learn why this is important WARNING - This email originated from outside the City of Chula Vista. Do not click any links and do not open attachments unless you can confirm the sender. PLEASE REPORT SUSPICIOUS EMAILS BY USING THE PHISH ALERT REPORT BUTTON or to reportphishing@chulavistaca.gov Below is an example of what an ALPR image often looks like. H io History of the Chula Vista Police Department ALPR Program and Related Technologies e On October 9, 2007, the City Council approved a Police Department proposal to fund the purchase of ALPR camera systems. The proposal included the purchase of camera systems mounted to three marked, routine police vehicles used by uniformed patrol officers. e On February 1, 2011, the City Council approved a Police Department proposal to fund the purchase of a fourth ALPR camera system. e In 2017, due to vendor issues and aging equipment, the department switched ALPR vendors from 3M/PIPS to Vigilant Solutions, which included a subscription to the Vigilant ALPR database, also known as the Law Enforcement Archival Reporting Network NM FARNY) Vinilant’c | FARN earnvica nravidac the ciuiherrihing law anfarramant ananev with On Mon, May 6, 2024 at 1:33 AM Robert > wrote: ~ public comment _ ROBERT JOHNSON a Forwarded message --------- From: CHULAVISTACA Support <chulavistaca@govqa.us> _ Date: Fri, Apr 26, 2024 at 5:33 PM Page 94 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda _ Subject: [Records Center] PD Records Request :: PO00270-040424 To: _ --- Please respond above this line --- RE: PUBLIC RECORDS REQUEST of April 04, 2024., Reference # PO00270-040424. Dear Robert Johnson, _ The City of Chula Vista is in receipt of your April 04, 2024 request for the following public records pursuant to the California Public Records Act (“CPRA”) (Cal. Gov. Code section 7920.000 et seq.): ""ce2dcace-9fa1-49b7-8c19-a999b141d030","cc73a83b-ce6d-4c93-a75e-e5d7d7e02541","2024-03- _ 22716:37:25.250Z",0,"Image Download "1b15f1bf-64af-4954-b46c-b8f3f670cbbc","70147d66-fd92-41e5-bd06-1fa59911da99","2024-03- — 26T17:39:54.9092",0,"Image Download" "98e85e91-ef05-4554-a15a-d3257a0c6eb7","f357ef96-8a05-4ca5-b789-1b546fefef6f","2024-03- | 28T21:15:19.786Z",4262,"HSI #SY13WR23SY0030 " _ HSI #SY13WR23SY0030 im not sure how to find out what that means. im trying to find out what 0 means and why image download is listed and not a "REASON" "7b672a84-8d21-44da-848a-ad603cce7509","98d27f33-05c8-4655-92a1-4690270af97c",""2024-03- 13T21:45:33.045Z",72,"test" ** "7a2cca72-8a94-4879-bd58-a1c86338252c","7e3f5290-c283-4ad6-83f4-8c5fba6eb317","2024-03- - 147T23:24:09.8802",28,"Training" ** SAMEUSER "7b672a84-8d21-44da-848a-ad603cce7509","98d27f33-05c8-4655-92a1-4690270af97c","2024-03- 13T21:45:33.045Z",72,"test" ** "524bb04b-4e48-4c2b-97e2-d4c8ffb5cacf","98d27f33-05c8-4655-92a1-4690270af97c","2024-03- 13T22:08:34.1902",0,"Ongoing narc" "7a2cca72-8a94-4879-bd58-a1c86338252c","7e3f5290-c283-4ad6-83f4-8c5fba6eb317","2024-03- 14T23:24:09.880Z",28,"Training" ** - "d9f56580-90fa-435a-a0ff-4159d9998b93","7e3f5290-c283-4ad6-83f4-8c5fba6eb317","2024-03- 14T23:24:59.032Z",0,"Stolen plate" "5c9e1f2e-722f-4b4d-81fb-a0e1291e9e58","7e3f5290-c283-4ad6-83f4-8c5fba6eb317","2024-03- 15T03:16:55.4892" ,14,"Stolen vehicle" "69a6717c-4c34-4d8b-bac8-48027d5b66b9","7e3f5290-c283-4ad6-83f4-8c5fba6eb317","2024-03- 15T04:23:44.2962Z",80,"Stolen vehicle" "31036224-1a32-4357-ae4b-ceedde151b77","7e3f5290-c283-4ad6-83f4-8c5fba6eb317","2024-03- 16T22:27:11.978Z",0,"10851cvc" _ "b4ab71c8-023e-47dd-a05d-5ddb00554a81","7e3f5290-c283-4ad6-83f4-8c5fba6eb317","2024-03- 16T22:33:24.1682",0,"Image Download" ** Page 95 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda el "4d77d7c3-804b-4ad5-9256-4abc6860a371","7e3f5290-c283-4ad6-83f4-8c5fba6eb317","2024-03- 16722:44:59.7702",0,"10851" "bf5ae814-1639-4c64-a867-2a74922aa0fb","7e3f5290-c283-4ad6-83f4-8c5fba6eb317","2024-03- 16723:37:49.5142",0,"10851 cvc" "20e32e62-e89f-486b-8a96-6327ffac64ea","7e3f5290-c283-4ad6-83f4-8c5fba6eb317","2024-03- 16723:38:33.4492",4171,"Investigation 422" "cde0d3c6-d458-48ae-9868-09aa90c5a164","7e3f5290-c283-4ad6-83f4-8c5fba6eb317","2024-03- 16723:46:34.8012",0,"422 investigation" "cOce5ae8-927f-4682-9788-f1b847cfeb63","7e3f5290-c283-4ad6-83f4-8c5fba6eb317","2024-03- 177T00:09:46.9912",4171,"422 investigation" "Sff2d1fa-6a0c-4d23-83ee-fa1130d9ef93","7e3f5290-c283-4ad6-83f4-8c5fba6eb317","2024-03- 17700:34:43.127Z",0,"investigation" "€3ce489d-2ed9-41c4-b7bd-a687d77658db","7e3f5290-c283-4ad6-83f4-8c5fba6eb317","2024-03- 17700:43:35.1932",0,"10851 cvc" "fb692cde-f40b-49c1-929b-87f051a37f09","7e3f5290-c283-4ad6-83f4-8c5fba6eb317","2024-03- 17701:01:37.2932",0,"investigation" "Q9a616688-40e2-46c5-a5db-20a3f037304b","14f79dd4-2b8f-4095-9e6f-f57ec37ec5c2","2024-03- 29716:57:50.4672Z",4264,"2404045" "Oe8d8b03-ach6-4611-9c55-30b519bbe02b","14f79dd4-2b8f-4095-9e6F-f57ec37ec5c2","2024-03- 29T17:00:03.086Z",0,"Image Download" ** "042cd202-4897-4dee-986f-fdea9bcbc957","4bf832ea-4177-4d90-8f89-345b0b937637","2024-03- 30T04:07:12.0692Z",4268,"SDPD 23054064" does this mean SDPD requested it? "b5157323-dd5a-4720-bb1e-9b760a935bd1","70147d66-fd92-41e5-bd06-1fa59911da99","2024-04- 03720:40:43.174Z",4282,"2308848 benz" BENZ? "suspect" and othere codes like "Pc 487" directly say the rerason. auditing this just made me question a few of the and would like to understand why the reason isnt a violation of investigation. Training makes sense kinda." OK OR RK Ro og RR A OR OR RO Oe ee 2 OO OK 2K OK OK KK RK KOK OK RK OR OK KOK KKK We have reviewed our records and have responsive information. We conducted an internal audit on all the entries, including those without a case number or an incident number. We have verified the searches for each entry were within policy. ¢ The “0” under the cameras count means the search conducted by the officer did not search any of the cameras available to search. We hope this helps you better understand the data. If you have any other questions, please let us know. Should you have any questions please feel free to email this response directly. _ Sincerely, Police Support Services Staffa Page 96 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 97 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda wie Privacy Protection & Technology Advisory Commission sion REQUEST TO SPEAK CHUIAVISTA " SQLICITUD PARA DAR TESTIMONIO S/O L417 Date | Fecha [] SUPPORT | En APOYO ) [1 OPPOSE | En OPOSICION Information provided on this form is Agenda Item Numb eee part of the public record. Numero de asunto et La informacion proporcionada en este LI Item is NOT on the agenda formulario es parte del registro El asunto NO estd en la agenda ptiblico. Contact tonmavios (optional) | Oe de contacto (opcional) a 2 ee Nombre City of Residence | Address | Domicilio Ciudad de residencia Phone Number |Numero de teléfono E-Mail | Correo electrénico Check box(es) below ue la(s) casilla ontinuacién: C1 I do not wish to speak, please register my position on the record. No deseo comentar por favor registre mi posicion. C1 Subscribe to email agenda publication notifications. Suscribase a notificaciones de publicacién de agenda por correo electrénico. Submit this request to the Secretary prior to the meeting. Entregue esta solicitud al Secretaria antes de la sesion. Page 98 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 1 City of Chula Vista Regular Privacy Protection and Technology Advisory Commission Meeting MINUTES March 11, 2024, 5:00 p.m. City Hall, Bldg. C, Conference Room B-111 276 Fourth Avenue, Chula Vista Commissioners Present: Commissioner Batson, Commissioner Chambers, Commissioner Godinez, Chair Lake, Vice Chair Ruiz, Commissioner Williams, Commissioner Wood Also Present: IT Project Manager Kinnaird, Interim Acting City Attorney Maland, Deputy Director, City Clerk Services Malone, Secretary Zepeda _____________________________________________________________________ 1. CALL TO ORDER The meeting was called to order at 5:02 p.m. 2. ROLL CALL Deputy City Clerk Zepeda called the roll. 3. PUBLIC COMMENTS There were none. 4. PRESENTATIONS 4.1 Overview of the Roles and Responsibilities of the Commission IT Project Manager Kinnaird gave the presentation. 5. ACTION ITEMS 5.1 Approval of Meeting Minutes Moved by Commissioner Chambers Seconded by Commissioner Williams Page 99 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda 2024-03-11 Minutes - PTAC Page 2 To approve of the minutes dated: February 5, 2024. The motion carried by the following vote: Yes (6): Commissioner Chambers, Commissioner Godinez, Chair Lake, Vice Chair Ruiz, Commissioner Williams, and Commissioner Wood Result, Carried (6 to 0) 5.2 Selection of Chair and Vice Chair for Fiscal Year 23/24 Moved by Commissioner Godinez Seconded by Commissioner Chambers To appoint Commissioner Lake as Chair and Commissioner Ruiz as Vice Chair for the remainder of Fiscal Year 2023/24. The motion carried by the following vote: Yes (6): Commissioner Chambers, Commissioner Godinez, Chair Lake, Vice Chair Ruiz, Commissioner Williams, and Commissioner Wood Result, Carried (6 to 0) 7. CHAIR'S COMMENTS There were none. 8. COMMISSIONERS' COMMENTS There were none. 9. ADJOURNMENT The meeting was adjourned at 5:26 p.m. Minutes prepared by: Mariluz Zepeda, Commission Secretary _________________________ Mariluz Zepeda, Commission Secretary Page 100 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda RESOLUTION NO. 2024-___ RESOLUTION OF THE PRIVACY PROTECTION AND TECHNOLOGY ADVISORY COMMISSION OF THE CITY OF CHULA VISTA SETTING A TIME LIMIT FOR MEETINGS AND ADOPTING RELATED MEETING CONDUCT RULES WHEREAS, parliamentary procedure is employed to facilitate meetings with the goals of protecting the rights of the minority, maintaining the rule of the majority, and promoting the most efficient proceedings; and WHEREAS, the adoption of rules for the conduct of meetings will ensure fair and equitable opportunities to hear varying viewpoints, avoid confusion, and foster productive, efficient meetings; and WHEREAS, limiting the length of meetings and implementing related rules, is intended to respect the time of the public and volunteer commissioners, support efficiency and efficacy in meeting conduct, and promote thoughtful decision-making and meaningful engagement by avoiding unnecessarily long proceedings; and WHEREAS, the Privacy Protection and Technology Advisory Commission wishes to implement a time limit for meetings and related rules to facilitate efficient meetings that are respectful of the Commissioners’ and the public’s time. NOW, THEREFORE, BE IT RESOLVED that the Privacy Protection and Technology Advisory Commission of the City of Chula Vista, that Commission meetings shall adhere to the following rules for the conduct of its meetings: 1. The Chair or presiding officer shall adjourn the meeting two hours after the meeting was called to order unless: a) adjourned sooner due to completion of the business at hand or by a majority vote of the Commission; or b) extended pursuant to paragraph 4, below. The discretion exercised by the Chair under this provision is subject to the right of any Commissioner to appeal to the Commission. 2. In accordance with Chula Vista Municipal Code section 2.25.205, when the number of public speakers would likely result in the meeting extending beyond the established time, the Chair or presiding officer shall endeavor to hear from a balance of public speakers, employing strategies that may include reducing public speaking time limit for all speakers to allow more speakers to be heard or limiting the number of speakers on an item such that an equal number of speakers in favor of and opposed to a matter may be heard. The discretion exercised by the Chair under this provision is subject to the right of any Commissioner to appeal to the Commission. 3. The Chair or presiding officer shall have the discretion to limit the amount of time each Commissioner, including the Chair, may speak on an item in a manner that allows all Commissioners an equal opportunity to comment. The discretion exercised by the Chair under this provision is subject to the right of any Commissioner to appeal to the Commission. Page 101 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Resolution No. 2024-___ Page 2 4. The Commission may extend a meeting for up to one additional hour by majority vote. 5. When a meeting ends with remaining business to be heard, the remaining business may be heard at a future regular meeting, or a special meeting may be called pursuant to Chula Vista Municipal Code § 2.25.200. PASSED, APPROVED, and ADOPTED by the Privacy Protection and Technology Advisory Commission of the City of Chula Vista, California, this ___ day of _________, 202_, by the following vote: AYES: Commissioners: NAYS: Commissioners: ABSENT: Commissioners: Chair ATTEST: Approved as to form by Mariluz Zepeda, Commission Secretary Marco A. Verdugo City Attorney STATE OF CALIFORNIA ) COUNTY OF SAN DIEGO ) CITY OF CHULA VISTA ) I, Mariluz Zepeda, Secretary of the Privacy Protection and Technology Advisory Commission of the City of Chula Vista, California, do hereby certify that the foregoing Resolution No. 2024-___ was duly passed, approved, and adopted by the Privacy Protection and Technology Advisory Commission at its regular meeting held on the ____ day of ______ 202_. Executed this ___ day of _______, 202_. Page 102 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Resolution No. 2024-___ Page 3 Mariluz Zepeda, Commission Secretary Page 103 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 1 of 2 Highlights of Activities During Fiscal Year 2023-24 Establishment and Leadership: Ordnance 3553 was passed on July 25th, 2023, officially establishing the Privacy Protection and Technology Advisory Commission (PTAC). Nominations and appointments were finalized during the City Council meetings on November 28th and December 5th, 2023. Susan Lake was elected Chair and Paty Ruiz as Vice Chair during the meeting on March 11th, 2024. The committee convened three times during Fiscal Year 2023-24, laying the groundwork for our mission. Board/Commission Comments or Recommendations to Council Overall, the commission will strive to balance the benefits of technology with the protection of individual privacy rights, working to create a safe and transparent digital environment for residents and stakeholders. FY 2022-23 Annual Activities Report Page 104 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda Page 2 of 2 Page 105 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda RN Privacy Protection & Technology Advisory Commission Nn REQUEST TO SPEAK HMEANBIA SOLICITUD PARA DAR TESTIMONIO & [o/24 [Date | Fecha [1 SUPPORT | En APOYO & O es C1 OPPOSE | En OPOSICION Information provided on this form is Agenda It pete elkg mata ber | part of the public record. Numero de asunto é La informacién proporcionada en este LI Item is NOT on the agenda formulario es parte del registro El asunto NO estd en la agenda publico. Contact Information (optional) | Informacién de contacto (opcional) oe Jo Kav+ .) OWE City of Residence | Address | Domicilio Ciudad de residencia Phone Number |Numero de teléfono E-Mail | Correo electrénico Check box(es) below | Marque la(s) casilla(s) a continuacién: [1] I do not wish to speak, please register my position on the record. No deseo comentar por favor registre mi posicion. [1 Subscribe to email agenda publication notifications. Suscribase a notificaciones de publicacién de agenda por correo electrénico. Submit this request to the Secretary prior to the meeting. Entregue esta solicitud al Secretaria antes de la sesion. Page 106 of 106 City of Chula Vista Privacy Protection and Technology Advisory Commission May 6, 2024 Agenda