Part of Parking BOXX’s ALPR Policy Compliance Guide for California parking and property operators. For the statutory background behind each section below, see what California’s ALPR law actually requires.
The following is an illustrative example only, to show the kind of information a policy typically covers — it is not a legal document, has not been reviewed by an attorney for your situation, and should not be copied and published as-is. Have your own counsel draft or review your actual policy before publishing it.
Sample policy
[Company Name] ALPR Usage and Privacy Policy
Purpose: [Company Name] uses Automated License Plate Recognition (ALPR) technology at [location(s)] for the purpose(s) of [e.g., vehicle entry/exit processing, payment, parking enforcement].
Authorized Access: Access to ALPR data is limited to [job titles], who receive training on [data handling / privacy practices] before being granted access.
Security and Compliance Monitoring: [Company Name] monitors use of the ALPR system through [e.g., periodic access audits, log reviews] to ensure compliance with this policy and applicable law.
Data Sharing: ALPR data is not sold. It may be shared with [named categories of third parties, e.g., payment processors, law enforcement pursuant to valid legal process] for the purpose(s) of [state purpose], and is not otherwise transferred to third parties.
Responsible Custodian: The [job title, e.g., “Director of Operations”] is responsible for administering this policy.
Accuracy: [Company Name] takes reasonable measures, including [describe], to ensure the accuracy of ALPR data and to correct errors when identified.
Retention and Destruction: ALPR data is retained for [time period] and is then [destruction method].
Why each section exists
Each bracketed section above maps directly to one of the 7 elements Civil Code § 1798.90.51(b) requires — see what California’s ALPR law actually requires for the full breakdown of what each element needs to cover and why.
Before you publish
- Have qualified legal counsel review the final language against your specific ALPR use case
- Confirm the policy is posted conspicuously on every website tied to your location — not just kept on file
- Make sure the retention period and destruction process stated in the policy match what actually happens in practice
This page is for informational purposes only and does not constitute legal advice. Consult your own attorney before publishing an ALPR usage and privacy policy.