Criminal Justice (Privacy)

SB 40, the "Driver Privacy and Safety Act," limits how law enforcement and private entities can share automated license plate reader (ALPR) data. It prohibits sharing ALPR information for immigration enforcement, investigating protected health care activities (like reproductive or gender-affirming care), or targeting constitutionally protected speech. The law makes ALPR data confidential (not public record), requires court orders for private data sales, and mandates quarterly reports to the attorney general on out-of-state data requests. Violations can result in $10,000 fines per incident.