Automatic license plate recognition systems (law enforcement use and vendor duties)

Limits police use of automatic license plate readers to criminal investigations with reasonable suspicion and missing or endangered person cases, requires system data to be purged after 21 days and audit trails after two years, and bars selling or sharing the data with private or out-of-state databases. Vendors must certify they will not sell or share Virginia ALPR data and must notify the agency of third-party data requests; contract terms under subsection C apply from July 1, 2026.