LA Council seeks citywide privacy policy for AI and license plate readers

A move toward unified standards

The Los Angeles City Council voted unanimously on November 6, 2026, to request a single citywide data privacy policy for artificial intelligence and automated license plate reader (ALPR) technology. Councilwoman Monica Rodriguez introduced the motion, which directs the Information Technology Agency and other departments to provide formal recommendations.

The requested standards are intended to oversee the city's methods for gathering, keeping, holding, viewing, and making public information. The motion also calls for rules regarding cybersecurity, protection against security breaches, and transparency. It aims to establish clear boundaries on permitted and prohibited uses of these technologies.

While the motion is not an ordinance, it sets the specific topics that must be addressed in a future report. The council will need to take further action once city staff return with their recommendations. This move follows weeks of debate over a specific ALPR pilot program that the council paused in October.

Defining the policy's scope

The motion is designed to be broad, covering not just AI and ALPR but also what Rodriguez called 'other emerging technologies.' This means the eventual policy could apply to a wide range of tools that the city has not yet purchased or implemented. The goal is to create a framework that can adapt as new technologies appear.

The scope includes many process-oriented requirements, such as retention schedules and access logs. These rules apply to any data system, whether it is used to read license plates or to score risk with a machine learning model. By focusing on data handling, the city can create a policy that covers tools that may not even exist yet.

The motion seeks to address the balance between public safety and individual privacy. While police may focus on identifying stolen vehicles, privacy advocates often focus on the aggregate picture of where a vehicle travels over time. The proposed rules on retention and access are where the city will attempt to strike that balance.

Impact on city departments and vendors

Currently, the Los Angeles Police Department uses ALPR technology to find stolen cars and those linked to wanted individuals. Department officials have stated that these systems do not use facial recognition or identify specific drivers or passengers. A citywide policy could turn these specific department descriptions into enforceable rules for all city agencies.

For technology vendors like Axon Enterprise and Motorola Solutions, the move changes the landscape of city contracts. Whatever the city decides regarding data sharing or retention will eventually land in the contract terms and product configurations of these large public-safety providers. A vendor that once negotiated with a single department may soon have to negotiate against a citywide baseline.

The motion suggests that logging and auditability will become essential requirements for any product sold to the city. A tool that cannot show who searched what and when will struggle to meet a policy that demands oversight. Vendors that already build role-based permissions and exportable audit trails may find themselves with a competitive advantage in the local market.

Standardizing the 'boilerplate'

Councilwoman Rodriguez emphasized the need for consistency across different city departments. She argued that the city should not have different departments using different standards for handling sensitive data. This highlights a move away from a case-by-case review of every new technology purchase.

The councilmember specifically used the word 'boilerplate' to describe her vision for these standards. In procurement, boilerplate refers to language that appears in every contract by default. If successful, these privacy and security terms would become a standard attachment to any technology purchase, preventing departments from negotiating them away on a deal-by-deal basis.

This approach mirrors a broader political pattern in California where officials are treating tech governance as a live issue. By creating a citywide standard, Los Angeles is attempting to fill a gap in federal capacity. When federal oversight lags, city governments often create their own staff and standards to manage the risks of new technology.

What remains unknown

While the motion establishes a clear direction, several details remain unconfirmed. The reporting does not provide a specific deadline for the Information Technology Agency to submit its recommendations. It also does not specify which departments, aside from the ITA, must contribute to the report.

The status of the specific ALPR pilot program approved in September remains in limbo. It is currently unclear whether that pilot will resume, be modified, or be ended entirely. Additionally, the motion does not specify a cost for drafting or implementing the new policy framework.

The scope of the policy for non-surveillance tools is also a question mark. It is not yet clear how the rules would apply to AI tools unrelated to public safety, such as chatbots used by city staff or models used for service requests. The motion's mention of 'emerging technologies' provides a hint at a broad reach, but it does not yet define the boundaries.