What Does Connecticut SB397 Mean for ALPR Use Across the State?

‍What is Connecticut SB397?

Connecticut SB397 is a statewide law that establishes rules governing the use of automated license plate reader (ALPR) technology by public and law enforcement agencies, as well as vendors operating in Connecticut.

Signed into law on May 4, 2026, the legislation outlines permitted uses of ALPR systems, establishes retention limits, creates new transparency requirements, regulates data sharing, and sets expectations for vendors that provide ALPR services.

The law also requires law enforcement agencies to adopt policies aligned with standards developed by the Connecticut Police Officer Standards and Training Council (POSTC).

What Does SB397 Allow Connecticut Law Enforcement Agencies To Do?

SB397 permits law enforcement agencies to use ALPR technology for the following purposes:

• Comparing ALPR data against authorized hotlists
• Supporting active criminal investigations when there is reasonable suspicion and the reason for the search and case number are recorded
• Locating vehicles associated with outstanding warrants
• Finding missing or endangered persons
• Recovering stolen vehicles
  ‍

The law also allows public agencies to use ALPR for purposes such as controlling access to secured areas, conducting traffic analytics, and enforcing parking regulations.

Public agencies may not use ALPR:

• To monitor or investigate someone based on race, ethnicity, sexual orientation, gender identity or expression, sex, pregnancy status, disability, citizenship, nationality or income level, or perceived criminal history
• To identify someone engaged in a First Amendment-protected activity
• For immigration enforcement
• To investigate or prosecute someone for reproductive or gender affirming health care
• To collect ALPR information on or near certain types of facilities

How Does SB397 Regulate ALPR Data Sharing in Connecticut?

SB397 establishes clear rules for how ALPR data may be shared.

Connecticut agencies may share data with:

• Connecticut public agencies
• Law enforcement agencies in Connecticut, New York, Rhode Island, and Massachusetts that have signed a required written attestation
• Authorized multijurisdictional task forces under specific conditions
• Agencies operating under a warrant or other limited statutory authorization
• An individual requesting data on their own vehicle
  ‍

To participate in an ALPR data-sharing network, participating agencies must affirm in writing that shared data will be used in compliance with Connecticut law.

The law also restricts real-time, bulk, and automatic access to ALPR data unless it is connected to a documented, case-specific request.

What Are Connecticut ALPR Data Retention Rules Under SB397?

SB397 establishes a default retention period of 21 days for ALPR data.

The law allows longer retention in limited circumstances, including:

• Compliance with a warrant, court order, or preservation request
• Active criminal investigations with supervisory approval and documentation
• Highway usage fee collection
• Aggregated, de-identified, or summarized data for traffic analytics
• Certain situations involving potential future offenses or motor vehicle violations
   

When data is retained for an active investigation, agencies must document the purpose, record the associated case number, obtain supervisory approval, and delete the data when the investigation or related criminal case concludes.

How Does SB397 Enable ALPR Transparency and Accountability in Connecticut?

SB397 introduces several transparency and accountability requirements.

Public agencies operating ALPR systems must:

• Adopt and publicize an ALPR usage and privacy policy, using the model policy created by POSTC or a more protective one
• Maintain records regarding access, searches, retention, and data sharing
• Submit annual reporting information through processes established by POSTC
  ‍

Annual reporting will include information such as:

• Total license plates scanned
• Searches conducted and their purpose
• Data-sharing activity
• Warrant-based requests
• Extended-retention instances
• Requests involving sensitive locations
• Access to data more than 14 days after collection
• Privacy-related policy changes
  ‍

The law also provides enforcement mechanisms, including officer discipline, Attorney General actions, and private rights of action in certain circumstances.

How Is Flock Supporting Compliance With Connecticut SB397?

Flock is taking several steps to help customers align with Connecticut's new requirements.

These efforts include:

• Implementing a Connecticut-specific written attestation process for data sharing
• Limiting eligible sharing relationships to Connecticut, New York, Rhode Island, and Massachusetts as required by the law
• Applying a 21-day retention period for Connecticut data
• Supporting new reporting requirements established under SB397
• Updating contract language for new and renewed agreements
• Providing customer training and compliance resources
• Working with agencies, as additional guidance becomes available from POSTC

Does SB397 Ban ALPR Technology in Connecticut?

No. SB397 does not prohibit the use of ALPR technology in Connecticut.

Instead, the law establishes rules governing how ALPR systems may be deployed, used, shared, retained, and overseen by public agencies, law enforcement agencies, and vendors.

The legislation defines permitted uses while creating safeguards, reporting requirements, and operational standards.

When Does Connecticut SB397 Take Effect?

SB397 was signed into law on May 4, 2026.

Several implementation deadlines follow:

• May 4, 2026: Law signed, and vendor contract requirements take effect for new and renewed contracts
• October 1, 2026: Written attestation requirements for qualifying data-sharing relationships must be in place and other sections become effective
• By December 1, 2026: POSTC must publish a model policy
• By January 1, 2027: Law enforcement agencies must adopt the POSTC policy or a more protective policy. POSTC must establish a standardized form for ALPR usage reporting.
• January 31, 2027: Agencies begin annual reporting under the new framework
  ‍

Additional statewide regulations are expected in future years as implementation continues.

Frequently Asked Questions About ALPR Laws in Connecticut

How long can ALPR data be stored in Connecticut?

The default retention period is 21 days, unless a statutory exception applies.

Can Connecticut agencies share ALPR data with agencies in other states?

Yes, but only under specific conditions established by SB397. Agencies in Connecticut, New York, Rhode Island, and Massachusetts must provide a written attestation before participating in qualifying data-sharing arrangements.

Are ALPR searches restricted under SB397?

Yes. Law enforcement searches must fall within authorized uses defined by the statute, including active investigations, warrants, missing persons, stolen vehicles, and hotlist comparisons.

Are agencies required to publish ALPR policies?

Yes. Public agencies operating ALPR systems must adopt and publish a usage and privacy policy.

Is ALPR data subject to public records requests?

SB397 generally classifies ALPR data as confidential, while allowing access to certain records and information identified in the law.

How Does Connecticut SB397 Support Both Public Safety And Privacy?

SB397 creates a statewide framework that pairs authorized public safety uses with clear operational requirements.

The law defines when ALPR systems can be used, how long information can be retained, who can access data, and what reporting obligations agencies must meet. It also establishes limits on data sharing, requires public policies, creates vendor obligations, and outlines accountability mechanisms for misuse.

Together, these provisions provide agencies with a common set of standards for deploying and governing ALPR technology.

Looking Ahead

Over the coming months, agencies will continue preparing for new policy, reporting, and compliance requirements, while vendors and public safety partners work to support implementation.

Flock is committed to helping customers navigate these requirements through product updates, customer education, and compliance resources designed to support responsible, policy-aligned use of ALPR technology.