Veh. Code, § 2413

(a) The Commissioner of the California Highway Patrol is designated as the Statewide Vehicle Theft Investigation and Apprehension Coordinator. The commissioner may establish vehicle theft prevention, investigation, and apprehension programs. The commissioner may assist local, state, and federal law enforcement agencies by coordinating multijurisdictional vehicle theft investigations and may establish programs to improve the ability of law enforcement to combat vehicle theft.

(b) The Department of the California Highway Patrol may retain license plate data captured by a license plate reader (LPR) for no more than 60 days, except in circumstances when the data is being used as evidence or for all felonies being investigated, including, but not limited to, auto theft, homicides, kidnaping, burglaries, elder and juvenile abductions, Amber Alerts, and Blue Alerts.

(c) The Department of the California Highway Patrol shall not sell LPR data for any purpose and shall not make the data available to an agency that is not a law enforcement agency or an individual who is not a law enforcement officer. The data may be used by a law enforcement agency only for purposes of locating vehicles or persons when either are reasonably suspected of being involved in the commission of a public offense.

(d) The Department of the California Highway Patrol shall monitor internal use of the LPR data to prevent unauthorized use.

(e) The Department of the California Highway Patrol shall, as a part of the annual automobile theft report submitted to the Legislature pursuant to subdivision (b) of Section 10901, report the LPR practices and usage, including the number of LPR data disclosures, a record of the agencies to which data was disclosed and for what purpose, and any changes in policy that affect privacy concerns.