Citywide Data Rules: Los Angeles Council Votes on Privacy Standards
The council ordered IT departments to draft a unified policy governing how agencies collect and store resident data, including inputs from AI and license plate readers.
By Sanjay Caldwell ·
Los Angeles residents will soon see a unified set of rules governing how city agencies handle their personal information. The City Council voted unanimously on Friday to adopt a motion requiring a single citywide data privacy policy. This move responds to growing questions about how sensitive data is retained and shared across different municipal departments.
The push for standardization follows years of fragmented approaches to data management. While various departments have implemented their own protocols, critics argued that inconsistent rules left residents vulnerable. The new directive seeks to close those gaps by mandating that all agencies adhere to the same baseline standards for collecting, storing, and disclosing personal records.
The motion, introduced by Councilwoman Monica Rodriguez, places the burden of reporting on the Information Technology Agency and other relevant departments. These bodies must now submit recommendations for a comprehensive policy. The report must address specific areas, including cybersecurity measures to prevent unauthorized access, clear guidelines on prohibited uses of city data, and requirements for transparency and auditing.
Rodriguez cited the Los Angeles Police Department’s use of technology as a primary driver for the change. She noted that the police agency has faced intense scrutiny regarding its handling of data from automated license plate readers and artificial intelligence tools. Her argument was that if strict protections are necessary for the police, they should be the default standard for every other city department.
During the Friday session, Rodriguez stated that the city has a responsibility to protect resident privacy regardless of the technology involved. She emphasized that the department cannot afford to operate under different standards when dealing with sensitive information. The council’s next step involves waiting for the requested reports from the IT Agency to finalize the actual policy language and enforcement mechanisms.
