a. Definitions. As used in this section, the following terms have the following meanings:
Surveillance technology. The term "surveillance technology" means equipment, software, or systems capable of, or used or designed for, collecting, retaining, processing, or sharing audio, video, location, thermal, biometric, or similar information, that is operated by or at the direction of the department. Surveillance technology does not include:
1. routine office equipment used primarily for departmental administrative purposes;
2. parking ticket devices;
3. technology used primarily for internal department communication; or
4. cameras installed to monitor and protect the physical integrity of city infrastructure.
Surveillance technology impact and use policy. The term "surveillance impact and use policy" means a written document that includes the following information:
1. a description of the capabilities of a surveillance technology;
2. rules, processes and guidelines issued by the department regulating access to or use of such surveillance technology as well as any prohibitions or restrictions on use, including whether the department obtains a court authorization for such use of a surveillance technology, and, if so, the specific type of court authorization sought;
3. safeguards or security measures designed to protect information collected by such surveillance technology from unauthorized access, including but not limited to the existence of encryption and access control mechanisms;
4. policies and/or practices relating to the retention, access, and use of data collected by such surveillance technology;
5. policies and procedures relating to access or use of the data collected through such surveillance technology by members of the public;
6. whether entities outside the department have access to the information and data collected by such surveillance technology, including: (a) whether the entity is a local governmental entity, state governmental entity, federal governmental entity or a private entity, (b) the type of information and data that may be disclosed by such entity, and (c) any safeguards or restrictions imposed by the department on such entity regarding the use or dissemination of the information collected by such surveillance technology;
7. whether any training is required by the department for an individual to use such surveillance technology or access information collected by such surveillance technology;
8. a description of internal audit and oversight mechanisms within the department to ensure compliance with the surveillance technology impact and use policy governing the use of such surveillance technology;
9. any tests or reports regarding the health and safety effects of the surveillance technology; and
10. any potentially disparate impacts of the surveillance technology impact and use policy on any protected groups as defined in the New York city human rights law.
b. Publication of surveillance technology impact and use policy. The department shall propose a surveillance technology impact and use policy and post such proposal on the department's website, at least 90 days prior to the use of any new surveillance technology.
c. Existing surveillance technology. For existing surveillance technology as of the effective date of the local law that added this section, the department shall propose a surveillance technology impact and use policy and post such proposal on the department's website within 180 days of such effective date.
d. Addendum to surveillance technology impact and use policies. When the department seeks to acquire or acquires enhancements to surveillance technology or uses such surveillance technology for a purpose or in a manner not previously disclosed through the surveillance technology impact and use policy, the department shall provide an addendum to the existing surveillance technology impact and use policy describing such enhancement or additional use.
e. Upon publication of any proposed surveillance technology impact and use policy, the public shall have 45 days to submit comments on such policy to the commissioner.
f. The commissioner shall consider public comments and provide the final surveillance technology impact and use policy to the speaker and the mayor, and shall post it on the department's website no more than 45 days after the close of the public comment period established by subdivision e of this section.
(L.L. 2020/065, 7/15/2020, eff. 7/15/2020)