Policy Month in Review

Public Safety Surveillance Legislation: AI, and Data Governance

South Carolina Legislature

Across the U.S., public safety leaders are facing a new reality: surveillance technology is no longer judged only by crime reduction — it’s judged by governance, transparency, and legal defensibility.

In just the past few weeks, states and cities have advanced ordinances and legislation that directly reshapes how cameras, AI analytics, and surveillance data can be deployed, stored, audited, and restricted.

In the last few weeks alone, lawmakers and city councils have advanced bills and ordinances that directly shape how law enforcement and public-safety agencies, as well as private organizations, can deploy surveillance technology, store video, and use AI. Colorado and South Carolina are each testing different pieces of the puzzle, while cities like Austin and Seattle are building their own transparency and oversight frameworks on top of them.

For agencies that rely on mobile surveillance platforms and real-time crime centers, these moves are not abstract. They change expectations around:

  • What problems can surveillance tools be used to solve?
  • How long can data be stored and where?
  • Who owns and controls the footage?
  • Which AI capabilities are acceptable—and which are off the table?

This Policy Month in Review breaks down the most important shifts, what they signal for the future of AI and data governance, and how agencies can design mobile surveillance programs that remain effective — and compliant — as rules tighten.

Why public safety surveillance legislation is tightening now

For years, many agencies have operated under a mix of departmental policy, case law, and local norms. Cameras were installed to address specific problems—hotspots, parking lots, and critical infrastructure edges—while communities, advocates, and courts debated the right balance between safety and privacy.

What’s changing in early 2026 is the shift from informal expectations to formal rules. Lawmakers are beginning to codify what “responsible surveillance” means, especially when AI is involved. That shift is being driven by a few consistent pressures:

  • Growth in networked surveillance tools. Fixed cameras, mobile trailers, drones, ALPR, and real-time crime centers are now common across cities and counties.
  • Public concern about AI and biometrics. Facial recognition, broad vehicle tracking, and opaque analytics raise questions about bias, due process, and long-term records.
  • Data governance risk. Legislators and attorneys general are asking where data lives, who can access it, and whether it can be monetized or shared beyond the original purpose.

In that context, three state-level bills stand out as early markers for how public safety surveillance legislation is likely to evolve.

Two state bills that preview the next wave of rules

Colorado SAFE Act (SB 26‑071): Purpose limits, retention, and audits

Colorado’s proposed Surveillance Accountability and Freedom Ensured (SAFE) Act, SB 26‑071, is one of the most comprehensive attempts to spell out how law‑enforcement agencies can use modern surveillance technologies.

As introduced, the bill would narrow the purposes for which surveillance tools can be used, tying deployments more clearly to lawful public safety objectives and specific investigations. It would place strict conditions on facial recognition and related AI tools, requiring a warrant or clearly defined exigent circumstances, rather than treating them as default analytics.

The SAFE Act also emphasizes retention and auditability. It contemplates technology‑specific retention rules, bans the sale of surveillance data, and requires the destruction of data once it is no longer needed. Oversight would not be optional: the Attorney General would audit agencies regularly, and residents could request information on compliance.

Even if SB 26‑071 is amended or replaced, it functions as a preview of a possible baseline. The key idea is that surveillance should be purpose‑limited, time‑bound, and subject to outside review.

South Carolina HB 4675: Data governance and AI guardrails for ALPR

South Carolina’s HB 4675, the Community Data Protection and Responsible Surveillance Act, is framed around ALPR and vehicle‑surveillance data, but its logic applies more broadly to any large‑scale camera and analytics deployment.

The bill would require law‑enforcement surveillance data to live on secure, in‑state servers fully owned and controlled by South Carolina government entities—not vendor‑owned clouds. It would restrict AI systems so they cannot track vehicles based solely on appearance or characteristics beyond the license plate, and it would set a default 21‑day retention window unless a court order or an active investigation justifies longer.

Judicial oversight is woven throughout. Access often requires warrants, emergency use is subject to rapid review, and agencies would need to publish annual reports on scans, alerts, investigations, and vendor contracts.

The signal from HB 4675 is clear: expect more scrutiny of where data lives, how long it lives, who can see it, and what AI is allowed to do with it.

Other states are borrowing the building blocks.

Most states are not copying the SAFE Act or HB 4675 word-for-word. Instead, they are experimenting with adjacent moves that reuse the same components:

  • Retention norms. Draft legislation like Texas HB 2621 would set minimum or maximum retention periods (often 21–30 days for general footage) with longer storage allowed only for active cases.
  • AI model policies. Directives like Virginia’s model AI policy push agencies to assess risk, document use cases, and validate systems before deploying AI analytics in the field.
  • Broader data-privacy and AI laws. Statutes in Indiana, Kentucky, Rhode Island, Quebec, and the EU don’t single out cameras, but they raise the bar on how personal data, especially biometric data such as facial recognition, from surveillance can be collected, documented, combined, and reused.

For law enforcement, public safety, and critical-infrastructure operators, the pattern is clear even if the acronyms differ:

  • Use must be purpose-limited and defensible.
  • Retention must be short by default and longer only when justified.
  • Storage and access must be well-governed, often with a preference for local or government-controlled environments.
  • AI should be constrained to specific, explainable roles, especially where biometrics or free-form tracking are involved.

City‑level frameworks: Austin and Seattle

While state legislatures set high‑level rules, city governments are building frameworks that sit closer to day‑to‑day deployment decisions.

Austin, TX – TRUST Act

In Austin, Texas, a proposed multi‑year contract to deploy mobile surveillance platforms in city parks triggered an extended public conversation. The pilot data showed clear reductions in vehicle burglaries at specific sites, but community groups asked hard questions about vendor control of data, AI analytics, and the visibility of cameras in public spaces.

As the contract language evolved, the city emphasized that it—not the vendor—would own and control all data. Facial recognition, biometric identification, audio recording, and autonomous analytics were explicitly ruled out. Retention windows were limited, and the data environment had to meet CJIS and other security requirements.

In parallel, Austin passed the TRUST Act (Transparent and Responsible Use of Surveillance Technology). That ordinance now requires council approval for new surveillance technologies, mandates public disclosure of use policies, and creates ongoing reporting and oversight expectations. The message is that crime‑reduction benefits matter, but they must be paired with transparent governance.

Seattle, WA – CCTV Surveillance Impact Reports and RTCC integration

Seattle has taken a different but related path by formalizing its evaluation and oversight of surveillance technologies through Surveillance Impact Reports (SIRs).

In recent CCTV expansions and real-time crime center integrations, Seattle has emphasized:

  • Short default retention—often around 5 days for local storage, with up to 30 days as an outer bound in policy documents, unless footage is needed as evidence.
  • Privacy protections, including required signage, privacy masking to avoid capturing interiors and especially sensitive spaces, and tight access controls for live and recorded feeds.
  • Independent oversight, with the Office of Inspector General granted full access to RTCC operations for compliance reviews.
  • Formal impact evaluations, with the council requiring follow-up assessments to measure effectiveness, equity impacts, and community concerns.

Seattle treats CCTV and related surveillance tools as civic infrastructure governed by published rules and independent oversight—not as ad hoc gadgets.

Five expectations emerging for public safety surveillance

When you step back from the individual bills and ordinances, five expectations are emerging that public safety and security leaders should anticipate.

1. Clear purpose and use‑case definition

Surveillance technologies are increasingly expected to be tied to well‑defined, lawful purposes. That means being able to explain, in plain language, which public safety problem a camera, mobile platform, or analytics is intended to address and how that use fits within policy.

2. Short retention by default, with documented exceptions

Retention norms are converging around short default windows—often 21–30 days—unless footage is tied to an investigation, a court order, or an evidence rule. Agencies will be expected to configure retention by use case and to document why any longer storage is necessary.

3. Stronger data ownership, locality, and access control

Policymakers are asking where surveillance data resides and who exactly can see it. There is a growing preference for government‑controlled storage environments, clear data‑ownership language in contracts, and detailed access controls and audit logs. Vendor‑controlled clouds without those assurances are facing more questions.

4. Cautious adoption of AI and biometrics

From Colorado’s facial‑recognition limits to South Carolina’s constraints on vehicle tracking, the trend is toward narrow, explainable AI rather than broad biometric surveillance. Leaders are still interested in detection and alerting, but they want analytics they can defend in court, in council chambers, and in front of the public.

5. Transparency, reporting, and audit trails as standard practice

Annual reports, surveillance impact assessments, and independent audits are becoming part of the baseline. Programs that once operated largely out of sight are now expected to publish policies, share deployment information, and maintain clear records of how data is retained, accessed, and shared.

What this means for mobile surveillance platforms and trailers

For most agencies, the question is no longer whether to deploy mobile surveillance platforms — it is whether the underlying technology stack can withstand increasingly stringent requirements for data ownership, retention, and AI governance.

Across new legislation and city frameworks, one trend is clear: resistance to vendor-controlled surveillance ecosystems. Lawmakers and oversight bodies are focused on where surveillance data is stored, who controls access, how long footage is retained, and how analytics are governed. Systems that route video into proprietary clouds or closed platforms are facing increased scrutiny — especially when vendors control storage, retention policies, or downstream analytics.

Governance-ready surveillance is built around integration, not lock-in.

Agencies are increasingly required to keep footage within their existing real-time crime centers, evidence management systems, and government-controlled storage environments. Retention rules, audit logs, and access controls must be enforced centrally. That is far easier when mobile surveillance trailers function as extensions of established VMS platforms rather than standalone proprietary stacks.

This shift is redefining how mobile surveillance solutions are evaluated.

Platforms dependent on vendor-owned clouds and closed software environments create governance friction. Retention enforcement becomes complex. Data ownership introduces contractual risk. Oversight often requires additional reporting layers or vendor cooperation. As surveillance regulation tightens, architectural decisions matter as much as camera quality.

By contrast, mobile platforms that integrate directly with proven surveillance and evidence partners enable organizations to consistently apply existing governance frameworks. Footage flows into systems of record. Retention policies are enforced uniformly. Access and audit controls remain centralized. AI analytics can be layered in selectively — or restricted entirely — without re-architecting the platform.

How Mobile Pro Systems fits into a policy‑aware surveillance strategy

Our platforms are VMS-agnostic and designed to plug directly into the real-time crime centers, monitoring operations, and evidence systems you already use — turning outdoor, mobile, and remote locations into a seamless extension of your existing environment. Instead of forcing organizations into proprietary ecosystems, Mobile Pro Systems creates a unified security footprint that delivers permanent outdoor coverage where fixed infrastructure isn’t practical, mobile flexibility for fast-changing operations and events, and autonomous protection for remote or hard-to-service locations.

Just as important, Mobile Pro Systems is built to operate comfortably inside evolving surveillance governance frameworks. We work with organizations to align deployments with local retention norms, evidence rules, storage preferences, and consent boundaries — whether driven by state statutes, TRUST-style city ordinances, or formal surveillance impact and oversight processes. On the analytics side, agencies can start with conservative, easily explainable capabilities and expand only as policy, community expectations, and internal comfort levels evolve.

Underlying it all is reliability — uptime, system health monitoring, and responsive support that organizations can depend on when technology is tied to transparency and accountability commitments. The result is simple: you don’t have to choose between operational impact and responsible governance. Together, the Sentry Series platforms and mobile trailer systems — Falcon and Commander — form one continuous, policy-aware security infrastructure that adapts to every environment you operate in and anticipates where public safety surveillance legislation is headed.

In future installments of this Policy Month in Review series, Mobile Pro Systems will continue to track new legislation, city‑level frameworks, and practical examples from the field. The aim is not to provide legal advice, but to give public safety and security leaders a reliable, operations‑focused view of how the rules around surveillance, AI, and data governance are changing—and how mobile surveillance platforms can fit within them.

Subscribe to Security Insights

for monthly news and updates delivered straight to your inbox.

 

Explore More Security Insights

Continue exploring expert perspectives, real-world use cases, and practical guidance on securing dynamic environments.