Bill would limit how Wyoming agencies use tracking data

Government agencies would generally be barred from using biometric or location data to identify people or locate people or vehicles. These rules cover Wyoming state and local governments, including their agencies, departments, and institutions. The bill lists limited law enforcement uses for this data, with warrant rules and an emergency exception described below. Biometric data includes identifying biological, physical, or behavioral patterns; ordinary photos and recordings are excluded unless used or kept for biometric processing. Location data covers a person or vehicle within 1,750 feet; utility meter data is excluded. The proposed rules would take effect July 1, 2026. They would not change contracts or obligations made before that date.

Law enforcement agencies would need a warrant to obtain biometric or location data for the listed purposes, with a narrow emergency exception. These rules cover law enforcement agencies seeking biometric or location data for the listed purposes. Allowed purposes are investigating a violent felony when there is probable cause to believe an unidentified person committed it, was a victim of it, or witnessed it; finding a missing or endangered person; or identifying someone deceased or believed deceased. Police could obtain the data before a warrant if doing so would reduce or address an emergency posing an immediate threat of serious physical harm. Search results alone could not establish probable cause in a criminal investigation. A warrant would be required before police obtain the data, unless the emergency exception applies.

Government agencies would face limits on license plate readers, related data, and how they use or share it. These rules cover state and local government agencies, including law enforcement and the transportation department, and data from automatic license plate reader systems. Police generally would need a warrant to use a reader for listed purposes. They could use one without a warrant for a vehicle reported stolen by its registered owner or to address an emergency posing an immediate threat of serious physical harm. The transportation department and police could use readers at ports of entry and weigh stations, and to enforce commercial vehicle rules. Other government use would be limited to parking rules and access to secured areas. Agencies could not buy data they could not collect directly or without a required warrant, share it outside their jurisdiction except under a warrant, or sell it to a private party. The proposed rules would take effect July 1, 2026. They would not change contracts or obligations made before that date.

Agencies using the permitted data or systems would need written policies, and people harmed by violations could seek court remedies. Policy rules apply to government agencies that use the data or systems as allowed; a person harmed by a violation could bring a court case. Policies would cover allowed uses, sharing, security, training, access logs, and audits. Data not tied to an active investigation or enforcement action could be kept for no more than seven days, with procedures for timely deletion. A person harmed by a violation could sue a government agency for damages, a court order, or both. Data accessed in violation generally could not be used as evidence, except to prove a violation. The proposed rules would take effect July 1, 2026. The seven-day maximum applies to data not tied to an active investigation or enforcement action.