If an ALPR operator accesses or provides access to ALPR information, the ALPR operator shall do both of the following:

1. (a) Maintain a record of that access. At a minimum, the record shall include all of the following:

   1. (1) The date and time the information is accessed.
   2. (2) The license plate number or other data elements used to query the ALPR system.
   3. (3) The username of the person who accesses the information, and, as applicable, the organization or entity with whom the person is affiliated.
   4. (4) The purpose for accessing the information.
2. (b) Require that ALPR information only be used for the authorized purposes described in the usage and privacy policy required by subdivision (b) of Section 1798.90.51.