A state or local government agency using a facial recognition service without a third-party vendor shall establish a policy that:

1. (1) ensures best quality results by following all guidance provided by the developer of the facial recognition service; and

2. (2) outlines training protocol for all individuals who operate a facial recognition service or who process personal data obtained from the use of a facial recognition service. The training must include but is not limited to coverage of:

   1. (a) the capabilities and limitations of the facial recognition service;
   2. (b) procedures to interpret and act on the output of the facial recognition service; and
   3. (c) to the extent applicable, the meaningful human review requirement for decisions that produce legal effects concerning individuals.

History: En. Sec. 10, Ch. 781, L. 2023.