Publisher: Deschutes County Sheriff’s Office (obtained by BPA)
Date Published: June 3, 2026
Relevant To: ALPR presentation (August) — procurement transparency failure example
Verification Status: Verified
Notes: Email confirms the Data Processing Agreement (DPA) was not included in the original BOCC packet and was transmitted to Board staff the morning of the vote — marked “High importance.” The DPA (pages 19–25 of 171, marked Privileged & Confidential) covers: roles (DCSO as Controller, Axon as Processor), processing restrictions (no sale of Personal Data, no targeted advertising), a 72-hour security breach notification requirement, pre-authorized subprocessors with a 30-day objection window, annual audit rights, and data return/destruction on termination. Not included in the publicly posted BOCC packet on the Deschutes County website — this copy was photographed by BPA at the meeting itself and is also available via public records request. This is a concrete, documented example of a key contract term (the DPA) being withheld from the public record until the morning of a vote — directly useful for the ALPR presentation’s procurement-transparency section. Migrated from the existing Bend Surveillance Oversight source library.