Mankato Department of Public Safety

What the audit said

No formal findings or exceptions recorded. Rampart reviewed MDPS's two ALPR systems -- 24 Axon Fleet mobile units (OCR, Evidence.com storage) and 7 Milestone stationary units at four intersections (in-house city server) -- and concluded the program is compliant with Minn. Stat. 13.824 and 626.8472. Seven non-finding recommendations: keep the privacy-duty reminder on the data-release form; archive each transparency portal monthly (MDPS said already in place); retain previous-location records and BCA notification emails 2 years (MDPS said already in place); ask Axon to build a more readable audit-trail report (fields are concatenated into long strings); keep 2-person admin review of ALPR searches (already practiced); run periodic internal tests (repeat-plate searches, random case-number reconciliation, random user review); retain audit logs at least 30 months. Notable but unscored observations: the Milestone system's lifetime read counter locked at 50,000 during the count, so a previously-reported 154,895-read figure could not be verified; Milestone data purges before the 60-day mark due to storage limits (auditor confirmed nothing exceeded 60 days); Milestone's own documentation claims a 144-year audit-log retention setting, which the report flags as unusual. None of these were recorded as findings or described as corrected 'as a result of' the audit, so they are not scored as ghost findings here -- but they're worth re-checking in the next cycle.