Prohibits a state, local, or county law enforcement agency from collecting or maintaining protected information about an individual or group unless the information directly relates to criminal conduct or activity and there is reasonable suspicion that the subject of the information is or may be involved in criminal conduct or activity.

Requires state, local, and county law enforcement agencies to adopt a privacy policy governing treatment of protected information and ensure that all employees are properly trained with regard to protected information, agency privacy policies, and the provisions of the act.

Requires the attorney general to conduct in-place audits of state, local, and county law enforcement agency files and records at unscheduled intervals.