77-23d-105. Data use and retention.
(1) Except as provided in Subsection, a government entity: (2) may not use, copy, or disclose data collected using an imaging surveillance device on an individual or structure that is not a target; and shall ensure that data described in Subsectionis destroyed as soon as reasonably possible after the government entity collects or receives the data. (1)(a)
(2) A government entity is not required to comply with Subsectionif: (1) deleting the data would also require the deletion of data that: relates to the target of the operation; and is requisite for the success of the operation; the government entity receives the data: through a court order that: requires a person to release the data to the government entity; or prohibits the destruction of the data; or from a person who is a nongovernment actor; the data was collected inadvertently; and the data appears to pertain to the commission of a crime; or the government entity reasonably determines that the data pertains to an emergency situation; and using or disclosing the data would assist in remedying the emergency.