What the Law Lets the County Do

Asheville’s council at least voted on its RTIC. The county network it plugs into, roughly 1,800 to 2,000 cameras and the plate readers run by the Buncombe County Sheriff’s Office, has never had a vote that anyone can point to. That is not an accident of inattention; it is how North Carolina structures sheriffs. This page walks through the statutes, what they actually say, and where a resident, a commissioner, or a school board member can still pull a lever. We are not lawyers; every section cites the text so you can read it yourself, and the questions that need one are marked.

The sheriff is not a county department

The sheriff is a constitutional officer, elected by the county’s voters (NC Constitution, Art. VII, Sec. 2). The governing statute on personnel, G.S. 153A-103, gives the sheriff “the exclusive right to hire, discharge, and supervise the employees in his office.” The Board of Commissioners’ role under that section is to “fix the number of salaried employees”; it cannot direct how those employees are deployed, what software they run, or what a real-time intelligence center monitors.

That is why no Buncombe commissioner has “overseen” the RTIC: the structure gives them no operational hook. The county’s own Security Camera Policy acknowledges the line explicitly, exempting itself where it would “conflict with GS 153A-103” (county policy). In Asheville the chief reports to the city manager, who reports to council. In the county, the chain of command ends at the ballot box.

But the county signs the checks

What commissioners do control is money, and the Local Government Budget and Fiscal Control Act gives them more precision than “the sheriff’s budget” suggests.

• The budget ordinance is theirs. Under G.S. 159-13(a), the board adopts the budget “in such sums as the governing board may consider sufficient and proper, whether greater or less than the sums recommended,” and “shall make appropriations by department, function, or project.” Nothing prevents a board from appropriating the Sheriff’s Office budget at a level of detail that separates surveillance technology from everything else, or from declining to fund a line.
• No contract binds the county without a preaudit certificate. G.S. 159-28 requires the county finance officer to certify that an appropriation exists before any obligation is incurred; a contract without that certificate is invalid as to the county. A sheriff can sign a five-year Axon agreement, but the county’s finance officer has to certify the money, year after year.
• Forfeiture money comes with a county signature. The Sheriff’s Office says the RTIC was “initially funded by Forfeiture-Dollars and not tax dollars.” In North Carolina that means federal equitable sharing, because the state constitution sends state forfeitures to the schools. The Department of Justice requires every participating agency to file an annual Equitable Sharing Agreement and Certification signed by both the agency head and “the head of the governing body” with budget authority, certifying the funds did not supplant the local budget (DOJ Guide to Equitable Sharing). Somebody at the county signs for the money that built the network. That signature is a public record and a point of leverage. Dollar figures by year: Buncombe County.

Open question for a lawyer: whether a commission can condition a specific appropriation (“no funds for plate-reader services absent a published audit”) in a way that binds a sheriff who reallocates within the total, and whether the county’s general ordinance power (G.S. 153A-121) can reach the sheriff’s data practices at all. The UNC School of Government has written on commissioner-sheriff budget disputes; we have not found a case squarely on surveillance.

Interlocal agreements have to be ratified, on the record

APD has had access to the county’s Fusus network since a memorandum of understanding signed in December 2022. Council did not vote until January 24, 2023 (Timeline). The Interlocal Cooperation Act says what that order should have been: agreements between local governments “shall be ratified by resolution of the governing board of each unit spread upon its minutes” (G.S. 160A-461). Staff signed first; the board ratified five weeks later. The same statute applies to the “regional RTIC” city-county MOU the policy workgroup discussed in July 2026 (The RTIC Policy): if it is coming, both boards have to vote on it, in public, and the minutes have to show it. Request 15 asks for the draft.

The plate-reader statute: what it requires, and what it permits

North Carolina’s ALPR law (G.S. 20-183.30 to 20-183.32) applies to every state and local agency, sheriffs included. It requires a written policy; the policy must include “auditing” at least annually and a report to the agency head (20-183.31(a)(7)); it caps retention at 90 days absent a preservation request or warrant; it makes captured plate data confidential; and it makes unauthorized access a Class 1 misdemeanor, the charge brought against officers in Charlotte and Mooresville this summer (The Abuse Record).

On sharing, the statute is permissive, not protective. G.S. 20-183.32 allows disclosure “to a criminal justice officer at a State or local law enforcement agency or a similar official at a federal law enforcement agency for a legitimate law enforcement purpose pursuant to a written request.” Federal agencies are named as eligible recipients; immigration enforcement is not excluded; there is no geographic limit, no requirement to log or publish who asked, and no requirement that the written requests be retained as a public record. The statute does not compel sharing either; it leaves the decision to the agency. Which is the whole point: in Buncombe County the decision belongs to a sheriff’s policy that allows sharing with any “criminal justice agency” for “active criminal intelligence operations” (Policy 402), and in Henderson County it has produced a sharing list of more than two thousand agencies, including the FBI (Henderson County).

Other states closed that door in law. Virginia’s 2025 statute limits retention to 21 days and restricts sharing to specific investigative purposes (Virginia State Crime Commission fact sheet); California’s SB 34 bars sharing plate data with out-of-state and federal agencies, a prohibition the state attorney general reaffirmed after agencies were caught sharing with anti-abortion states (EFF). In North Carolina, the only city-level rule we have found is Durham’s 2024 council resolution requiring council review of new surveillance technology and barring ALPR deployment without council approval; it binds Durham’s police department, not any sheriff (GovTech). Nothing in North Carolina law stops Asheville’s council from adopting an ordinance of that kind for APD. Nothing lets it adopt one for the Sheriff’s Office.

What the state now compels on immigration

Three laws passed over gubernatorial vetoes since 2024 turned ICE cooperation from a sheriff’s choice into a statutory duty. None of them reaches camera or plate data directly. All of them change what the data is worth to the agencies that can ask for it.

HB 10, S.L. 2024-55 (vetoed September 20, 2024; overridden November 20, 2024; effective December 1, 2024). Jail administrators, meaning sheriffs, must attempt to determine the immigration status of anyone charged with specified felonies, Class A1 assaults, or domestic-violence order violations; if they cannot, they “shall make a query of Immigration and Customs Enforcement”; and they must take anyone subject to an ICE detainer before a judicial official, who orders a hold of up to 48 hours (G.S. 162-62 · session law). The Buncombe sheriff’s office publishes the Sheriffs’ Association summary as its own directive (Buncombe County).

HB 318, S.L. 2025-85 (vetoed June 20, 2025; overridden July 29, 2025; effective October 1, 2025). Expands the trigger to any felony and any impaired-driving charge, runs the 48-hour hold from the time the person would otherwise be released, and requires the jail to notify ICE no later than two hours before release (session law · UNC School of Government analysis).

SB 153, S.L. 2026-19, the “North Carolina Border Protection Act” (ratified June 10, 2025; vetoed; overridden June 24, 2026). Orders four state agencies, the Department of Public Safety, Adult Correction, the Highway Patrol, and the SBI, to sign 287(g) agreements with ICE, and amends the state’s anti-sanctuary statutes so that a county or city in violation “shall have waived its governmental immunity” (session law · UNC School of Government). As of August 20, the Highway Patrol told BPR it had no agreement in place and DPS said it intended to meet an October 1, 2026 deadline (BPR).

The anti-sanctuary statutes underneath all of it. G.S. 153A-145.5 (counties) and G.S. 160A-205.2 (cities) have barred local governments since 2015 from any policy that “limits or restricts the enforcement of federal immigration laws to less than the full extent permitted by federal law,” and specifically from prohibiting officers from “gathering” immigration-status information or from “the communication of such information to federal law enforcement agencies.” Read that against the promises on the tracker. When APD says it will not share RTIC or plate data with immigration enforcement, state law forbids the city from making that a binding policy about immigration-status information; what the city can still do is decide, case by case, what it shares about vehicles and locations, because the ALPR statute leaves that discretionary. The line between those two things is exactly where a records request or a lawsuit will eventually be argued. Needs a lawyer: whether a city ordinance restricting ALPR or camera data sharing with federal agencies would be challenged under 160A-205.2, and how a court would read “information regarding the citizenship or immigration status” against plate and location data.

Who has signed with ICE. ICE’s participating-agencies list, dated August 21, 2026, shows 29 North Carolina agreements and none yet for the SBI, the Highway Patrol, or DPS. In Western North Carolina: Henderson County Sheriff’s Office (Jail Enforcement Model, signed June 9, 2020), Cherokee County Sheriff’s Office (Warrant Service Officer, March 10, 2025), Avery County and Caldwell County sheriffs (Warrant Service Officer, 2020), and Newland Police Department (Task Force Model, October 17, 2025). Buncombe, Haywood, Madison, Jackson, Macon, Transylvania, McDowell, Rutherford, Polk, and Watauga have no agreement on the list. (ICE 287(g) participating agencies, Aug 21, 2026)

Schools

The 1,500 school cameras on the county network joined through a 2021 memorandum between the Sheriff’s Office and Buncombe County Schools (Buncombe County). We have not found a statute that requires a school board vote on a camera-access agreement, or one that forbids a board from ending one. FERPA treats video that identifies a student as an education record in most circumstances, with exceptions for health and safety emergencies, which is the framing the Sheriff’s Office has always used (“only in the event of an emergency situation”). Whether a standing live-access integration fits that exception, and whether the board can unilaterally revise the MOU, is a question for an education lawyer; what a board can certainly do is put the agreement on an agenda, read it into the record, and vote. Three school-board seats are on the November ballot (Election 2026).

Public records: what you can get

G.S. 132-1.4 shields records of criminal investigations and criminal intelligence; G.S. 132-1.7 shields security plans and “sensitive public security information.” Neither covers a written policy of general application, an annual audit report the statute requires to exist, a signed contract, a budget line, or a DOJ certification. Captured plate data itself is confidential under 20-183.32(e); the records about the program are not. Camera location lists are the contested middle: an agency will argue 132-1.7, and no North Carolina court has squarely decided it (needs a lawyer). Pre-written requests for every document named on this page: Records Center.

Risks, plainly

1. No local body can vote the county network down. The commission can defund; it cannot direct. The only direct check is the sheriff’s election.
2. The sharing decision is one person’s policy. State law permits disclosure to federal agencies on written request and requires no log. The sheriff’s policy permits it for “intelligence operations.” Nothing in either requires the public to ever learn it happened.
3. State law now points the other way. The anti-sanctuary statutes forbid local limits on sharing immigration-status information, and the 2026 immunity waiver gives a county a financial reason not to test the line.
4. The money is off-budget. Forfeiture funding bypasses the appropriations debate, which is why the enterprise fund’s finances have never appeared in a county budget document.

Levers, plainly

• The annual budget is an exit clause. G.S. 153A-13 and G.S. 160A-17 require a board to appropriate each year for multi-year contracts, and G.S. 159-28 bars any obligation without an appropriation. Every vendor contract with an NC local government therefore carries a non-appropriation clause; Axon’s makes termination effective immediately upon notice, Flock’s at fiscal-year end with thirty days’ notice. Declining to fund the line is how Macon and Pittsboro left. The clauses, quoted: What Axon Contracts Do. Whether a board may decline to appropriate for a contract already signed, given the statutes’ “shall appropriate,” is on the list below.

1. Appropriate by line. Ask commissioners to separate surveillance technology in the Sheriff’s Office budget ordinance and to condition it on published audits. G.S. 159-13 lets them.
2. Ask who signs the forfeiture certification, and request the certifications (request 16). A county chair who certifies the money can decline to.
3. Demand the audit reports the statute requires (20-183.31(a)(7)). If they do not exist, the sheriff’s office is out of compliance with its own policy and state law; if they exist, they are public.
4. Make every interlocal agreement a vote. The December 2022 MOU was not; the regional RTIC MOU must be (G.S. 160A-461).
5. Put the schools MOU on a school-board agenda. The board controls when deputies get access, by its own account; it can control whether.
6. Pass the city ordinance the state allows. A Durham-style rule binding APD to council review of surveillance technology and data-sharing agreements is within council’s power today; it is the one thing the state has not preempted.
7. Vote. The sheriff’s race is the only direct vote on the county network there is. Election 2026

Needs a lawyer

• Whether a conditioned appropriation binds a sheriff who reallocates within the total, and whether G.S. 153A-121 reaches sheriff data practices.
• The legal effect of the Dec 2022 MOU having been signed before the Jan 24, 2023 ratification vote.
• Whether an ALPR/camera data-sharing restriction in a city ordinance survives G.S. 160A-205.2.
• FERPA’s application to standing live camera access, and a school board’s power to revise or end the 2021 MOU.
• Whether camera location lists are “sensitive public security information.”
• Whether a governing board may decline to appropriate for a multi-year contract it has already entered, given that G.S. 153A-13 and 160A-17 say the board “shall appropriate” in each ensuing year, and how that squares with the non-appropriation clause in every vendor contract.

Related: Buncombe County · WNC and NC · Records Center · Promise Tracker · Who Gets Watched