A law enforcement agency that uses facial recognition technology shall adopt and maintain a use and data management policy. A law enforcement agency that develops a policy under subsection (a) of this section shall post a copy of the policy on the agency’s public website. A law enforcement agency that contracts for use of a nongovernment facial recognition system shall disclose on its public website the name of the system and the names and a description of the databases searched.