Who really owns your license plate data? The truth might surprise you.

Our Take

Credit to Legitimate Cybersecurity for asking the question most coverage of ALPRs skips entirely: once a camera captures your plate, GPS location, and timestamp, who actually owns that record? The honest answer is that it depends on a patchwork of vendor contracts, state law, and local police department policy that almost nobody outside the agency ever gets to read. Flock Safety and its competitors like to frame this as a tidy data-ownership arrangement where the customer (the police department) controls the footage, but that glosses over the fact that this data routinely flows into shared regional networks, fusion centers, and even other agencies across state lines through simple network-sharing settings.

That ambiguity is the whole problem. "Ownership" sounds reassuring until you realize it doesn't come with meaningful limits on retention, sharing, or audit access for the people actually being tracked — you. A private company builds the infrastructure, sets the default retention windows, and controls the software that decides who can query the system, while the public has almost no visibility into any of it unless local journalists or activists force records requests. A cybersecurity lens on this topic is useful because it treats the database like what it is: a massive, sensitive, searchable log of where everyone drives, sitting on servers with their own breach and misuse risks separate from the surveillance question itself.

If this conversation got you thinking about the camera on your own street corner, check our camera map to see what's already been deployed near you, and visit take action for concrete steps on pushing back at the city council level before data-sharing agreements get rubber-stamped without public input.