SFPD says federal, out-of-state agencies improperly accessed plate reader data

Our Take

Credit to NBC Bay Area's Ginger Conejero Saab for surfacing this: San Francisco's own internal audit found federal and out-of-state agencies reaching into its license plate reader data without authorization. This is exactly the scenario privacy advocates have warned about for years — California law restricts ALPR sharing specifically to keep local plate data out of federal immigration enforcement and out-of-state abortion or gender-affirming care investigations. An audit catching the violation after the fact doesn't undo the exposure; it just confirms the breach happened.

Departments love to tout 'strict policies' and 'audit trails' as proof their camera networks are safe. But a policy violated is a policy that failed the person whose data got out. Once a plate hit is logged, it can map someone's daily movements — where they worship, who they visit, whether they crossed a state line for care. That data doesn't need a warrant to become a weapon if the wrong agency can just ask nicely, or not ask at all.

San Francisco isn't unique — this is how these networks work everywhere they're deployed, audits or not. Check our camera map to see what's logging your plate right now, and visit our take-action page if you want to push your city council for real oversight instead of after-the-fact apologies.