The debate over automated license plate readers is no longer hypothetical. For years civil liberties groups, journalists, and local organizers have warned that vendor-run ALPR networks create a searchable, persistent record of where people drive, who they visit, and when they exercise their rights in public. The Electronic Frontier Foundation has been one of the clearest voices documenting the surveillance risks of ALPR systems and pushing for transparency and limits on how those systems are used.

What the EFF has emphasized makes sense: ALPRs are not mere tools to recover a stolen car. They are datastreams that, when aggregated and searchable across networks, can reveal patterns of life at scale. That is exactly the privacy problem communities are seeing as Flock Safety and similar vendors roll out camera networks that link local deployments into a broader, searchable ecosystem. The architecture matters. Centralized, vendor-hosted systems change the game because a single query can reach hundreds or thousands of cameras across jurisdictions.

The courts are starting to respond to these concerns. In Virginia a trial judge suppressed evidence after concluding the citywide ALPR deployment using Flock equipment amounted to a Fourth Amendment search when used without a warrant. That ruling highlights a real constitutional question: prolonged and searchable tracking of vehicles is functionally similar to placing a tracking device on a car. Cases like that one amplify EFF’s long running position that public oversight, narrow purpose limitations, and clear legal rules are essential whenever police adopt mass tracking technologies.

At the same time, the surveillance industrial complex is expanding. Flock’s push into complementary technologies, including drone as first responder programs and other sensor systems, turns a stationary plate reader into the hub for a broader real-time response architecture. That expansion raises the stakes for meaningful contractual limits and public review. When a private vendor ties ALPR data to rapid aerial response and other analytics, the risk to privacy and to vulnerable communities increases.

EFF has pursued multiple, practical paths to push back. The organization wins access to records, intervenes in litigation, and files public records requests to reveal how agencies buy and use surveillance tools. Their litigation and transparency work is intended to place factual information on the table so communities and elected officials can make informed decisions rather than rely on vendor marketing claims. That approach is exactly the kind of pressure municipalities need to replicate locally.

We already have evidence that local pushback changes outcomes. Municipalities and counties have walked away from vendor contracts when oversight was inadequate or when the public demanded stronger protections. A number of smaller jurisdictions have terminated or paused Flock programs after privacy concerns and political pressure revealed gaps in governance and unclear sharing practices. Those exits demonstrate that policies and procurement language matter in practice.

What should cities, counsel, and community coalitions do now? A short, practical checklist:

  • Order a forensic audit of any vendor-hosted ALPR system and insist the vendor provide full audit logs of searches and sharing settings. Public agencies must be able to answer who searched the network, why, and which external networks were queried. Without those logs, oversight is impossible.

  • Require contract language that forbids national or cross-jurisdictional lookups except with a judicial warrant or a narrowly defined, documented exigency. If the vendor hosts the data, the contract must explicitly prohibit any unilateral vendor-enabled nationwide queries. Contracts should include automatic termination clauses for unlawful sharing.

  • Enforce strict retention limits and data minimization. Default retention should be as short as operationally feasible and not longer than locally approved policy. Where retention beyond a narrow window is allowed, require independent review and public notice.

  • Make all policy decisions subject to public review and council approval. Surveillance purchases are not purely technical procurements. They are political choices that shape civic life. Create an independent oversight board with subpoena power for contracts and audit logs. Elected officials should vote openly on deployments and transparency policies.

  • Demand vendor transparency on sharing with federal or out of state actors and require written attestation of compliance with state law. If a vendor claims to be a neutral contractor, make that neutrality contractual rather than PR spin. If the vendor will not comply, do not sign the contract.

  • Insert narrow use purpose clauses and training requirements. Prohibit queries for protected First Amendment activity and require logged, written justifications for searches. Train officers and supervisors on those limits and audit compliance with disciplinary consequences for violations.

For advocates: push for local transparency now. Public records requests, council oversight hearings, and audit demands have already forced change in other places. Use the EFF’s public resources on ALPRs and the growing body of litigation to make targeted requests of city staff. Transparency yields leverage.

Finally, regulators and state legislatures must act. Local policies help, but state-level guardrails are the right instrument to address interstate sharing and vendor-hosted national networks. Lawmakers should clarify whether and when government actors may share plate data across state lines, and they should require vendor auditability and public reporting for any contract that centralizes citizen location data. Courts can and will weigh in where law lags, but statutory clarity will set consistent public standards.

EFF’s work is a reminder that the problem is not just bad actors. The problem is systems designed to make ubiquitous, persistent surveillance easy to execute. That design choice is reversible. With audits, contract controls, public oversight, and clear law, cities can have tools for public safety without surrendering the movement privacy and constitutional protections that a functioning democracy requires. The time to insist on those safeguards is now.