Automatic license plate readers are legal throughout the United States. A single scan of a plate on a public road is not a search under the Fourth Amendment, so police do not need a warrant or any suspicion to run one. What varies, and varies enormously, is what happens next: how long the data is kept, who can access it, whether private companies can sell it, and what rights you have when the system gets your plate wrong. There is no federal statute regulating these cameras directly, so most of the real rules come from state law, and roughly two-thirds of states have no ALPR-specific rules at all.
Why a Single Scan Is Legal
The Fourth Amendment prohibits unreasonable searches and generally requires a warrant backed by probable cause. Courts have consistently held that observing something in plain view in a public space is not a search. License plates are designed to be visible on public roads, so photographing them with a camera does not trigger Fourth Amendment protections.1Congressional Research Service. Automated License Plate Readers – Background and Legal Issues
That reasoning is what makes ALPR cameras lawful in every state. Police do not need a warrant, a court order, or any individualized suspicion to scan your plate. Each read is automatically compared against watchlists of stolen vehicles, outstanding warrants, and missing-person alerts. When a plate triggers a hit, the officer is supposed to independently verify the alert before acting on it, because watchlist data can be outdated and the scan itself may contain a character-recognition error. The scan is legal; the follow-up is where officers are expected to slow down.
Where the Legal Picture Gets Harder
One scan is constitutionally unremarkable. Millions of scans compiled into a searchable database are a different question. Aggregated ALPR data can reconstruct where a person lives, works, worships, and receives medical care, and who they visit. Courts have started to recognize that at some point this crosses from routine observation into surveillance.
The case shaping this debate is Carpenter v. United States, a 2018 Supreme Court decision holding that the government needs a warrant to access historical cell-site location records. The Court found that tracking someone’s physical movements over an extended period constitutes a search under the Fourth Amendment, even though each individual data point was shared with a third party.2Supreme Court of the United States. Carpenter v. United States
Lower courts have since asked whether Carpenter‘s logic applies to ALPR databases. Several have acknowledged that with enough cameras in enough places, historical plate data could reveal such a detailed picture of daily life that warrantless access would violate the Fourth Amendment.1Congressional Research Service. Automated License Plate Readers – Background and Legal Issues No court has drawn a bright line for how much data triggers warrant protection. The direction is clear, though: the more agencies collect and the longer they keep it, the stronger the constitutional argument against warrantless access.
What Federal Law Covers
There is no federal statute specifically regulating ALPRs. One existing federal law does touch the data these systems produce. The Driver’s Privacy Protection Act prohibits state motor vehicle departments from disclosing personal information from their records without consent or a qualifying exception.3Office of the Law Revision Counsel. 18 USC 2721 – Prohibition on Release and Use of Certain Personal Information From State Motor Vehicle Records The DPPA allows disclosure for law enforcement, motor vehicle safety and theft prevention, and certain business verification purposes, among other exceptions. It does not regulate the cameras themselves, but it limits how the personal records a plate number links back to can be shared.
The penalties have teeth. Anyone whose information is improperly disclosed can sue and recover at least $2,500 in liquidated damages per violation, plus punitive damages for willful or reckless conduct and reasonable attorney’s fees.4Office of the Law Revision Counsel. 18 USC 2724 – Civil Action Those per-violation damages have made the DPPA a growing source of class action litigation as plate data makes it easier to connect numbers to people at scale.
What State Laws Add
Because federal law does not directly address these systems, regulation has fallen to the states. At least 16 states have enacted ALPR-specific statutes, and the approaches vary widely. The rest leave decisions about use, retention, and sharing to individual agencies, sometimes with no written policy at all.
Who Can Operate the Cameras and Why
Some states limit ALPR use to law enforcement and narrow purposes such as parking enforcement or access control at secure areas. Others allow broader deployment but restrict what the data can be used for, confining it to investigations and prohibiting minor traffic enforcement or commercial use. Several states require agencies to adopt a written ALPR policy, train officers, and maintain audit trails of who accesses the data and why.
How Long the Data Can Be Kept
Retention is where state laws split most sharply. On one end, a state may require plate data to be purged within three minutes unless the scan results in an arrest or matches an active alert. Other states set windows of 21, 60, 90, or 150 days. On the other end, some states permit retention for several years, and states without ALPR-specific laws often leave the question to the operating agency, which may keep records indefinitely.
Retention length is what determines how far back police can reconstruct your movements. A 21-day window keeps the picture narrow. A five-year retention policy, which some large agencies have adopted, creates a detailed historical record of where your car has been for half a decade.
Who Can Receive the Data
Several states restrict sharing after collection. Some prohibit distributing plate data to non-law-enforcement entities or selling it commercially. Others treat ALPR records as confidential and exempt from public disclosure, sometimes with a carve-out that lets a registered owner request records about their own vehicle. Most states have no specific sharing rules, so agencies and private companies operate under general privacy or records laws written before this technology existed.
Private ALPR Companies Are a Different Story
Law enforcement is not the only operator. Private companies run large ALPR networks for vehicle repossession, parking management, toll collection, insurance investigations, and access control at gated communities and commercial lots. Some vendors maintain databases containing billions of plate scans and sell access to police, skip tracers, insurance companies, and other clients. One major private vendor reportedly processes over 20 billion scans per month across its network.
The Fourth Amendment limits only government action, so constitutional protections against unreasonable searches do not apply to private ALPR operators.1Congressional Research Service. Automated License Plate Readers – Background and Legal Issues A private company can scan your plate in a shopping-center parking lot, store the data for years, and sell it to anyone willing to pay. The legal constraints come almost entirely from state privacy statutes, and in states without ALPR-specific legislation there may be very few limits.
This creates a real loophole. When a police department buys access to a private ALPR database rather than operating its own cameras, the agency may argue it is purchasing a commercial product, not conducting a search. Whether the Carpenter warrant rule extends to those commercial databases is an open question no court has definitively resolved. In practice, federal and local agencies alike can pull historical location data on millions of vehicles through private vendors, sometimes without the judicial oversight that would apply if they had collected the same information themselves.
When the Technology Misreads Your Plate
ALPR systems are not perfect, and the legal question shifts when they get it wrong. Studies have found that these systems misidentify the issuing state on roughly one in ten plates, and character-level errors are common: a 3 read as a 7, an H as an M. Suddenly an innocent driver is flagged as operating a stolen vehicle.
Documented cases across the country describe drivers pulled over at gunpoint, ordered to the ground, and handcuffed in front of their children because a system matched their plate to a stolen vehicle that looked nothing like theirs. In one incident, a family was detained at gunpoint because the software matched their SUV to a stolen motorcycle with plates from a different state. In another, a driver was stopped because his own recovered vehicle had never been cleared from a stolen-vehicle watchlist. Some of these incidents have produced significant civil settlements, with payouts reaching into the hundreds of thousands and, in some cases, millions of dollars.
The systemic problem is the gap between how officers respond to an ALPR hit and how reliable the hit actually is. Training tells officers to verify before acting. In practice, verification sometimes happens only after a driver has already been pulled from their car at gunpoint. If you are the person on the pavement, the theoretical legality of the underlying scan is cold comfort, and a claim against the responding agency generally turns on the officers’ conduct rather than the camera itself.
Finding Out If Your Plate Has Been Scanned
In many jurisdictions, ALPR data held by government agencies is a public record, and you may be able to file a records request to find out whether your plate has been scanned and where. The process varies. Some agencies treat ALPR data as law enforcement records exempt from disclosure. Others will release records to the registered owner of the vehicle. Where requests are honored, expect to provide the plate number, approximate dates and locations, and a small administrative fee.
Several state ALPR statutes address this directly. Some classify all ALPR data as confidential and block public access entirely. Others let registered owners request their own records while prohibiting broader disclosure. If you want to know what an agency has on your vehicle, start with a records request to the agency operating the cameras in your area. A denial letter should cite the legal basis, which gives you a starting point for understanding the rules in your state.
Private ALPR companies work differently. Because they are not government agencies, public records laws do not apply. Some states with broad consumer privacy legislation give residents the right to request and delete personal data held by private companies, and ALPR records may fall under those provisions. Outside of those states, private companies have no obligation to tell you what they have collected or to delete it.