Big Story: Half of US States Still Have No Law Governing License Plate Readers

Key Takeaways

  • 26 states have no statutes governing automated license plate readers, even as the technology spreads across law enforcement agencies.

  • No state meets all 7 protections in the Policing Project’s model. Connecticut, Oregon, Virginia, and Washington lead with 6.

  • The biggest policy questions cover retention, false-positive checks, data sharing, protest monitoring, audits, transparency, and penalties for misuse.

  • Agencies operating without comprehensive state rules are left to set their own standards for searches, retention, outside access, and accountability.

The Policing Project at NYU School of Law reviewed automated license plate reader laws in every state and Washington, D.C., and found that regulation has not kept pace with deployment. ALPR systems automatically photograph passing vehicles, extract plate numbers, and attach information such as time and location. Police can compare plates against hotlists in real time or search stored records later to reconstruct where a vehicle has appeared. 

The group evaluated state statutes against 7 safeguards: privacy protections, verification of automated matches, formal rules for data sharing, limits on monitoring protests, regular audits, public transparency, and consequences when agencies violate the rules. No jurisdiction satisfied all 7. Connecticut, Oregon, Virginia, and Washington received the highest scores, meeting 6.

The gaps are significant because ALPRs operate as both alert systems and large databases of vehicle movements. A camera can help officers locate a stolen car or a vehicle associated with a serious investigation, but every scan also adds another location record for drivers who are not suspected of a crime. 

The largest gap is simply the absence of statewide rules. 26 states, including New York, Texas, Pennsylvania, Massachusetts, Michigan, and Wisconsin, have no ALPR-specific legislation on the books, according to the scorecard. Washington, D.C., Florida, and Tennessee have statutes, but none of their provisions meet the 7 standards used in the assessment. 

Data sharing is one of the tougher problems because an agency can operate under strict local rules while sending or receiving records from jurisdictions with different policies. The model statute calls for written data-sharing agreements, audit logs recording transfers, and restrictions on continuous access to external databases. It also says agencies should stop sharing with partners that violate the governing rules.

The consequences are already visible. A lawsuit filed in New York in June challenges the Westchester County Police Department’s ALPR network, alleging officers can search 2 years of vehicle movements without a warrant or meaningful written limits. The Policing Project says the county gives users from at least 55 local, state, and federal agencies access to ALPR data. 

Cities, counties, and states need rules specifying how long records remain available, which investigations justify historical searches, who can query the system, how automated matches are confirmed, which agencies can receive the data, and how misuse is detected. Agencies also need audit trails and public reporting that make those rules enforceable. Until more states establish those standards in law, two agencies using the same technology can operate under substantially different privacy and accountability requirements.

Build the right capabilities for what’s coming. Book a quick call with the Fractional Source team.

Quick Hit News:

  • Decatur approved a 10-year Axon agreement covering body cameras, Tasers, vehicle cameras, AI software, license plate readers, drones, and drone docks. The city will spend just under $1.1 million in fiscal 2027, up from about $490,000 currently spent on body cameras, with annual costs potentially reaching $1.57 million from year three. The package equips 130 officers with body cameras that include AI-assisted translation across 60 languages, plus three autonomous drone docks and camera and license-plate systems for 75 vehicles.

  • California’s Newport-Mesa Unified School District has banned e-bikes, electric scooters, and similar vehicles at all K-8 campuses after citing a rise in accidents and injuries. High school students can still bring e-bikes to campus if they complete a California Highway Patrol safety course and display a permit sticker. Middle school students face a similar training requirement for pedal bicycles. Bikes or vehicles found on campus without proper authorization can be locked by school staff until a parent retrieves them.

  • West Ada School District, Idaho’s largest, is targeting screen-free instruction for 90% of the elementary school day and 80% of the middle school day as it reassesses its one-to-one device model. The district, which serves roughly 40,000 students across 60 schools, has already banned the use of devices during recess, lunch, and other unstructured periods. Boise School District is taking a similar approach, asking teachers to use devices only when they improve the lesson.

  • Sonoma County CIO Dan Fruchey is retiring after 33 years in public service, including nearly three decades with the California county. He joined Sonoma County in 1997 as an IT analyst, became assistant information systems director in 2020, and took over as CIO in January 2022. His tenure included work to modernize county records, improve constituent services, and strengthen disaster preparedness following the 2017 Tubbs Fire. Sonoma County is accepting applications for his replacement through September 14.

For the Commute:

Transition to City Manager and into Local Government (GovLove Podcast)

Casey Lucius discusses her path from Naval Intelligence and the U.S. State Department into municipal government, first as an elected city council member and later as an administrator in Marco Island, Florida. The episode focuses on her move from Assistant City Manager to City Manager and the changes she is making in her new role. It also uses Marco Island’s $23 million infrastructure bond as an example of the decisions city managers must make. The project covers two bridge replacements, three bridge repairs, and 36 lane miles of catch-up paving.

Why Try AI is a weekly newsletter that shows professionals how to use AI without jargon or hype. Get practical tools and workflows you can try today. Join 18,000+ readers who'd rather get things done with AI than just read about it.

Resources & Events:

📅 Maximizing Government Efficiency (Virtual - September 10, 2026)

This webinar shares how state and local governments can replace paper forms, spreadsheets, and disconnected financial workflows with automated travel and expense systems. The discussion covers reducing administrative work, improving the employee and approver experience, strengthening financial controls, and giving finance teams better visibility into spending. It also addresses compliance and audit readiness, with guidance for agencies modernizing routine financial processes. Details →

📅 Texas IT Leadership Forum 2026 (Austin, TX - November 19, 2026)

The Texas IT Leadership Forum brings together state and local government IT executives and emerging technology leaders for discussions on leadership, innovation, and digital-government strategy. Sessions focus on the people, policies, and management practices needed to lead public-sector technology organizations, with peer exchange and leadership development at the center. The invitation-only event is open to public-sector attendees and will be held on November 19, 2026, at the Austin Marriott Downtown. Details →

📊 Report Spotlight: How High-Performance Workstations Are Driving Public Innovation (HP and Intel)

This paper makes the case for AI-ready workstations with local compute over cloud infrastructure for time-critical and sensitive government workloads, citing use cases in computer vision, document processing, public health modeling, traffic planning and geospatial analytics. HP Federal CTO Tommy Gardner and HP data science lead Leonard Isler argue that local processing avoids the latency, unpredictable cost, and security gaps that come with sending sensitive data off-site. The paper closes with five practical steps for leaders, including building user tiers matched to hardware needs and planning workstation capacity for 3 years of growth. Read →

Insight of the Week:

Pennsylvania is bringing data and AI under one office, with a first-year focus on common standards, secure data sharing, risk-based AI review, and reusable infrastructure across agencies. The state is testing AI for document quality checks, legacy code analysis, document processing, knowledge search, and easier navigation of government services. Agencies will remain stewards of their own data while the enterprise layer provides shared governance, architecture, platforms, and security controls. Higher-risk uses involving benefits or program decisions will face closer review for privacy, bias, transparency, human oversight, and vendor data-handling practices.

Was this email forwarded to you? Subscribe here to get Fractional Leader delivered to your inbox every Tuesday & Thursday.