Special thanks to Vincent Tennant for his contributions to this post.
The Electronic Frontier Foundation ("EFF") and the American Civil Liberties Union ("ACLU") have ended six years of litigation with the Los Angeles County Sheriff’s Department and the Los Angeles Police Department over the automated collection of license plate data. On October 3, 2019, the parties reached a settlement where the EFF and ACLU will receive a limited amount of the de-identified data for the purposes of reviewing how this data could be used by the government and to educate the public.
Throughout the city and county of Los Angeles, automated license plate reader (ALPR) systems have been implemented with the capacity to collect the images of up to 1,800 license plates per minute. California’s ALPR systems include fixed cameras as well as cameras mounted on police vehicles. The cameras scan every license plate that crosses their field of view.
Most recently, prior to the settlement, the EFF and ACLU won at the California Supreme Court, which ruled that the ALPR data are not "records of law enforcement investigations" and therefore not protected against disclosure requests under the California Public Records Act.
Throughout the litigation, the ACLU and EFF had requested one week’s worth of de-identified data from the ALPR system "so that the legal and policy implications of the government’s use of ALPRs to collect vast amounts of information on almost exclusively law-abiding [citizens of Los Angeles] may be fully and fairly debated." The EFF reports that it will receive exactly the requested amount in the settlement.
Government agencies are not covered entities in the California Consumer Privacy Act ("CCPA"), coming into effect on January 1, 2020. That leaves government agencies under the same privacy and transparency regimes currently in effect. The EFF hails its victory at the California Supreme Court and the subsequent settlement as an important precedent for future challenges of broad-based data collection and surveillance by government agencies as the CCPA will be enforcing privacy regulations on private actors.