Automated license plate recognition systems (private operators)
ALPR law
Location · Data security
Requires operators of license plate reader systems to secure the data and adopt a public usage and privacy policy covering authorized uses, access, sharing, accuracy, and retention.
- Where
- California
- Citation
- Cal. Civ. Code 1798.90.5-1798.90.55
- Status
- In force
- In force since
- 2016-01-01
- Enforced by
- Private plaintiffs
- People can sue
- Yes
- Penalties
- Individuals harmed may recover actual damages (at least $2,500 liquidated damages), punitive damages for willful or reckless violations, fees, and equitable relief (1798.90.54). ALPR data is also 'personal information' under the breach law (1798.82(h)(1)(G)).
- Applies to
- ALPR operators and end users, including private businesses (e.g., parking and repossession companies) as well as public agencies
What a privacy notice must say
- Implement and publish a usage and privacy policy covering authorized purposes, who may access, monitoring, sharing restrictions, custodian, accuracy, and retention.Cal. Civ. Code 1798.90.51(b)
Security duties
- Maintain reasonable security procedures to protect ALPR information.Cal. Civ. Code 1798.90.51(a)
Sources
- Official text
- Cal. Civ. Code 1798.90.51 (California Legislative Information)
- Cal. Civ. Code 1798.90.54
Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.
Unverified: End-user duties (1798.90.53) and sale restrictions for public agencies (1798.90.55) not fetched.
Research reference, not legal advice.