Data privacy lawyer investigating ALPR violations

.avif)


.jpg)
License plate readers, commonly known as automated license plate recognition (ALPR) systems, have become one of the most widespread surveillance tools in California. Also referred to as license plate cameras or license plate trackers, these systems are routinely mounted on parking garages, retail lots, shopping centers, tow trucks, and private security vehicles. They rely on automated cameras to scan and record thousands of license plates each day, often without drivers realizing the technology is present.
Years ago, California lawmakers anticipated the privacy risks inherent in this form of data tracking and in 2016 the state's Automated License Plate Recognition statute took effect. For nearly a decade, however, the law remained largely untested in the courts. That changed in 2026 when a series of appellate rulings and new class action filings began testing the limits of consumer data protection.
If an ALPR system or license plate reader has scanned, stored or shared your license plate data at a business operating in California, you may have legal rights under this statute. Contact our privacy attorneys to discuss your case.
California's ALPR statute regulates how private companies and public agencies collect, store, use, and share data captured by license plate readers. Any operator or end user of an ALPR system must:
These requirements are not limited to law enforcement or specialized parking technology vendors. Retailers, shopping malls, hotels, homeowners associations, parking operators, and property managers who use ALPR systems may all fall within the statute's reach if their systems convert license plate images into searchable, computer-readable data.
Consumers harmed by a violation of the ALPR statute may be entitled to recover actual damages, or liquidated damages of at least $2,500, together with attorney's fees, punitive damages where authorized, and injunctive relief.
An ALPR system can reveal far more than most people realize. When license plate scans are combined with timestamps and location data, they can create a detailed record of a person's movements over time. This form of tracking can expose sensitive patterns, including visits to medical facilities, places of worship, political events, or other private destinations.
Many California drivers are unaware that an ALPR system is scanning their vehicle every time they enter a parking lot, shopping center, or parking garage. If the business operating that system failed to implement or publicly post a privacy policy that complies with California law, the driver may have statutory rights even if no traditional data breach occurred.

Two significant appellate decisions issued in 2026 have shaped how ALPR and license plate reader claims are evaluated in California courts. The rulings point in somewhat different directions.
Bartholomew v. Parking Concepts, Inc.
In February 2026, California's First District Court of Appeal ruled in favor of a plaintiff who alleged that a parking garage operator collected his license plate data through an ALPR camera without implementing or posting a compliant usage and privacy policy. The business argued that a plaintiff must demonstrate actual misuse of the data to establish harm.
The court rejected that argument, holding that the mere failure to post a required ALPR privacy policy can itself constitute actionable harm under the statute. The court reasoned that such an omission undermines the transparency and accountability the law was designed to protect, regardless of whether the collected information was ever misused.
The California Supreme Court declined to review the decision, leaving it as binding guidance for similar ALPR cases.
Mata v. Digital Recognition Network, Inc.
In July 2026, California's Fourth District Court of Appeal reached a different conclusion in a case involving a company that operates vehicle-mounted ALPR readers. The company had implemented and posted a privacy policy. The plaintiff contended that the policy amounted to little more than lip service and that the collection and storage of his data constituted an invasion of privacy.
The court disagreed, holding that standing under the ALPR statute requires a showing of actual harm beyond a subjective belief that one's privacy was invaded. Because the plaintiff could not identify unauthorized access, misuse, or a security breach, the court affirmed summary judgment in favor of the company.
These two decisions indicate that the presence or absence of a compliant ALPR privacy policy is likely to be the central issue in most license plate reader cases going forward. Businesses with no policy at all appear to face the greatest exposure, while claims based solely on the fact that data was collected may encounter a higher bar in court.
Since the Bartholomew decision, plaintiffs' firms have filed class-action complaints against a wide range of businesses that use ALPR and license plate reader technology in California. Reported cases and investigations have involved shopping centers, big-box retailers, grocery chains, hotels, parking operators, and the technology vendors that supply these systems.
Notable examples reported in recent months include:
These matters remain allegations at this stage and no conclusions about liability should be drawn from the mere filing of a complaint. But what the cases demonstrate is a clear trend: California courts and regulators are scrutinizing how ALPR data is collected and handled, and consumers are increasingly stepping forward to enforce their statutory rights.
If you suspect a business used an ALPR system or license plate reader to collect your data without proper disclosure, consider taking the following steps:
Any companies or lawsuits mentioned reflect publicly reported allegations, and no company named in this article has been found liable for the conduct described unless otherwise stated. Nothing in this article should be construed as an accusation of wrongdoing.

.jpg)
Navigating California's ALPR statute requires counsel who understand both the technical details of license plate reader technology and the rapidly evolving case law in this area.
The Lyon Firm has spent nearly two decades representing consumers nationwide in complex data privacy and class action litigation, including cases involving unlawful data sharing, biometric privacy violations, and unauthorized location tracking.
California drivers turn to The Lyon Firm because of its extensive experience litigating consumer privacy cases under California law, including claims involving the California Consumer Privacy Act (CCPA) and other tracking-related litigation. The firm also has a proven track record of securing meaningful results in both class actions and individual privacy cases.
The firm stays current on emerging ALPR rulings, ensuring every case is evaluated under the most current legal standards. Clients receive free, confidential consultations with no upfront costs while the firm assumes the financial risk of litigation, allowing clients to focus on their lives while their claims move forward.
If you believe your license plate data was collected through an ALPR system or license plate reader at a business that failed to comply with California law, you do not have to navigate the process alone. Contact The Lyon Firm today for a free consultation to discuss your rights and determine whether you may be eligible to join an existing case or pursue an individual claim. Call (513) 381-2333 or contact the firm online for a free, confidential case review.
Possibly. Under California's ALPR statute, businesses that operate license plate reader or license plate camera systems must implement and publicly post a usage and privacy policy. Recent court rulings suggest that a business's failure to do so may itself support a claim, even without a separate data breach or misuse of your information. Whether you have a viable case depends on the specific facts, so it is worth having an attorney review your situation.
California law does not require an ALPR operator to notify each driver individually at the moment of scanning. Instead, the law requires businesses to maintain a written privacy policy that is publicly available, typically posted on the company's website, explaining how the license plate data is collected, used, and shared. If that policy does not exist or is not accessible to the public, the business may be out of compliance.
Law enforcement agencies may use ALPR technology, but their use is also subject to state privacy and data sharing rules. California law restricts sharing ALPR data collected by state or local agencies with federal or out of state law enforcement in most circumstances. Several recent disputes have centered on whether local police departments improperly shared license plate camera data outside these limits.
California'sALPR statute allows individuals harmed by a violation to recover actual damagesor a minimum of $2,500 in statutory damages per violation, whichever isgreater. An attorney can help evaluate what compensation may apply to yourspecific case.
Taking the first step doesn’t have to be complicated. In just a few minutes, you can share the basics of your case, and our team will guide you from there: