Field Guide to AI, Security and Cybercrime

Licence Plate Readers: What They Record and Who Can Look

The camera is sold as a way to find one car. It works by remembering every car, and the memory is where the harm lives.

Field Guide to AI, Security and Cybercrime·Abdolmadjid Masoomi·4 October 2026·6 min read

Licence plate readers are sold as a way to find a stolen car or a wanted driver, but they work by recording every passing vehicle with a time and place. The privacy harm lies in retention and sharing: a database of everyone's movements answers questions about people nobody suspected of anything.

Built to find one car by recording all of them

You are told that plate-reading cameras exist to find stolen vehicles and wanted drivers. That describes the search, not the system. To find one plate, the camera reads every plate: the school run, the supermarket, the visit to a friend's flat. Each read is stored with a time and a place, and the store is what matters.

These systems go by automatic number plate recognition, ANPR, in Britain and much of the world, and automated licence plate readers, ALPR, in North America. The names differ; the mechanism does not. A system built to answer "where is this car now?" also answers "where has this car been?", for any car, for as long as the records are kept.

How the cameras see and what they keep

A camera photographs a passing vehicle. Software reads the characters on the plate and turns them into text. The record usually includes far more than the plate:

  • the time and the camera's location, or the vehicle's own position if the camera is mobile;
  • the photograph, often showing part of the car and sometimes its occupants;
  • increasingly, the colour, make and model of the vehicle, inferred from the image.

Cameras are fixed on roads, junctions, bridges and car-park entrances, and mounted on vehicles that read plates as they drive. Together they form a mesh: predictable fixed points plus moving ones that fill the gaps. A single read says little. A sequence of reads is a route, and a month of routes is a pattern of life. That is the point made in metadata is the message: records of movement reveal what content never would.

Who runs them, and why private networks matter

The operator determines the rules. Police forces use plate readers to check vehicles against lists of interest. Councils and road authorities use them for congestion and emission zones, bus lanes and parking. Private companies run them for car parks, retail sites, logistics yards and, increasingly, private estates and neighbourhood associations.

The distinction between public and private operators matters more than the cameras do. Police use of plate data is usually governed by specific codes and oversight, however imperfect. A private network is governed mainly by its contracts and by general data-protection law, where such law exists. Its data may be shared with partners, sold, combined with other sources, or handed to police informally. A private camera pointed at a public street is a surveillance asset that sits outside the scrutiny applied to the state, and it adds to the wider problem of people recorded simply for being nearby, discussed in smart glasses and the people in view.

It also connects to a commercial market in location data. Cars themselves increasingly report where they go, as your car is a data broker explains, and plate-read databases are another stream of the same kind of information.

What a history of reads reveals

Keep the reads long enough and they stop being about vehicles. Overnight clusters point to a home address. Weekday arrivals point to a workplace. Regular visits point to a place of worship, a clinic, a solicitor, a support group, a political meeting, a partner's address. None of this requires anyone to be suspected of anything. The capacity to answer these questions exists the moment the records are retained.

That capacity is open to misuse in ordinary ways, not only dramatic ones: someone with database access looking up an ex-partner, a neighbour, a journalist. The defence against that is not trust in the people with access. It is short retention, narrow access, and logs of who searched for what.

Errors: a hit is a lead, not proof

The systems make mistakes, and the mistakes land on people.

  • Misreads. Dirty, damaged or badly lit plates are misread, and similar characters are confused.
  • Wrong matches. A misread can match a plate on a list of interest, putting an innocent driver in the frame.
  • Cloned plates. Criminals copy the plates of a similar car, so the real owner's plate turns up where they have never been, attached to offences they did not commit.

So a camera hit should be treated as a lead to be checked, never as proof of where a person was or what they did. Before anyone is stopped, fined or accused on the strength of a read, a human should confirm the vehicle and the plate. Automation bias, trusting the machine because it is a machine, turns a minor error into a serious one.

The questions that decide the harm

When you want to judge a plate-reader network, ask about the data, not the cameras.

How long are non-matching reads kept? A system that discards reads of vehicles not on any list within a short period is a search tool. One that keeps everything for months or years is a movement archive.

Who can search it, and is every search logged? Access should be limited to named roles, for stated purposes, with each search recorded and audited by someone independent of the people searching.

Is the data shared? Pooling between agencies, or between private operators and police, multiplies both the uses and the risks, and moves data far from the context in which it was collected. Commercial resale is the furthest step, and it feeds the same ecosystem described in removing your details from data brokers.

What you can do as an individual is modest but real. Where data-protection or public-records law allows, ask an operator what it holds about your vehicle and what its retention and sharing policy is. Ask your local authority and police the same questions publicly. Support rules that set short retention for non-matches, require logged and audited searches, and bar the sale of plate data. What you should not do is fit plate covers, sprays or devices meant to defeat cameras: they are unlawful in many places and make you more conspicuous, not less.

Questions people ask

Can I find out what plate-reader data is held about my car?

Often, yes. Where data-protection law gives you a right of access, you can ask an operator for the records it holds about your vehicle. Law enforcement requests may be partly refused, but private operators generally have to answer.

Do anti-camera plate covers work?

Do not use them. They are unlawful in many jurisdictions because plates must be readable, and they invite exactly the attention you were trying to avoid while doing nothing about the many cameras that will read your plate anyway.

What is the difference between police and private plate readers?

The technology is the same. The difference is governance: police use is usually subject to specific codes and oversight, while private networks run mainly on contracts and general data-protection rules, with wider freedom to share or sell the data.

What would good rules look like?

Short retention for vehicles not on any list, access limited to named roles for stated purposes, every search logged and independently audited, clear limits on sharing, and no commercial sale of the data. Those rules keep the search tool and remove the archive.

Close

The plate reader's advertised job, finding a stolen car, is the rare exception. Its constant job is remembering everyone else. The argument worth having is not about the lens on the pole but about the database behind it: how long it keeps innocent people's movements, who may search it, and whether anyone checks the searchers.

Questions people ask

Can I find out what plate-reader data is held about my car?

Often, yes. Where data-protection law gives you a right of access, you can ask an operator for the records it holds about your vehicle. Law enforcement requests may be partly refused, but private operators generally have to answer.

Do anti-camera plate covers work?

Do not use them. They are unlawful in many jurisdictions because plates must be readable, and they invite exactly the attention you were trying to avoid while doing nothing about the many cameras that will read your plate anyway.

What is the difference between police and private plate readers?

The technology is the same. The difference is governance: police use is usually subject to specific codes and oversight, while private networks run mainly on contracts and general data-protection rules, with wider freedom to share or sell the data.

What would good rules look like?

Short retention for vehicles not on any list, access limited to named roles for stated purposes, every search logged and independently audited, clear limits on sharing, and no commercial sale of the data. Those rules keep the search tool and remove the archive.

Ask NEXUS about this article

Get an AI-powered summary, key points, or follow-up questions about Licence Plate Readers: What They Record and Who Can Look, grounded in the essay content and the broader corpus.