What happened
In 2026, Connecticut, Kentucky, New Jersey, New Mexico, Oregon and Washington passed statutes that restrict automated license‑plate reader (ALPR) deployments, mandate limited real‑time use, require warrants for hot‑list entries, and impose strict data deletion timelines. The laws also call for transparency, audit requirements and a private right of action to enforce compliance.
Why it matters for trust and compliance
- Its status is in effect. It is in force now.
- These new state laws aim to curb mass vehicle tracking and protect privacy by tightly regulating ALPR technology.
Who is affected
government technology controller processor law enforcement vendor Connecticut Legislature Kentucky Legislature New Jersey Legislature New Mexico Legislature Oregon Legislature Washington Legislature
Recommended actions
- Check that privacy notices describe the practices this addresses.
- Confirm access, correction, deletion and opt-out requests are handled within the required time.
- Revisit retention schedules and data minimisation for the data involved.
- Review the transfer mechanisms relied on for affected data flows.