A New Oregon Law Regulates Police Use of License Plate Readers. Here’s How It Works.

Why It Matters

SB 1516 sets a rare state‑level framework that balances law‑enforcement benefits of ALPR technology with civil‑rights safeguards, and it empowers citizens to hold private vendors accountable for privacy violations.

Key Takeaways

• Citizens can sue vendors for negligent ALPR data sharing.
• Data must be deleted after 30 days unless tied to a case.
• Agencies must log search purpose and provide public audit reports.
• Law bars ALPR use that conflicts with Oregon sanctuary statutes.
• Vendors required to use end‑to‑end encryption, though definition unclear.

Pulse Analysis

Automated license‑plate readers have become a staple of modern policing, scanning millions of vehicles daily to aid investigations, locate stolen cars, and find missing persons. Yet the same technology can capture detailed vehicle attributes and, when combined with facial‑recognition tools, enable pervasive surveillance. Privacy advocates have highlighted how federal agencies, particularly ICE, have accessed state ALPR databases without warrants, raising alarms in sanctuary states like Oregon where local law enforcement is barred from assisting immigration enforcement without a court order.

SB 1516 addresses these concerns by imposing strict data‑retention limits—30 days unless the information is linked to an active criminal case—and requiring every search to be logged with a clear justification. Vendors such as Atlanta‑based Flock Safety must now provide monthly and quarterly audit reports that disclose the volume of captures, search criteria, and any inter‑governmental data requests, all of which are made publicly available after redacting personal identifiers. The law also grants Oregonians a private right of action, enabling them to sue vendors for intentional or grossly negligent misuse of ALPR data, a provision that could deter companies from sharing information with federal immigration authorities.

The legislation could become a template for other states grappling with the trade‑off between public safety and privacy. By mandating end‑to‑end encryption—though without a precise definition—the bill pushes vendors toward stronger security standards while leaving room for legal challenges over compliance. As municipalities nationwide evaluate the deployment of ALPR systems, Oregon’s approach signals that robust oversight, transparency, and citizen‑driven enforcement are increasingly seen as essential components of responsible surveillance technology.