The DHS Sends Out The Call For A National License Plate Database
from the more-'harmless'-metadata dept
In what reads like bad news all over, the DHS has just requested quotes for national automatic license plate reader (ALPR) database. There are currently several ALPRs in use and law enforcement agencies have been working hard to link systems up in order to better track vehicles as they move around the country. This has been hampered somewhat by multiple vendors, most of which aren't particularly interested in working with competitors. But even with multiple vendors, there's still a whole lot of data being stored -- a majority of which is entirely unrelated to criminal activity -- in easily-accessible databases.
License plate readers are used not only by police but also by private companies, which themselves make their data available to police with little or no oversight or privacy protections. One of these private databases, run by a company called Vigilant Solutions, holds over 800 million license plate location records and is used by over 2,200 law enforcement agencies, including the U.S. Department of Homeland Security.A nationwide database, with records accessible by law enforcement and investigative agencies with few restrictions is obviously a concern. Tracking vehicles as they move around the country generates a ton of location data that can reveal a great deal about a person. It's always argued that what you do in public carries no expectation of privacy, but that statement is somewhat meaningless when you consider the number of plates ALPRs scan and store. Most states with ALPRs have gathered millions of records, which are held for as long as 5 years, with little in the way of minimization procedures. ELSAG, another ALPR vendor, brags in its own promotional Powerpoint presentation that it has collected 50 million records in New York City alone, without a single mention of minimization processes or the disposal of non-hit data.
For the government to actively call for a nationwide database is troubling. Since this is a solicitation for bids, there's no discussion on what, if anything, will be required from the winning contractor in terms of storage, minimization or disposal. Given the track records of the largest vendors, it's likely these issues will be of lesser concern than other aspects, like scanning speed and database accessibility.
The call for bids may have something to do with Vigilant's recent efforts, both on the PR front and in the courtroom.
First off, Vigilant (along with Digital Recognition Network) is suing the state of Utah for, believe it or not, violating its First Amendment rights.
It posits that a new Utah law which bans license plate collection by private companies, effectively put it out of business in the state. The law was intended to keep data from falling into police hands without oversight, and is among the first by surveillance technology firms to argue against privacy laws invoking the First Amendment.DRN's press release goes into a little more detail on this rationale.
The Texas company fired back, arguing that collecting license plate numbers is free speech. The lawsuit draws upon a recent major Supreme Court ruling, Citizens United v. FEC, which overturned a law curbing corporate and union donations to political campaigns. In effect, the Court ruled that money is speech.
“The Texas company says it’s not a police agency – law enforcement already is exempt from the ban under Utah’s new law — nor can it access in bulk federally protected driver data that personally identifies the letters and numbers it collects from license plates in public,” the Associated Press reported Thursday. “The company said it only wants to find cars that have been stolen or repossessed, not to cull large swaths of data and incriminate people from their travel habits.”
“Taking and distributing a photograph is an act that is fully protected by the first Amendment,” said DRN / Vigilant Outside Counsel Michael Carvin. “The state of Utah cannot claim that photographing a license plate violates privacy. License plates are public by nature and contain no sensitive or private information. Any citizen of Utah can walk outside and photograph anything they please, including a license plate.”This is an interesting approach. It's a bit disingenuous to compare scanning license plates at a rate of hundreds per hour to someone walking around taking pictures of license plates (not the least of which is the fact that a private photographer most likely wouldn't have a searchable database), but underneath it all, the point remains: these are photographs of publicly-available items. It will be tough for a court to find a "bright line" that separates these two without weakening First Amendment protection. Then again, as the ACLU has noted, it's not really the photography that's a problem, it's the handling of the non-hit data, something that won't be addressed in this suit. That's Utah's problem and if it loses this case, then it needs to push for heavy restrictions on how the data is accessed and used, as well as rules on data disposal.
Using an unpopular decision (Citizens United) to argue that losing income equals losing free speech rights is a bit more troublesome. Of course, those opposed to that decision may welcome a court battle on the issue, as it may cast further doubt on the validity of that ruling. But does a company deserve to make money, much in the way it might deserve First Amendment protections? That's another grey area with no bright line and this two-pronged approach may allow Vigilant and DRN to set up their ALPR systems despite the state of Utah's opposition. (Of course, Utah would be free to use another vendor, but any decision in the ALPR companies' favor will help them attack similar laws elsewhere.)
It would appear that Vigilant is trying to knock down state laws that might curtail its national aspirations. Appearing on the same day as this lawsuit announcement was a Vigilant press release touting its ALPR's crime fighting abilities.
Vigilant Solutions announces today that the Loganville Police Department in Georgia attributes recent and significant arrests to their use of license plate recognition (LPR) technology from Vigilant Solutions.Two immediate questions arise. The first is: if you never make another case with it, what's the point of gathering all that data? Does the arrest of one child molester make the routine harvesting of thousands of plates of non-child molesters "worth it?"
Assistant Chief M.D. Lowry comments, “On January 7, one of our officers received an alert from his license plate reader (LPR) system on a vehicle which was associated with an active arrest warrant out of Texas. Our officer initiated a traffic stop per policy and identified the driver. Following protocol, the officer used other systems to validate the hit and was able to confirm the driver was wanted out of Del Rio, Texas for Indecent Acts with a Child, 2nd Degree. The suspect was taken into custody without incident and transported to the Walton County Jail to await extradition…"
We have only had our single unit for only a few months, but it is already proving its value by helping us to remove these threats from our community. I can tell you that the capture of a child molester from nearly 1,200 miles away was more than worth the cost of the LPR unit. If we never make another case with it, it was worth the cost.”
Second: pointing out the ends as justification for the means is a rhetorical dodge. There are any number of things law enforcement could do to bump arrest numbers -- like house-to-house searches and eliminating the probable cause requirement for warrants -- but neither takes into consideration the constitutional rights of those on the receiving end of these actions. Law enforcement is supposed to work within these limitations, rather than see how hard they can push back against them.
The call for bids on a national ALPR database takes a localized problem and makes it worse. The government (both on local and national levels) has shown repeatedly that it prefers to implement technology before considering the privacy implications. Post facto "repairs" generally only come into play once widespread misuse has already been reported. This is a chilling, but not unexpected, development. If it can be construed as "public," then it's the government's for the taking, apparently.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Filed Under: alpr, database, dhs, license plate
Reader Comments
Subscribe: RSS
View by: Time | Thread
I feel like the traditional privacy rights and right to free movement encompassed an unstated right to move without publicizing your movements or location.
[ link to this | view in chronology ]
Gee, could it possibly be that DHS is FUNDING these measures?
Looks like the 'plate-distortion' business is about to see a heavy spike in sales.
[ link to this | view in chronology ]
From History
The idea was to force a police officer to go through checks to match a plate with the owner and their address.
We already see the wheels turning where 'certain' political opponents/figures are being actively harassed when traveling through the airport.
The benefits of law enforcement being able see who is doing what where have NEVER outweighed the negatives. Once you allow the government to crush liberty, then all the criminals join the government.
[ link to this | view in chronology ]
Re: From History
Instead, use something like an encrypted RFID chip sticker (similar to a toll pass sticker) that changes identifying information periodically (say, hourly). It can be scanned by anyone without violating privacy, but with a warrant the encrypted ID history could be retrieved to target a particular vehicle. The goal is to enable individualized record retrieval for valid court approved purposes, while not mandating every person use an easily tracked identifying badge while traveling in public.
[ link to this | view in chronology ]
About that lawsuit against Utah...
Reading plates is more like listening, not like speech. Speech would be writing graffiti over the plates so they can't be read by red-light cameras.
I guess when your mind is made up, facts and logic are optional.
[ link to this | view in chronology ]
citizens stalking citizens
what these companies are doing sounds like stalking everyone.
what does it take to get a restraining order, to tell someone to stop following me.
would this at all apply to this scenario of them following me through their network of electronic cameras?
sounds like a stretch, but so does what they're doing.
[ link to this | view in chronology ]
Re: citizens stalking citizens
[ link to this | view in chronology ]
Re: Re: citizens stalking citizens
"It's always argued that what you do in public carries no expectation of privacy, but that statement is somewhat meaningless when you consider the number of plates ALPRs scan and store."
This is akin to the two of us in a park. If I am taking a picture, you have no expectation of privacy, not just because it is public, but also because you have the freedom to move away from me. A little different situation if I start following you though.
[ link to this | view in chronology ]
Plate Stalking
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Vigilant supports child molesters, rapists and kidnappers
Most people are creatures of habit, partly because of age but mostly because of location, employment, school, recreation, shopping and other routine travel. The license plate tracking data accumulated by Vigilant will of course reveal that. Even a cursory glance at a month's worth of data will show clearly-identifiable patterns of movement, helpfully timestamped.
When predators get their hands on this data (not "if", and anyone disagreeing with that is naive and stupid), they will find it one of the most useful tools they could possibly hope for. It will show them that little Johnny's parents don't arrive home until 5 PM, two hours after he gets home from junior high school. It will show them that Susie drives back to high school two nights a week for a special class. And so on.
Vigilant knows this. They know that the data they're collecting will be used to target children for horrible, brutal assaults. They have to: it's obvious on inspection.
But they don't care. They'll lie about it, like they've lied about other things, because they want to make a profit and they're willing to exploit the national paranoia (and DHS budget) in order to do it.
And when it slowly starts coming out, in trial transcripts that are painful to read, that Vigilant's data was used to plan rapes and murders of children, they will tell the lie that everyone in their position always uses: "Nobody could have foreseen..."
[ link to this | view in chronology ]
Re: Vigilant supports child molesters, rapists and kidnappers
[ link to this | view in chronology ]
Re: Re: Vigilant supports child molesters, rapists and kidnappers
Finally, I knew the "money as speech" thing would come back to bite us sooner or later. The question is, how soon can we get Citizens United overturned? It didn't do us any favors.
[ link to this | view in chronology ]
"They"
Max Wade was recently sentenced to life in prison for attempted murder, you can read a bunch about him on the web, he's easy to find. Check out, http://sanfrancisco.cbslocal.com/2014/01/31/lamborghini-thief-max-wade-may-be-linked-to-unsolved-tib uron-killing/
Also have a look at what municipalities in the San Francisco bay area, and California in general, are doing with license plate readers… https://www.aclu.org/blog/technology-and-liberty-national-security/use-automated-license-plate-reade rs-expanding-northern
Now consider that if the local thugs, er, uh, I mean police, were doing what they say they were doing with license plate readers how is it that "Mad" Max Wade was not caught driving Guy's stolen Lambo all over Northern California (stolen in 2011) before he tried to murder a girl's (he was trying to date her, and may not have even noticed she was in the SUV when he shot it up) date while dressed as a Biker-Ninja over a year later. The car either had its original plates, stolen ones, fake ones, or no plates on it while he drove it past hundreds of license plate readers for OVER A YEAR!
The surveillance state is being built to convict We The People of crimes with evidence collected even before anything occurs, and not as "they", and believe me we all know who they are, say to prevent crime or stop it during commission.
I may not have a realistic expectation of Privacy while I'm in public, however I do have an expectation of anonymity, and there is a big difference.
[ link to this | view in chronology ]
Re: "They"
The government is not putting all of this tracking into place to catch criminals. They are putting it into place to make it easier for them to target citizens they do not like or want to have a reason to pester harass or blackmail. Sure they will use it to catch criminals here and there, but that is not the true purpose.
My wife was in a hit and run. There was only minimal damage to the vehicle but she was able to get the plate of the runner. Guess what the police did? NOTHING! Had the person hit say... the mayor then it would have been a massive man hunt.
Remember everyone... you are nothing but serfs. The Police are not actually required to save your ass from anything! They only do their jobs at their leisure and/or when it benefits them.
[ link to this | view in chronology ]
[ link to this | view in chronology ]
"no expectation of privacy" is the LACK of privacy, not the OPPOSITE of privacy.
However it seems that "no expectation of privacy" has somehow morphed into the opposite of privacy, "you WILL be tracked, followed, eaves-dropped on, bugged, and collated into a database".
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Cribbing from the patent trolls' playbook are we?
...
The Texas company fired back, arguing that collecting license plate numbers is free speech.'
Talk about deja vu...
'If I want to send out extortion letters, that's my right, and it's a violation of my free speech to tell me to stop!'
Yes free speech is important, but it does have some limits, 'not breaking the law' being one of them, and while sometimes breaking the law when exercising free speech is justified(objecting to an unjust law for example), doing so purely for profit doesn't really cut it I'd say.
This actually seems to be kinda dicy, on the one hand, when dealing with free speech, it's always better to err on the side of more freedom, yet the idea of completely sidestepping a law designed to protect peoples' privacy by claiming the actions constitute 'free speech', and are therefor immune, would seem to open up a huge can of worms.
[ link to this | view in chronology ]
say what ?
i have said for a long time that i would never have a system like Onstar in any of my vehicles. but i cant get away from the black boxes that need a warrant to access (wink, wink) but what do we know ? when do they start hoovering it up and we get even more bad tickets ?
i get the reader thing, what i don't get is the retention of that data. my car is good, don't save the data. so simple.
[ link to this | view in chronology ]
Up yours, DHS
[ link to this | view in chronology ]
LPR Data
If your vehicle isn't up for repo or you or the car sought in connection with a crime the data then should be erased from the system. it's in fact not. there needs to be laws in place to protect the privacy or perceived privacy of all Americans.
[ link to this | view in chronology ]