California Court Activates ALPR Privacy Law, Exposing Retailers to Class Actions
A California appellate court in February 2026 ruled that operating automated license plate reader cameras without a publicly posted privacy policy violates state law, even without showing concrete harm. Retailers, hotels, and parking operators deploying ALPR systems across the US now face potential billion-dollar class action exposure under California's 2015 statute.
What happened
California's Automated License Plate Reader Privacy Act, enacted in 2015 and effective January 1, 2016, required operators of ALPR systems to implement and publicly post a usage and privacy policy meeting statutory requirements. In February 2026, the California Court of Appeal in Bartholomew v. Parking Concepts, Inc. ruled that operating ALPR cameras without implementing and publicly posting the required policy is an actionable violation standing alone, even without evidence of data misuse, breach, or concrete harm.
Retailers, hotels, shopping centers, and parking operators have deployed ALPR cameras across the country for security and parking management, with the largest ALPR networks capturing billions of license plate reads per month. Many operators have not implemented the required privacy policies.
Reported impact
The court's ruling exposes commercial operators to significant class action liability. Affected persons are entitled to $2,500 in statutory damages per violation, plus punitive damages, attorneys' fees, and injunctive relief, with no requirement to show concrete harm beyond violation of the individual's right to know.
A property with 500,000 annual visitors faces potential damages in the billions in a single year. The court's footnote left open the question whether a partially compliant policy could be actionable, expanding the risk for entities deploying ALPR systems.
Governance controls
California's Automated License Plate Reader Privacy Act establishes baseline requirements for ALPR operators, including mandating public posting of usage and privacy policies. The statute's remedial scheme permits class action litigation with statutory damages for violations.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.