The DEA wants to capture the license plates of all vehicles traveling along Interstate 15 in Utah, and store that data for two years at their facility in Northern Virginia. And, as a DEA official told Utah legislators at a hearing this week (attended by ACLU of Utah staff and covered in local media), these scanners are already in place on “drug trafficking corridors” in California and Texas and are being considered for Arizona as well. The agency is also collecting plate data from unspecified other sources and sharing it with over ten thousand law enforcement agencies around the nation.
We know that automated license plate scanning (ALPR) technology is rapidly being deployed by local police around the country. However, its use by a federal agency raises new issues and questions. To begin with, the federal government is in more of a position to create a centralized repository of drivers’ movements, so federal deployment of the technology is even more serious a matter than widespread local deployment.
In addition, a federal agency is required by law (the Privacy Act of 1974) to disclose to the American people how it is collecting, using, and sharing data about them. However, we were not able to find a Privacy Act notice anywhere in the Federal Register in which the DEA describes any collection of license plate data. (The two recent DEA Privacy Act notices we found do not mention the practice.)
The DEA official claimed to the Utah legislators that “we’re not trying to capture any personal information—all that this captures is the tag, regardless of who the driver is.” The idea that a license plate number is not personally identifiable information is laughable. It is true that different people can drive one vehicle, but they are usually closely related to the registered owner and their identities are rarely difficult to ascertain after the fact.