Iowa Advances Bill Regulating Automated License Plate Readers Amid Privacy Concerns

Iowa lawmakers are moving forward with legislation aimed at regulating the use of Automated License Plate Readers (ALPRs) by both state and local governments. House File 2161, which passed a House subcommittee on February 16, 2026, seeks to strike a balance between law enforcement’s need for investigative tools and the growing concerns surrounding individual privacy.

Balancing Public Safety and Privacy

The bill requires local authorities to enact ordinances authorizing the use of ALPR technology. It also places restrictions on data access, stipulating that officers cannot access data from the readers beyond 24 hours without obtaining a warrant. Law enforcement agencies will be required to maintain a detailed records log tracking their use of ALPRs.

Representative David Young (R-Van Meter), the bill’s sponsor, emphasized the dual goals of the legislation: “We wanted to make sure law enforcement has the tools that they need to do their job to keep our communities and families safe, and at the same time, place some guardrails to protect our privacy in what we are seeing more and more as just a surveillance society,” as reported by Iowa Public Radio.

Concerns Over Data Sharing and Third-Party Access

The American Civil Liberties Union (ACLU) of Iowa supports the bill, but continues to raise concerns about the storage and utilization of license plate data. Becca Eastwood, representing the ACLU of Iowa, highlighted the issue of municipalities licensing data to private, third-party vendors who then share it globally. “Municipalities are licensing Iowans’ data to private, third-party vendors that are sharing it around the world,” Eastwood stated. “What that means is that Iowans are losing control over their data in ways that are unnecessary to advancing public safety goals.”

Eastwood specifically referenced a Wired article detailing how Flock Safety, a company with ALPR cameras deployed in Iowa, shared data with workers in the Philippines for AI training purposes. Flock Safety has not disputed the report, but maintains it does not broadly share data internationally.

Data Retention for Private Operators

House File 2161 also addresses data retention practices for private ALPR operators. The Gazette reports that the bill mandates these operators to permanently delete all captured license plate images and associated data within 30 days. Law enforcement agencies are permitted to copy and retain data relevant to ongoing criminal investigations, adhering to existing evidence retention policies. Violations of the deletion requirement would be classified as a simple misdemeanor.

Exceptions and Further Considerations

The bill includes limited exceptions to the 24-hour access rule, allowing access in emergency situations such as Amber Alerts, human trafficking investigations, and cases involving lost or stolen vehicles. Noah Bazis, a legislative strategist with the Institute for Justice, noted that the bill represents “a considerable improvement over current state law.”

What are Automated License Plate Readers?

Automated license plate readers (ALPRs) are camera systems that automatically capture and analyze vehicle license plate information. These systems, available in both fixed and mobile formats, compare license plate numbers against databases to generate alerts and record vehicle activity, as outlined by the Congressional Research Service and the Department of Homeland Security. Advances in artificial intelligence have increased their affordability, and effectiveness.