HB 2332
In CommitteeHouse
Driver privacy
Concerning driver privacy protections.
This status may be delayed. See Action History below for the latest updates.
How does a bill become law?
- Introduced: The bill is filed and assigned a number.
- Committee: A subject-matter committee holds hearings, takes public testimony, and decides whether to advance the bill.
- Floor Vote: The full chamber (House or Senate) debates and votes on the bill.
- Opposite Chamber: The bill repeats the committee and floor vote process in the other chamber.
- Governor: The Governor reviews the bill and decides whether to sign or veto it.
- Signed: The bill has been signed into law.
AI Analysis
This bill establishes strict rules for how Washington state and local agencies can use automated license plate reader (ALPR) systems, limiting their use to specific law enforcement, parking, tolling, and traffic purposes while protecting individual privacy. It requires agencies to register systems, maintain detailed access logs, delete most data quickly, and prohibits certain uses like immigration enforcement or tracking constitutionally protected activity.
- Prohibits agencies from using automated license plate reader (ALPR) systems except for specific, authorized purposes—including law enforcement (e.g., matching against watch lists for stolen vehicles or missing persons), parking enforcement, tolling, and traffic studies.
- Bars use of ALPR systems for immigration enforcement, tracking protected health care activities, or monitoring constitutionally protected activities (e.g., speech or assembly).
- Requires strict data retention limits: most data must be deleted within 72 hours, with narrow exceptions (e.g., 12 hours for parking, 30 days for traffic studies, 4 hours for commercial vehicle enforcement).
- Mandates that agencies register ALPR systems with the attorney general, adopt policies consistent with model guidelines, and maintain a detailed audit trail of all system access and use for two years.
- Prohibits sharing or selling ALPR data except in limited circumstances (e.g., court-ordered), and bars use of ALPR data for public records requests—except for non-identifiable research.
Who is affected
- Law enforcement agencies — Law enforcement agencies (state and local) must register ALPR systems, adopt policies, maintain audit trails, and follow strict rules about when and how they use license plate data—especially limiting use to specific law enforcement or parking enforcement purposes.
- Parking and transportation agencies — Parking enforcement and transportation agencies can use ALPR systems only for limited, authorized purposes like enforcing parking time limits, tolling, or traffic studies—and must follow the same data retention and privacy rules as other agencies.
- General public / drivers — Residents may be impacted if their license plate is scanned; the bill restricts when and how that data can be used, shared, or retained, and gives them legal recourse if their rights are violated.
- ALPR technology vendors — Third-party vendors who provide ALPR services must implement technical safeguards to prevent unauthorized access or sharing, and must provide audit data to agencies for retention and auditing.
Pro/Con Analysis
Stronger case for benefits
Potential Benefits (5)
Explicit prohibitions on using ALPR for immigration enforcement, tracking protected health care (e.g., abortion, gender-affirming care), or monitoring constitutionally protected activity (e.g., protests, religious assembly) directly protect vulnerable populations from state surveillance and chilling effects on civic participation.
Rights & LibertiesPeopleRef: Sec. 3(3) & Sec. 3(4)Strict data retention limits (e.g., 72 hours for most data, 12 hours for parking) significantly reduce the risk of long-term surveillance, data aggregation, and function creep—protecting everyday drivers from being tracked over time and enabling forensic reconstruction of movements.
privacyPeopleRef: Sec. 4 (72-hour default retention + narrow exceptions)Criminal penalties for willful misuse and a private right of civil action empower individuals to seek redress when their privacy rights are violated—creating meaningful accountability where prior gaps allowed unchecked use of ALPRs without consequences.
Rights & LibertiesPeopleRef: Sec. 11 (gross misdemeanor penalties) & Sec. 12 (civil remedy)Mandating internal annual audits and public reporting (e.g., number of reads, matches, arrests) increases transparency and enables community oversight—reducing the risk of mission creep and ensuring agencies remain accountable to the public they serve.
Local GovernmentPeopleRef: Sec. 8(2)(a)(ii) & Sec. 9(2)Prohibiting direct access to ALPR systems by non-authorized entities (including federal immigration agencies) and requiring technical safeguards from vendors helps prevent unauthorized data sharing and protects against federal overreach—enhancing trust in local law enforcement and reducing fear of immigration enforcement among non-citizens.
Public SafetyPeopleRef: Sec. 5(1)(b) & Sec. 5(6)
Potential Concerns (4)
Prohibiting stops based solely on ALPR matches (i.e., requiring independent reasonable suspicion or visual confirmation) may delay or prevent apprehension of suspects in time-sensitive investigations (e.g., fleeing felons, stolen vehicles in active pursuit), especially where visual confirmation is impossible (e.g., high-speed chases, obscured plates).
Public SafetyPeopleRef: Sec. 3(2)(a)(ii)Short data retention windows (e.g., 12 hours for parking, 4 hours for commercial enforcement, 72 hours generally) may hinder post-incident investigations where delayed reporting or delayed discovery of a crime occurs—e.g., hit-and-run cases where victims take hours to report, or cold-case re-examination using ALPR data that could have been preserved.
Public SafetyPeopleRef: Sec. 4 (72-hour default retention limit)Mandating annual reporting, policy adoption, and registration with the attorney general imposes new administrative burdens on small local agencies (e.g., rural counties, small municipalities) that lack dedicated legal or IT staff to comply with evolving requirements—potentially diverting limited resources from frontline services.
Local GovernmentLean peopleRef: Sec. 5(5) & Sec. 8(2)(A)-(H)Applying the Consumer Protection Act to ALPR misuse exposes vendors and agencies to broad civil liability, potentially increasing insurance and legal costs—costs likely passed on to local governments and taxpayers, especially where vendors are for-profit entities with deep pockets but agencies absorb systemic risk.
Business & EmploymentLean peopleRef: Sec. 10 (Consumer Protection Act application)
Who Is Most Affected
Law enforcement agencies gain clearer legal boundaries and accountability mechanisms, reducing liability risk from overreach—but face new administrative burdens and operational constraints that may slow some investigations. Overall net positive due to reduced legal exposure and public trust gains.
Parking and transportation agencies retain core functions (e.g., parking enforcement, tolling, traffic studies) but must comply with strict data limits and reporting—increasing compliance costs for small agencies. Net neutral-to-slightly-negative due to disproportionate burden on small local entities.
General public benefits significantly from privacy protections, especially vulnerable groups (immigrants, reproductive health patients, protesters). Legal recourse and transparency provisions empower individuals—but most people will rarely if ever experience a violation directly. Net strongly positive.
ALPR vendors must implement stricter technical safeguards and provide audit data—but face reduced liability exposure due to clear statutory boundaries. Vendors with robust compliance infrastructure may gain contracts; others may face higher costs or exit the market. Net slightly negative due to increased operational complexity.