You leave home at 7:43 AM. The ANPR camera at the junction reads your plate. You stop at the hospital for a routine test — another camera at the entrance gate logs you in and out. You drive past a religious site on the way back. A traffic enforcement camera at the intersection captures the plate. You pull into the mall parking structure in the evening. The parking operator’s camera logs your entry time.
By the end of an ordinary Thursday, five separate systems have recorded where your vehicle was, at what time, and for how long. None of this required you to do anything wrong. None of it required a warrant.
What ANPR systems actually do
Automatic Number Plate Recognition works the same way everywhere. It is called ANPR in India and the UK, and License Plate Reader or LPR in the US. A camera photographs passing vehicles. Software reads the plate number from the image. The system logs the plate number, the timestamp, and the GPS coordinates of the camera. The record is stored.
That’s it. There is no threshold of suspicion required. Your vehicle doesn’t need to be flagged, wanted, or even unusual. Every vehicle that passes gets logged. The data sits in a database, searchable and — depending on the operator — shareable.
The US market: what commercial ANPR looks like at scale
The US context is worth understanding because it shows where commercial ANPR can go when it’s left to grow without meaningful regulation.
Motorola Solutions acquired Vigilant Solutions in 2019. Vigilant operates LEARN, the Law Enforcement Archival and Reporting Network. It is a commercial database of license plate scans that, by various reports, has piled up billions of records. Law enforcement agencies subscribe to query it. The data comes from police-operated cameras. It also comes from commercial sources: repo companies, parking operators, and private ANPR networks that scan plates as a side effect of their core business.
Flock Safety sells ANPR cameras to homeowners’ associations, apartment complexes, and businesses. The footage feeds into a shared database that law enforcement can query without a warrant, because private parties collected it. Flock calls this a network of “community cameras.” What it builds is a surveillance system that skips the constitutional limits that would apply if police deployed the same cameras themselves. Private collection. Commercial pooling. Law enforcement access. No warrant. No notification.
India’s ANPR deployment
India’s ANPR infrastructure is younger but growing quickly, and it’s embedded in official systems in ways that make it structurally harder to contest.
Traffic enforcement ANPR cameras operate at major intersections in Delhi, Mumbai, Bengaluru, Chennai, and other large cities. They are used for red light violations, speed enforcement, and stolen vehicle detection. The enforcement use case is legitimate. The data retention policy — how long records of innocent vehicles are kept, who can access them, and whether they can be shared — is not publicly documented in any consistent way.
The Vaahan database, maintained by the Ministry of Road Transport and Highways, is India’s central vehicle registry. Every plate number links to an owner’s name, address, and vehicle history. When an ANPR camera captures a plate, a Vaahan lookup converts it into a person. The camera reads a plate; the database reads a life.
Delhi Police’s CCTNS — the Crime and Criminal Tracking Network and Systems — links to ANPR data for vehicle-based investigations. The concern is scope. CCTNS was designed for criminal case tracking. But the ANPR data it draws on covers every vehicle that passed a camera, not just vehicles linked to crimes.
Bengaluru and Hyderabad police have publicly confirmed ANPR deployment for traffic management and investigation. Some cities have integrated ANPR feeds into Smart City Integrated Command and Control Centres. The command center framing sounds managerial. It is also a persistent, queryable record of urban movement.
What a license plate history actually reveals
A single scan tells you little. A history tells you almost everything.
A record showing your vehicle visited a specific hospital three times in two months says something medical. Visits to a religious site say something about faith. A legal aid office, a political party headquarters, a protest location, a psychiatric clinic — all of these are inferences waiting to be drawn from a stack of timestamped records.
This is the argument the US Supreme Court addressed in Carpenter v. United States in 2018. The court held that historical cell-site location data constitutes a detailed chronicle of a person’s physical presence and that accessing it requires a warrant. Chief Justice Roberts wrote that the data “provides an intimate window into a person’s life, revealing not only his particular movements, but through them his familial, political, professional, religious, and sexual associations.”
Plate reader data is a direct analogue. It hasn’t received equivalent legal protection anywhere, including in India.
The difference between a one-time location check and a historical record is the difference between knowing where someone is and knowing who they are. Aggregated over months, a movement profile is more revealing than a wiretap. It is one more feed into the broader location tracking picture that phones, apps, and cameras build together.
The commercial angle
In the US, commercial ANPR data is bought and sold. Debt collectors use it to find vehicles for repossession. Insurance companies use it to check driving patterns. Private investigators query commercial ANPR databases routinely. No warrant is required, because private parties collected the data.
In India, commercial ANPR is still young. Parking operators at major malls and airports are installing ANPR to manage entry and exit, which is a legitimate use. Whether that data is kept beyond the operational need, or shared with third parties, is not publicly documented. The US path suggests asking that question now, before the market grows.
The legal position in India
No specific law governs ANPR data retention or sharing in India. Police ANPR operates under departmental standing orders — documents that are rarely public and contain no mandatory purge timelines for records of innocent vehicles.
The Digital Personal Data Protection Act 2023 would in principle apply to vehicle data linked to a person. And through Vaahan, plate data is almost always linkable. But the Act carries broad, loosely bounded exemptions for law enforcement. In practice, police ANPR data sits outside any meaningful accountability framework.
The absence of rules is not neutrality. It defaults to retention, accumulation, and access without oversight.
What you can do
The options are limited, and it’s worth being honest about that.
Anti-surveillance measures — plate covers, infrared LED arrays — are illegal under Indian motor vehicle regulations. Don’t use them.
When traveling somewhere sensitive, public transit creates a less centralized data trail than driving. Bus and metro journey data is fragmented across operators rather than aggregated into a single vehicle-linked record. Meaningful difference, not a complete solution.
RTI requests are underused. File a Right to Information request with your city’s traffic police or smart city authority asking about ANPR retention policies, data sharing agreements, and access logs. You may not get a complete answer. You will create a paper trail.
Keep your vehicle registration address current in Vaahan. Inaccurate records cause problems during enforcement stops — unrelated to surveillance, but worth fixing.
Advocate for retention limits. Time-limited deletion for records of vehicles not linked to any investigation is the policy change that actually matters. That requires engagement with DPDPA implementation consultations and state traffic authority rule-making. Slow work. The only work that fixes the problem structurally.
What you can do right now
Want to see what data brokers expose about you? See what a scan finds → shows an example report: the kinds of sites that list your name, phone, and address. Once KnytX Shield launches it will find and remove these automatically. Join the waitlist to get in early.