The rise of smart video surveillance
With a fleet of over 12 million ANPR cameras in Europe, ethical issues are taking center stage. License plate recognition is a processing of personal data within the meaning of the GDPR.
Article 6 of the GDPR requires a clear legal basis: public interest mission, contract, or consent. Most cities use the legal basis "public interest" for traffic regulation.
Privacy by Design
- Irreversible hashing of the plate after the transaction.
- Partitioning of the bases so that the toll operator does not see the fine geolocation.
- Immutable access logs stored on private blockchain for auditing.
Audit and sanctions
In 2024, the CNIL imposed a €3 million fine on an operator who stored raw footage for 90 days without justification. Regulators are now strengthening cross-checks between retention periods and litigation procedures.
Conclusion
The LAPI will only survive if there is total transparency: information visible on the site, an online portal to exercise one's rights, and erasure guaranteed in practice.
English 
French