The San Francisco Police Department (SFPD) has revealed that its license plate reader (LPR) database has been accessed without proper authorization by various federal and out-of-state agencies. According to officials, this breach involved both government entities lacking jurisdiction and those who did not obtain the necessary permissions for data use. The incident raises significant privacy concerns, especially over the transparency of data sharing practices and safeguards meant to protect residents’ information.

In response, the SFPD has initiated an internal investigation to trace the extent of unauthorized access and evaluate the protocols that allowed these vulnerabilities. So far, affected agencies reportedly used the data for purposes beyond the original scope of local law enforcement, including:

  • Federal immigration enforcement
  • Out-of-state criminal investigations
  • Traffic violation tracking without local warrants
Agency Type Access Status Action Taken
Federal Immigration Unauthorized Access Revoked
Out-of-State Police Unauthorized Under Investigation
Local SF Units Authorized Normal Use