Editorial correction — September 20, 2026. Removed unsupported national adoption and scan-volume estimates and the claim that all license-plate data are retained indefinitely. Reframed the analysis around a documented privacy case.
A camera can be sold as protection while creating another place where someone must protect your information. The important question begins after the recording is made.
A documented example
The FTC’s 2023 Ring case alleged excessive employee and contractor access to customer videos and failures in basic privacy and security protections. Its case record includes the complaint and June 2023 stipulated order, followed by information about refunds in 2024. Read the allegations, order, and timeline.
That record concerns particular practices and periods. It should not be presented as proof that every camera provider currently behaves the same way. Nor does it establish national workplace-monitoring rates or universal retention periods for license-plate readers. Those unsupported claims from the earlier article have been withdrawn.
Consent to a device is not an answer to every use
A person may reasonably want to know who is at the door. That decision does not settle who should access footage, how long it should remain available, or whether it should be used for another purpose. Treating all of those questions as one initial purchase decision makes accountability too easy to evade.
The same reasoning applies when an institution proposes surveillance. A stated purpose should be specific enough to evaluate. Collecting information because it might someday be useful is not the same as showing why a particular collection is necessary.
A recording’s accountability trail
For any system under review, write down what it collects, where it is stored, who can retrieve it, when access is logged, and when deletion occurs. Check the actual policy and controls rather than relying on a broad promise of security. If a public body operates the system, look for the adopted policy and responsible office.
Our concern is the gap between a reassuring purpose and the power created by a stored record. Privacy is not protected merely because a device was purchased willingly. The people handling the resulting information still owe an account of what they do with it.