Hacktakes · Edition 8
Hacktakes · Edition 8 · July 20, 2026

Data as a Toxic Asset: The Texas ALPR Case

Law enforcement bypasses the Fourth Amendment by purchasing commercial location data, weaponizing the toxic byproduct of a corporate market failure.

By Victor Hale

Sparked by We want Texans to know their rights · discussion

The Constitution says I can't look through your window, but it says nothing about subscribing to his premium feed.
The Constitution says I can't look through your window, but it says nothing about subscribing to his premium feed.

A camera mounted on a telephone pole in El Paso logs a silver Honda Civic heading west on Interstate 10. A week later, another camera logs the exact same car returning across the state line. Last week, reports surfaced that Texas law enforcement is using automated license plate readers to track vehicles leaving the state for abortion access. While the ensuing media frenzy paints this as a bespoke, dystopian surveillance grid engineered specifically to hunt down women, that political framing completely ignores the mundane infrastructure failure actually driving the crisis. The reality of this tracking is far more cynical: state agencies simply opened their wallets and leased a commercial surveillance network that already surrounds us all.

To understand why our privacy is collapsing so rapidly, we have to look away from software algorithms and examine the mid-century chemical industry. When a manufacturing plant in the 1960s produced industrial solvents, it generated hundreds of barrels of hazardous sludge as a natural byproduct. The factory owners rarely dumped that toxic waste into the local river out of ideological malice. They did it because properly treating and securing hazardous waste was highly expensive, while treating the local river as a free garbage disposal maximized their margins. The plant managers simply shifted the catastrophic environmental and health risks entirely onto the public. We eventually recognized this as a massive market failure and invented environmental regulations to force companies to internalize those cleanup costs.

Today's commercial data brokers operate under the exact same economic model, but entirely without the regulatory guardrails. Ambient location data is the toxic byproduct of the modern surveillance economy. Technology vendors generate, collect, and store infinite logs of our physical movements because doing so is incredibly profitable for them in the short term, while the downstream security risks are offloaded onto society. When the data inevitably leaks or is abused, the corporation pays a negligible fine while citizens suffer the actual harm.

Consider the operational realities of how these highway and intersection cameras are actually deployed. ALPRs—automated license plate readers—are essentially just cheap digital cameras paired with basic software that instantly reads and logs every passing alphanumeric plate. The vast majority of these devices are not owned by the government. As the ACLU has documented, private vendors like Flock Safety are busy constructing a vast, privately owned national surveillance network.

We love to imagine a shadowy government cabal designing a centralized system to hunt down political dissidents, a classic movie-plot threat that gives the media an easy villain. The reality is nothing but a lucrative corporate subscription model. Vendors sell their hardware to homeowners associations, suburban shopping malls, and local police departments with a marketing pitch about deterring property crime and catching retail shoplifters. Because cloud data storage is now virtually free, the cameras just record everything by default. Every car, every daily commute, every trip to a medical clinic, every late-night visit to a lawyer's office.

The vendors stockpile this volatile data in centralized repositories because possessing a massive, searchable archive of historical movement makes their platform infinitely more valuable to future buyers. Corporate executives do not care about the politics of reproductive rights. Their only objective is hitting quarterly revenue targets and locking in recurring municipal contracts. But a massive pool of toxic data sitting unguarded on a corporate server will inevitably find a buyer. Always.

State governments understand the legal physics of this arrangement perfectly. If a governor or a police chief tried to use taxpayer money to build a domestic dragnet of 83,000 cameras to track ordinary citizens without probable cause, the courts would instantly strike it down as a blatant Fourth Amendment violation. So the government waits for private enterprise to manufacture the toxic asset, and then law enforcement signs a commercial licensing agreement to access the database.

Police departments are intentionally outsourcing their constitutional violations to commercial vendors. They rely entirely on the third-party doctrine loophole. Originally designed in the 1970s for basic telephone billing records, this legal framework dictates that because you drove your car on a public road near a privately owned camera, you voluntarily surrendered your expectation of privacy to that corporation. By purchasing the data instead of collecting it themselves, the state bypasses the warrant process entirely. They turn a constitutional prohibition into a simple line item in the municipal budget.

This is a textbook market failure. Law enforcement has no need to hack our phones or deploy sophisticated zero-day exploits to trace reproductive healthcare choices. Exploiting a highly rational market incentive—where corporations profit by degrading civil liberties—is infinitely cheaper and entirely legal. As long as the toxic asset exists, someone will weaponize it to bypass the Constitution.

We cannot solve this crisis by demanding better corporate security policies. We cannot solve it by auditing police databases. We cannot solve it by asking private vendors to pinky-swear that they will behave ethically. The economic incentives to hoard and sell our location data are simply too massive to ignore. The only way to protect our constitutional rights is through comprehensive federal regulation that bans the ambient commercial collection of location data outright. You don't try to secure a toxic asset. You stop producing it.

← Back to Edition 8