How The Repo Industry Is Tracking You And Selling Data About You To, Well, Everyone

from the eye-spy dept

Recently, we’ve covered a series of stories centered around license plate scanners and the way such information is stored. Despite the protests of the ACLU, local law enforcement agencies have widely deployed the technology and there have also been requests from federal agencies to build a central database of information based on plate scans. If the latest reports are to be believed, however, these would simply be attempts to nationalize an endeavor that has already been undertaken by private industry.

According to the Boston Globe, the helpful groups building this database of license plate scans and providing it to banks, creditors, private investigators and law enforcement agencies are the repo industry and data brokers. And it’s far worse than you might think.

While public debate about the license reading technology has centered on how police should use it, business has eagerly adopted the $10,000 to $17,000 scanners with remarkably few limits. At least 10 repossession companies in Massachusetts say they mount the scanners on spotter cars or tow trucks, and Digital Recognition Network of Fort Worth, Texas, claims to collect plate scans of 40 percent of all US vehicles annually.

And that’s just one company. The article goes on to note that there are other groups in the data brokerage business that otherwise claim to collect a large majority of US vehicles every year. Those groups freely admit to providing those scan databases to a variety of third parties.

The main commercial use of license plate scanners ­remains the auto finance and auto repossession industries, two professions that work closely together to track down people who default on their loans. Digital Recognition lists Bank of America Corp., JPMorgan Chase & Co., HSBC Holdings, and Citibank among its clients, while MVTRAC boasts that it serves 70 percent of the auto finance industry.

Digital Recognition already provides its entire data pool to more than 3,000 law enforcement agencies nationwide, free of charge for most searches. The Massachusetts State Police is a registered subscriber, as are the Boston, Cambridge, Somerville, Brookline, and Quincy ­police departments. Even ­Boston College and Brandeis police have access to the firm’s entire scan database.

Now, in response to the privacy concerns raised by activists, what the data brokers and repo folks will tell you is that these scans typically occur in public places. That’s not always true, since the repo trucks often will enter private property, such as the parking lot of an apartment or condo complex, but their point is that there is no expectation of privacy in an area that’s in plain sight. They’ll also tell you that these are just license plate scans, not detailed personal information about anyone in particular.

But that’s bullshit, of course. It ignores the practical application of the scan database, as well as to whom that information is being sold. Banks, PIs, and creditors can all scrub this raw data against available DMV and governmental information, while law enforcement agencies both local and federal can build up a database that tracks the movement of any scanned vehicle and the citizens associated with it. If we could get Thomas Jefferson on the horn and ask him what he thought of all this, I’d argue that he’d be spending too much time picking his own jaw up off the floor to give us a proper response.

“Right now, it’s the wild West in terms of how companies can collect, process, and sell this kind of data,” says Kade Crockford of the American Civil Liberties Union of Massachusetts. “The best legal minds, best public policy thinkers, and ordinary people whose lives are affected need to sit down and think of meaningful ways we can regulate it.”

Which is exactly what some legislators in Massachusetts are attempting to do with legislation, but it isn’t the first time crafting this kind of law has been tried. All previous attempts have been torpedoed by the data broker industry, including one case in Utah, where Digital Recognition sued the state for its ban on plate scanners as a first amendment violation. That seems to stretch the definition a bit too far.

So, if you own a car, a private company that deals for free with law enforcement agencies knows who you are, where you’ve been, and where you spend most of your time. And, without additional legislation, they do so without the checks and balances that would be insisted upon were the LEOs doing the scanning themselves. This must be what they mean when they say that private industry will always outpace government.

Filed Under: , , , ,

Rate this comment as insightful
Rate this comment as funny
You have rated this comment as insightful
You have rated this comment as funny
Flag this comment as abusive/trolling/spam
You have flagged this comment
The first word has already been claimed
The last word has already been claimed
Insightful Lightbulb icon Funny Laughing icon Abusive/trolling/spam Flag icon Insightful badge Lightbulb icon Funny badge Laughing icon Comments icon

Comments on “How The Repo Industry Is Tracking You And Selling Data About You To, Well, Everyone”

Subscribe: RSS Leave a comment
15 Comments
Scote (profile) says:

How come TV shows have to blur license plates but these guys can collect and sell them?

So, how come TV shows have to blur plates but these guys can collect and sell them?

Of course, your cell phone company, and many apps, now exactly where you have been with much more accuracy, but with them they have the excuse of a contract (of adhesion, IMO) that purportedly allows them to track you. The license plate tracking companies might have that via the credit agreements of people with certain car loans, but with the rest of us? Not so much…

Paul Brinker (profile) says:

Not a troll I hope

But from where I see things, Free Speech trumps privacy in this case. There is nothing in the law that says I cant follow someone around and record what they are doing, nor is there nothing stopping me from telling someone else what person X did. (Other then stalking laws, but those don’t come into play here)

Repo guys are more or less doing this, they drive around and find out where each plate is that is viable from the street. They can then tell whom ever they like or even sell this information. The only chilling issue is the scale at which its done.

Keep in mind nothing stops you from putting a cover on your car when not in use. While removing plates might have some problems, you don’t need to make them accessible if you don’t want to.

The situation is troubling as a result of technology doing something that could not be done at scale in the past.

Anonymous Coward says:

i wonder, could this at some point be used to sue and eliminate license plates altogether? Right to privacy? I mean, when the founding fathers were around, there were no license plates required on buggys, or horses.

The other thing that will eventually play out in a court case, is the police use license plate data to track someone, get a warrant for a search of the property, find evidence. Then that persons lawyer would point out that a car going some place is not the same as a person going some place, evidence gets thrown out and some guy walks.

MedicalQuack (user link) says:

License and Excise Tax "ALL data sellers-need index

License and excise tax the data sellers for a good start as we need to know who they all are, banks, companies, you name it and require a federal site to where they list “what kind of data they sell and to who”..

We an index on all who sell data before any regulation can take place. I have been all over the FTC on this for about 2 years and without “us” having an index, we can’t regulate squat. So how’s that for a good start?

http://ducknetweb.blogspot.com/2013/08/ftc-tries-to-bring-strong-case-for.html

Watch this video created to exploit the data selling epidemic…”data dealer” a new game..

http://ducknetweb.blogspot.com/2013/12/senator-rockefeller-puts-data-sellers.html

Blue Bearr says:

Turnabout is fair play

What we need to do to counteract data collection like this is The People’s Data Collectors (TPDC) – a group who will undertake the task of collecting uncomfortable amounts of data on the officers of the companies that pull this crap. See how much they like it when their vehicles are tracked, their data collected and stored indefinitely, their privacy invaded. Perhaps then they will understand why people don’t appreciate their actions.

Add Your Comment

Your email address will not be published.

Have a Techdirt Account? Sign in now. Want one? Register here

Comment Options:

Make this the or (get credits or sign in to see balance) what's this?

What's this?

Techdirt community members with Techdirt Credits can spotlight a comment as either the "First Word" or "Last Word" on a particular comment thread. Credits can be purchased at the Techdirt Insider Shop »