Home Depot and Lowe’s add plate readers

Retail surveillance is getting more visible — and more ordinary. Home Depot and Lowe’s are now using automated license plate readers at some store entrances, with signs and privacy notices saying the systems capture a car’s plate, time, and location to help with safety and theft investigations. That sounds narrow. But the real story is that a quick run for lumber can now feed data into a much bigger tracking system, and shoppers usually have no practical way to opt out. (nbcnewyork.com) ### What are these cameras actually doing? An automated license plate reader, or ALPR, is basically a camera plus software. It watches cars entering or leaving a lot, reads the plate number, and logs that with a timestamp, location, and often a vehicle image. Lowe’s says it uses ALPR at some stores and, where allowed by law, places the cameras near and around parking areas. Its privacy statement says the system captures images of vehicles and plates along with the date, time, and general location. (lowes.com) ### Why are Home Depot and Lowe’s doing this? The simple answer is theft. Home improvement stores are frequent targets for organized retail theft because they sell expensive tools, building materials, and easy-to-resell gear. The Connecticut TV report that pushed this story into the open pointed to a recent $1,732.82 Home Depot theft case in Montville and to a 13-person Home Depot theft ring busted in December that stretched across nine states, including Connecticut. For retailers, a plate number is a useful lead when someone loads up a cart and disappears. (nbcnewyork.com) ### So is this just store security? Not really — that’s the catch. The concern is not only that stores are collecting the data, but that the data can move. A 2025 report based on public-records requests said law enforcement could access Flock camera feeds tied to 173 Lowe’s locations around the U.S. and to dozens of Home Depot stores in Texas. Flock said private customers control their own sharing settings, which means the key question is not whether sharing is possible — it is who gets permission, under what rules, and with what oversight. (404media.co) ### Why does that matter so much? Because location data is sticky. One plate scan is trivial. A long trail of them starts to look like a map of your life — where you shop, when you work, who you visit, what routes you take. Privacy advocates have pushed Lowe’s to cut ties with Flock this year, arguing that ALPR systems can expose protesters, immigrants, abortion patients, and other vulnerable groups to tracking and misuse. That is why this feels bigger than shoplifting. (fastcompany.com) ### Aren’t there laws for this already? Some — but mostly for the government side. Connecticut’s 2026 ALPR bill lays out rules for public agencies and law enforcement, including limits on when agencies can operate ALPR systems and use ALPR data, starting October 1, 2026. But the TV report’s central point was that private retailers are not held to the same standards. Basically, the state is tightening rules for police use while stores still have more room to collect the data in the first place. (cga.ct.gov) ### What do the companies say about sharing? Lowe’s says it does not sell ALPR information and shares it only with its service provider and the National Center for Missing and Exploited Children, unless law or legal process requires disclosure. Home Depot’s privacy language is broader and says it does not sell or share information to a third party, while also disclosing that it collects video, audio, biometric, and location-related information in stores. Neither company’s public-facing language, at least in the material surfaced here, gives shoppers a very clear plain-English map of how plate-reader data flows in practice. (nbcnewyork.com) ### What changes for shoppers now? Mostly, the baseline expectation. A retail parking lot used to feel like a semi-anonymous space. Now it increasingly works like a checkpoint with a memory. You may never notice the pole-mounted camera, and you may never be accused of anything, but your visit can still become a searchable record. That shift — from “security camera” to “vehicle tracking system” — is the part worth paying attention to. (nbcnewyork.com) ### Bottom line This is not just a story about two hardware chains fighting theft. It is a story about private businesses normalizing surveillance infrastructure that can outlive the original reason it was installed. Once the cameras are up, the hard part is not capturing data. It is limiting what happens next. (nbcnewyork.com)