> It's not as if these things happen suddenly, either. There's months of effort by the lender to try to get you back on track. Repossession comes with risk, and it always comes with a fee. No one is eager to do this.

Not quite true. Buy here pay here dealerships and similar are absolutely eager to do this, and will go out of their way to make it onerous to pay what is owed, so they can sell the same 5 year old Kia for $15K multiple times over.

They also tend to just put a GPS tracker in the car, which seems far more onerous than a repossession agent with an ALPR database at hand.

There's currently months of effort, in part because of the labor constraints. Its not worth paying a guy with a tow truck to go looking for a car that might not even be there. ALPRs exist to lower that cost of labor, potentially to the point that the lender can still make money sending out the repo guy much sooner than 90 days.

I'm not even upset about that. Hell, it might be a net good, I dunno.

The thing that I'm concerned about is that there is no guarantee (or even guard rail, really) against selling that data to a law enforcement organization that would otherwise have to undergo judicial scrutiny to get that data. What happens when some hacker gets a hold of their license plate database and uses it for an actual stalking operation? Or who knows what else?

ALPRs tell you where a plate is. It doesn't tell you who owns the plate. You'd have to know that already. I'm not sure just having the database grants you the ability to stalk, other than at completely random strangers. If you can stalk someone to the point of getting their plate, you can just stick an airtag on their car.