Virginia passed a law in 2025 to regulate the use of automated license plate readers (ALPRs) by law enforcement, including data deletion after 21 days and restrictions on data sharing. However, a survey revealed widespread non-compliance, with many agencies retaining data longer, sharing it improperly, or lacking policies altogether. This raises serious concerns about privacy and accountability in mass surveillance.