Home Depot Put License Plate Readers in All 233 California Stores

A class action alleges the retailer partnered with Flock Safety to build a surveillance dragnet across its parking lots, capturing plates, vehicle details, and timestamps for a network accessed by ATF, ICE, and the Air Force.

State of Surveillance Editorial Team

Empty commercial parking lot with overhead lighting at dusk
Photo via Unsplash

TL;DR: Five California residents filed a class action against Home Depot on April 2, 2026, alleging the retailer installed Flock Safety ALPR cameras across all 233 California stores without proper notice. The cameras capture license plates, vehicle make and model, color, distinguishing features, timestamps, and GPS coordinates, all fed into Flock's centralized database. Despite Home Depot's public claim that it "doesn't share license plate data with federal law enforcement," the complaint alleges ATF, ICE, and Air Force installations can access the data. The EFF previously found that 50+ agencies ran hundreds of searches tied to First Amendment protest activity through Flock's network. Plaintiffs want $2,500 per person in statutory damages, data deletion, and independent audits.

You Went to Buy Lumber. They Scanned Your Plate.

Every time you pull into a Home Depot parking lot in California, a camera reads your license plate. It logs your vehicle's make, model, and color. It notes distinguishing features: bumper stickers, damage, aftermarket parts. It timestamps the scan and tags it with GPS coordinates. Then it sends everything to a centralized database operated by Flock Safety [1].

This has been happening at all 233 California Home Depot locations. No signs at the entrance. No opt-out. No mention in the company's privacy policy that meets California's legal requirements [1].

On April 2, 2026, five shoppers filed Schmierer, et al. v. Home Depot U.S.A., Inc. (Case No. 26CV01845) in Sacramento County Superior Court [1]. The lawsuit doesn't just allege that Home Depot collected the data. It alleges the company handed it to federal law enforcement, the same agencies that have used Flock's network to track immigrants, monitor protesters, and conduct warrantless surveillance across the country.

Home Depot Says It Doesn't Share. The Evidence Says Otherwise.

Home Depot has publicly stated it "doesn't share license plate data with federal law enforcement." The complaint says that's not true [1].

According to the lawsuit, agencies including the Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF), Immigration and Customs Enforcement (ICE), and Air Force installations have access to the plate data collected at Home Depot stores [1].

This isn't speculation. In August 2025, 404 Media reported that the Electronic Frontier Foundation obtained records from the Johnson County, Texas sheriff's office confirming law enforcement could access Flock cameras at dozens of Home Depot stores [2]. KPBS confirmed in November 2025 that San Diego County police access Home Depot cameras too [1].

"Two of the country's most popular home improvement stores are contributing to the massive surveillance dragnet coordinated by Flock Safety," said Dave Maass, the EFF's director of investigations [2].

Flock Safety: 20 Billion Scans a Month

Home Depot didn't build this system alone. Flock Safety, the $7.5 billion surveillance company that has wormed its way into 6,000+ municipalities, built and operates the cameras [1].

Flock's network now processes more than 20 billion license plate reads per month [3]. That's not targeted law enforcement. That's a comprehensive movement database covering a significant chunk of American driving, built from cameras mounted on public light poles, in shopping center parking lots, and (as this lawsuit reveals) in the parking lots of the country's largest home improvement chain.

Private-company cameras like Home Depot's operate in a gray zone. Government-run ALPRs at least have some public accountability. Private ones feed into the same Flock network but with fewer restrictions on who can search them and how the data gets shared [2].

The Protest Surveillance Problem

Here's where it gets ugly. An EFF analysis of 12 million Flock search records found that more than 50 agencies ran hundreds of searches connected to First Amendment protest activity [2]. Plate reads from parking lots (including retail stores) can show who attended a rally, a march, or a political meeting.

Home Depot stores are everywhere. There are 2,300+ locations across the country. If the California surveillance model is replicated nationwide (and the Johnson County records suggest it already extends to Texas), then Flock cameras at Home Depot create a passive surveillance grid covering vast stretches of suburban America.

You don't have to be a suspect. You just have to park.

What California Law Actually Requires

California's Automated License Plate Recognition Privacy Act (SB 210) sets specific rules for anyone operating ALPR cameras. The complaint alleges Home Depot's privacy policy fails on at least three counts [1]:

  • No custodian named. The law requires identifying a responsible person for the ALPR system. Home Depot's policy doesn't name one.
  • No retention period defined. How long do they keep your plate data? The policy doesn't say.
  • No restrictions on federal access. There are no limitations on sharing with federal, out-of-state, or immigration enforcement agencies.

The lawsuit brings seven legal claims: ALPR Privacy Act violations, invasion of privacy under the California Constitution, intrusion upon seclusion, Unfair Competition Law violations, negligence, and CCPA/CPRA violations [1].

Investors Are Asking Questions Too

It's not just shoppers who are concerned. In January 2026, an investor group requested that Home Depot review its data-sharing practices with law enforcement [4]. The investor pressure adds a financial dimension: if the class action succeeds, statutory damages of $2,500 per affected person across 233 stores could add up fast.

Home Depot hasn't responded publicly to the lawsuit. The company's statement that it doesn't share data with federal law enforcement remains its only public position, a position the complaint directly contradicts.

It's Not Just Home Depot

Lowe's has the same problem. The 404 Media investigation found 173 Lowe's locations nationwide with accessible Flock cameras [2]. The Home Depot lawsuit may be first, but it's unlikely to be last.

Retail ALPR is the next frontier of the surveillance debate. Cities have spent years fighting over whether police should have plate readers. Now the cameras aren't on cop cars or highway overpasses. They're in the parking lots where you buy paint and plywood. Built by a private company. Operated outside public oversight. Shared with agencies that include immigration enforcement.

The cameras don't care if you're buying mulch. They log your plate either way.

What You Can Do

  • Check if your state has ALPR laws. California's SB 210 is one of the strongest. Most states have nothing.
  • File a CCPA data deletion request. California residents can request Home Depot delete their personal data, which should include ALPR records.
  • Watch the lawsuit. Schmierer v. Home Depot (Case No. 26CV01845, Sacramento County Superior Court) is in early stages. No settlement exists yet.
  • Contact your state representative. If your state doesn't regulate private ALPR use, it should. The city-level backlash against Flock cameras shows communities want a say.
  • Ask your retailers. Home Depot and Lowe's aren't the only stores with parking lot cameras feeding into surveillance networks. Ask before you shop.

Sources

  1. ClaimDepot: Class action alleges Home Depot illegally shared California license plate data with federal agencies (April 2026)
  2. 404 Media: Home Depot and Lowe's Share Data From Hundreds of AI Cameras With Cops (August 6, 2025)
  3. EFF: Open Records Laws Reveal ALPRs' Sprawling Surveillance (April 30, 2026)
  4. CFO Brew: Home Depot investor group requests review of data-sharing with law enforcement (January 20, 2026)

Published: May 7, 2026