The Machine Needs No Reason

There are two ways to erase the reason behind a search. Case 49 found the first: build a system that records that a query happened but never why, so a stalking look and a lawful one leave the same trace. This case is the second, and it is cleaner. Do not record the reason badly. Remove the decision that would have a reason. A licence-plate reader does not wait for an officer to suspect a car and run it; it photographs and checks every plate it passes, thousands an hour, and it never needs a reason because, in law, reading a plate is not a search at all. Case 49’s remedy was to require a reason at the moment of each query. Automation answers by deleting the moment.

§01 · Why a plate read needs no cause

Start with the law, because the law is what makes this lawful, and most people get it wrong. Running a plate is not a search under the Charter. A licence plate is displayed in public by legal requirement, so a person has little or no reasonable expectation of privacy in it, and the basic registration tied to it is treated the same way. Lawyers call it the plain-view rule: a thing already on open display is not searched when an officer looks at it.legal That is why an officer can run the plate of the car beside him at a red light with no suspicion of anything, and why the question you might expect, where is the probable cause, never arises. There is no search to justify.

The power to stop a car is broader still: Canadian courts have upheld even arbitrary traffic stops under highway-safety law. But a plate reader does not need a stop. It does not interact with the driver at all. It simply looks, and looking at a public plate is, by settled law, free. Hold that fact, because the whole case turns on it: the act at the centre of this machine is the one act the law has decided is not regulated.

§02 · Every plate, no reason

Now automate the free act and scale it. Automated Licence Plate Recognition, ALPR, is a camera and a computer that reads every plate in view, dozens per second, and checks each against a hot list: stolen vehicles, suspended or prohibited drivers, wanted persons, AMBER alerts. No officer chooses which cars to read. The system reads all of them, and the ones that do not match anything are, by definition, innocent drivers who were checked for no reason because the machine has no concept of a reason.

This is not a pilot or a fringe tool. ALPR is in use by police across Ontario, British Columbia, Alberta, Saskatchewan, Quebec, Nova Scotia and Prince Edward Island, and the Toronto Police Service’s entire patrol fleet is now equipped with it.verified Where Case 49 described a human who could choose to run a query without a need-to-know, ALPR removes the choice entirely. The per-plate reason is not skipped, not unrecorded, not lied about. There is no per-plate decision at all. That is the sense in which the machine needs no reason: it is built so that a reason was never one of its inputs.

Case 49 found a query with no reason recorded. This is a million queries an hour with no reason to record, because no one decided to make any of them.

§03 · The honest line: where the reason does live

Here the case has to be scrupulous, because the easy version is wrong and the precise version is stronger. It is not true that ALPR has no reason requirement anywhere. The Toronto Police Service states that its stored plate reads can only be searched by specifically trained members, and that every search of the stored data requires a valid search reason or case number.verified That is exactly Case 49’s remedy, implemented. So the system does demand a pedigree, but for the wrong act. It governs the re-search of what was captured, and not the capture itself.

Lay the layers side by side and the gap becomes visible in one frame. The reason requirement that Case 49 fought for is present at the second layer and absent at the first, and the first is where everyone’s movements are actually collected.

So the reason-less act is not hiding. It sits, in plain sight, in the one column the law labels not a search. The fix exists, one layer too late to govern the thing that scans you.

§04 · Where the law pushes back

If the law does not reach the reading, it does reach the keeping, and that is where the real fights have happened. In 2012 the British Columbia Information and Privacy Commissioner investigated Victoria police ALPR and drew a clean line: police may check a plate against a hot list, but they may not bank the non-hit data, the time and place of innocent drivers who matched nothing, for some hypothetical future use. The RCMP redesigned the system so non-hit reads are discarded before upload and each vehicle loads a fresh hot list at the start of a shift.verified

Ontario’s Information and Privacy Commissioner has gone the same direction, publishing guidance on ALPR for police services, engaging the Toronto Police in a review of those guidelines in 2024, and warning that the technology risks failures to comply with privacy law and intrusions on other fundamental rights. And the retention numbers are the thing to watch: Toronto keeps its plate reads for seven days, but its ALPR audit logs, the record of which member searched what, are currently kept indefinitely.verified Notice the shape of every one of these interventions. None of them touches the reading. They are all about what is stored, for how long, and who may later search it. The regulators have, in effect, conceded the collection and fought a holding action over the warehouse.

§05 · One read is nothing, a year of reads is you

Why does the warehouse matter, if each read was lawful and trivial? Because a thing can be harmless one at a time and revealing in bulk, and Canadian law already knows it. A single plate read is, on its own, the generic fact that a car was at a corner. A year of reads is a map of where you worship, which clinic you visit, whose house you park outside overnight, which protest you drove to. The Supreme Court, in R. v. Spencer, rejected the argument that basic identifying data is merely “generic,” holding that information which can reveal “intimate details of the lifestyle and personal choices of the individual” attracts a real expectation of privacy, and naming privacy-as-anonymity as part of what the Charter protects.legal

That is the frontier, and the case states it as a frontier, not as settled law. Canada has not adopted the American “mosaic” rule, under which enough lawful observations add up to a search requiring a warrant (the United States reached it in its own cases about cell-site location). But Spencer’s logic and every retention finding above point the same way: the per-read rule that makes ALPR free was written for one read, and it is being used to license a permanent, searchable record of a population’s movements. The law that says “a plate is in plain view” was never asked whether a database of every plate, everywhere, for years, is in plain view too.

Counter: this is speculation about aggregation, when today each read is plainly lawful. Each read is lawful, granted, and the case says so. The point is that the lawfulness was decided at the wrong scale, and the rules now holding back the warehouse are guidance and commissioner findings, not a constitutional floor.

§06 · The ratchet: from the cruiser to the corner

None of this is shrinking. Toronto went from some cars to its whole fleet; the chiefs’ association has formally pushed for wider ALPR adoption; and scholars in 2024 documented how widely, and how unevenly governed, the technology already is across Canadian policing. So far this is mostly mobile ALPR, a camera on a moving cruiser, which at least only sees what a patrol route happens to pass.

The escalation visible on the horizon is the move from the cruiser to the corner: fixed, networked plate cameras mounted at intersections and on poles, watching one place continuously and pooling their reads into a shared, searchable map. That model is already large in the United States, where a single vendor’s solar-powered cameras serve thousands of police departments.reference Mobile ALPR records where a cruiser went. Fixed ALPR records where you went, whether or not any cruiser was ever near you. The reason-less reading does not change; what changes is that it stops being tied to an officer’s presence and becomes a property of the street itself.

And that same vendor’s own marketing shows the reading has already outgrown the legal premise it rests on. The capability it calls a “vehicle fingerprint” captures not just the plate but the make, model and colour of a car and its distinguishing features, bumper stickers, roof racks, decals, dents, aftermarket wheels, so that, in the company’s own words, a vehicle can be found with no plate required.reference Two things follow. First, the plain-view rule that makes this lawful was written for a plate, a public registration tag; a descriptive profile that can track a car with its plate covered or removed is not the same act, and the legal cover is sized to the smaller one. Second, a plate is content-neutral, but a bumper sticker is speech: who you vote for, your union, your faith, your cause. A system that catalogues and lets police search by sticker is reading belief and association off the back of the car, a different order of intrusion than reading a number. The machine that needs no reason is becoming, in plain sight, a machine that reads far more than the plate.

§07 · The strongest case for the other side

The case must survive its best reply. ALPR works: it recovers stolen vehicles, pulls suspended and prohibited drivers off the road, and speeds the response to AMBER alerts and missing-person files, all genuine public-safety goods, and the per-read intrusion really is minimal. The better Canadian deployments have guardrails: Toronto gates the back-end search behind a reason and a case number, British Columbia discards non-hits, and the privacy commissioners are actively writing rules. None of this is lawless, and a reader who wants stolen cars found should not pretend the tool has no value.

All of it stands, and the case concedes all of it. The narrower claim is the one that survives: that automation has placed the actual collection of everyone’s movements into the single layer the law calls not a search, so the only protections left are downstream, over storage and re-search, and those protections are guidance and commissioner findings rather than a constitutional floor. A reader who supports ALPR for stolen cars and one who fears a driving-history dragnet should both want the retention and aggregation rules argued out loud, before the cameras move from the cruiser to the corner.

Counter: “a useful tool with guardrails” and “a reason-less dragnet the constitution does not reach” can both be true of the same system. They can, which is exactly why the line should be drawn in public, at the layer that does the watching, and not left to settle case by case after the warehouse is already built.

§08 · The machine, named

Strip it to the structure. Case 49 showed a system that kept the protocol and dropped the pedigree, recording a query but not its reason, so misuse and use looked the same. This case shows the next move, which is more total and harder to see: do not drop the reason, delete the decision that would carry one. Automate the one act the law has ruled is not a search, and the per-access justification has nothing left to attach to, because there is no discrete access, only a continuous reading. The need-to-know is not lost in the noise, as in Case 49. It is engineered out of the design, and the law, unable to reach the reading, retreats to arguing about how long the warehouse may keep what it read.

So the honest sentence is the cold one. A machine that reads everyone needs no reason for any of it, and the law agrees, because it decided long ago that looking at one plate is free, and was never asked whether looking at every plate, forever, is the same thing. Case 49’s fix was to make each query carry its reason. The machine’s answer is to have no queries, only a gaze, and a gaze does not have to explain itself. The question this case leaves is the one the automation is built to skip: not “was this search justified,” asked of one read, but “should a permanent, searchable record of where everyone drove exist at all,” asked before the next camera goes up.