76

I often recognise that people blur their license plates on pictures on the internet in Germany. I can't figure out what's the fuss. The information is public nevertheless (I mean it's on your vehicle), nobody but appropriated authorities can get any data out of it, and people also do it on platforms where they are identifiable anyways (Facebook, car selling platforms etc.).

So what's the problem of having your license plate visible on the internet (in Germany/EU)?

1
  • Comments are not for extended discussion; this conversation has been moved to chat.
    – Rory Alsop
    Commented Apr 17, 2019 at 19:17

13 Answers 13

12

It records where someone was, and you don't know what that reveals about someone.

Ethically

This part is discussed in a lot of comments and answers. An overview:

You drive around with it all day, so it gets lots of exposure already. However, that doesn't mean that even more exposure is desirable. Aganju's answer explains:

posting on the internet opens that information to a much larger number of people everywhere in the world, not just locals that care to look. [...] Also, on the internet, it's shared forever.

And O. R. Mapper comments on another answer:

the information that someone owns a given car with a given license plate is arguably "public" [but] the information that this car (and thus, probably, its owner) was at a specific location at a specific time may be a very different story.

Alright, so the internet has a higher chance of containing someone who can use the data to harm you, than if you limit the exposure to those around you... but what evil things could someone do with something that is already so public?

Lots of people can think of an answer to this:

  • "it is easy for stalkers or jealous wife/husband/whatever to remember a few license plates and recognize them when they encounter them by chance", A. Hersean answers
  • "In the UK people often obscure licence plates in photographs they post online to protect themselves or the vehicle's registered keeper (often the owner) from "number plate cloning"." Andy Vaal answers
  • "In Scandinavian countries road authorities have a publicly accessible service where you can get the name, address, and phone number of the license plate owner," index comments
  • "If someone that knows that the car CT-90-GEO is usually parked on a given house at night and then sees a post on social media that shows the car CT-90-GEO 90 miles away at a party, the person will know that the house is probably empty and thus vulnerable to a burglar," T. Sar comments
  • It's not hard to think of another: You might know your girlfriend won't see your car being somewhere, but she might still see the picture someone randomly took of your car near your ex's house. It might raise some questions and seed doubt, even if your business there was benign or even unrelated.

It creates permanent records of things that are otherwise fleeting. You might also consider that it is costly to be everywhere in the world and record movements of a large amount of people, but it is very cheap to collect this data from your armchair.

These reasons might not apply everywhere in the world, or to every individual, but are you sure it does not apply to each of the license plates in your picture? They did not ask you to share it, so why do you need to do it? It's their data, they have a right to choose what happens to it. Which brings us to the legal aspect.

Legally

In case your picture contains (a) license plate(s) that are not of your car, it may not be legal to share this online.

I can only speak for the European Union, where we had privacy guidelines since 1994 (Data Protection Directive, implemented as laws by many countries) and legislation since 2016 (General Data Protection Regulation). Privacy is part of the European Convention on Human Rights.

The definition of personally identifiable information (PII) according to the DPD is (paraphrased): any information about a person who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity. GDPR slightly broadens this:

any information [identifying a person], directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

So it does not matter that I cannot trace that NL 12-ABC-89 belongs to Jan de Vries, it matters that there exists an entity which can do this. Therefore it is PII. This means you need a reason to process the data, which can be:

  • You asked me and I agreed (i.e. consent)
  • It is necessary for a contract (e.g. I asked you to go and buy me a new license plate)
  • When processing is necessary for compliance with a legal obligation
  • when processing is necessary in order to protect the vital interests of the data subject (e.g. I was in a car crash and you need to look up, using my license plate, what my blood type is and whether I have any known bad reactions to medicines)
  • Or one of a few other, less common reasons.

Alright, but you just took a picture of good weather on your business trip, and a car happened to drive by. Can you really not show your wife? Yes, under GDPR you can. Wikipedia cites:

The regulation does not apply to the processing of data by a person for a "purely personal or household activity and thus with no connection to a professional or commercial activity."

3
  • OP is asking about people blurring their own licence plates. No privacy law can limit what information you share about yourself. Commented Apr 17, 2019 at 17:56
  • 1
    @JonathanReez Most of the post can be read both ways, but indeed, it seems that was OP's intention. For yourself, the legal part is of course irrelevant, but I'll leave it in in case someone comes across the question with the more general question in mind, and edit in a little sentence that this only applies to other people's license plates. Thanks!
    – Luc
    Commented Apr 18, 2019 at 7:13
  • 1
    There is another reason in germany: If someone wants to sell his car online, he gives many more details like model and often also his name. Having all this information you can fake a bill for car repairs and send it to the cars insurance. The insurance will pay it and the owner will not notice. So giving to much info, can give criminals money without beeing recognized by the owner. (source german, t-online.de/auto/technik/id_54012248/…) Commented Aug 5, 2019 at 20:10
98

It's a matter of privacy.

The thing you definitely determine from the license plate in some countries is the county of the registered car. In small countries some counties have a small number of registered vehicles and that eases tracking one.

Other things you may be able to determine in quite a lot of EU countries:

  • year of birth of the owner (since some use 2 number character in the plate number)

  • name of the owner (since many use the 2 or specially 3-letter abbreviation of their name)

Example: a car in Romania with the number CT-90-GEO will give you quite good information: the location of the registration is in the Constanta county (abbreviated CT for vehicles) and the owner is named George and was born in 1990.

So many people prefer not to release something like this in the wild.

5
  • 62
    There is another thing to it. If someone that knows that the car CT-90-GEO is usually parked on a given house at night and then sees a post on social media that shows the car CT-90-GEO 90 miles away at a party, the person will know that the house is probably empty and thus vulnerable to a burglar.
    – T. Sar
    Commented Apr 16, 2019 at 12:32
  • 1
    @Farhan It is not true that license plate numbers are assigned like this in Romania. Only the CT gives you certain information. 'Overmind' must have meant that the owner can pay to customize the other letters/digits if they don't want to just be assigned a combination. This answer was phrased in a somewhat misleading way and some of the commenters assumed that the code is always assigned based on name/birthday by the government. It is not the case.
    – Szabolcs
    Commented Apr 17, 2019 at 15:49
  • Comments are not for extended discussion; this conversation has been moved to chat.
    – Rory Alsop
    Commented Apr 17, 2019 at 19:18
  • If you put your initials and birth year on your license plate, you can't blame someone for seeing it. I agree that license plates are privacy-sensitive (they're PII regardless of their contents), but the reasoning in this answer doesn't make any sense.
    – Luc
    Commented Feb 6, 2020 at 13:15
  • True, Luc, it's the owner that is to blame; that does not mean you don't have to protect them.
    – Overmind
    Commented Feb 7, 2020 at 6:07
42

It is to protect the privacy of the individuals.

Imagine that you can link the license plate of a car to the owner. You take a picture of a car in Berlin and share it in the internet, you will be giving this information to all persons on the internet that the car was sighted in Berlin and thus violating the privacy of the owner that might not wish no one knew he was in Berlin. European laws protect the individual rights.

You can take the pictures but you cannot share them publicly without protecting the faces or information that can break someone else privacy.

1
  • Comments are not for extended discussion; this conversation has been moved to chat.
    – Rory Alsop
    Commented Apr 17, 2019 at 19:20
41

In the UK people often obscure licence plates in photographs they post online to protect themselves or the vehicle's registered keeper (often the owner) from "number plate cloning".

Number plate cloning is where someone acquires licence plates by having them produced without providing proper documentation (1). This is usually done in order to steal the registered keeper's identity, making it harder to attribute criminal activity committed in a vehicle to the actual perpetrator (2).

Posting pictures of your licence plate online makes it easier for criminals to find licence plates to clone, especially when attempting to match the make and model of another vehicle they are in possession of (3). Cloning the plate of a vehicle with the same appearance (make, model, colour, body type) means that everything will appear in order if a cursory check of the plate is carried out.

1
  • Comments are not for extended discussion; this conversation has been moved to chat.
    – Rory Alsop
    Commented Apr 17, 2019 at 19:21
25

Since the license plate is (indirectly) linked to a person, it can be used to identify a person. As such, it is "personal data" as defined by the GDPR. It is now illegal to share such data without prior authorization from the car owner. Because its location at a specific time can be deduced (near the car, at the time of the picture), it is an even more sensitive information.

However, in EU people did not wait for the GDPR to blur license plates in order to protect the privacy of their owner. Even though the registry of license plates is not public, it is easy for stalkers or jealous wife/husband/whatever to remember a few license plates and recognize them when they encounter them by chance. People generally do not want to be involved in an argument between ex-lovers, especially when it can be in front of a court (divorce judgment, etc).

1
  • Comments are not for extended discussion; this conversation has been moved to chat.
    – Rory Alsop
    Commented Apr 17, 2019 at 20:53
6

Only half an answer:

People are not always logical about their choices of personal information sharing.

They like to have their initials and their birth year on the license plate, and show off those vanity plates, but at the same time they don't want their initials or their birth year known in the internet, and give fake birth years or initials when signing up somewhere.

It might be because posting on the internet opens that information to a much larger number of people everywhere in the world, not just locals that care to look. Or simply the feeling that you 'know' the audience that has access, like sharing your birthday or your home address with all members of a local chess club (even though you don't really know them all). The whole world out there for sure contains some bad people, and nobody has even remotely the feeling that he knows the whole world, so people are quite reluctant to share anything personal in public.
Also, on the internet, it's shared forever. You can change your number plate next year, and after a while, no neighbor or colleague might remember your old one; on the internet, it stays always accessible.

In a nutshell, it is psychologically motivated.

6

TLDR: Europeans are privacy aware and don't share what they don't have to share; there is a practical difference between something being public locally and globally

To approach this a bit more broadly and from a cultural perspective:

Europeans are often more aware of privacy issues than say Americans:

  • They often follow the rule to not give away more private information than necessary.
  • This also manifests in information security issues, i.e. there are often special positions in companies or government institutions that mainly deal with privacy protection.
    • More technically, private white hat hacker groups strongly advocate for restrictions on what data is stored and collected (also see GDPR) and for companies to follow that rule.
  • In general, "don't give away more information than needed" is also a sound information security guideline. Even if you don't know an attack vector based on some information you could give out, if in doubt, you could not know a potential exploit, an exploit might include multiple low-level data breaches, each not dangerous on its own, and even if at the moment some information is not dangerous it might become later in time because your threat model changes.
    • simple example: bad taste jokes on twitter; likely no problem for you if only your friends read them, in particular if they know and potentially share your humour, but a big potential career killer once you end up working for a big entertainment company that aims to have a certain family friendly image

With respect to protecting information that is public anyway:

  • There is a difference between information that is locally public and information that is globally public.
    • Most people have no problem with their spouse and brothers and - in Europe - their sauna friends seeing their private parts, but they will not that eagerly show them to the rest of the world.
    • More to the point, if my neighbours and a few people in foreign cities see my plate, chances that a psychopath who wants to kill me because he doesn't like my nose is among them is pretty slim; it increases if millions see me and the car. It's still a small chance for this particular setup, but significantly larger - it's even more an issue for obviously rich people or particularly attractive/famous people.
    • But threats don't necessarily need to be strong to validate some precautions, if you put a car online because it's unique, expensive or the owner did something stupid, you typically want to share the emotion, but not risk any damage to the owner; be that online ridicule and harassment or a huge influx of people wanting to buy their unique car or take pictures with it. That's more likely to happen though has less impact. One might still find it worthwhile to defend against it in particular when it's so easy. (And you don't actually really know the threat level for yourself now or in the future)
1

It's not about the number, it's about the time & place.

Most pictures store a place (GPS coordinates) and a timestamp today, or would allow a placement based on the image content.

Posted images could suggest where a specific person was at the time of taking of the picture.

1
  • Not applicable for most pictures online as sites like Facebook strip all metadata. Commented Apr 17, 2019 at 17:55
1

Because of the of the internet is so easy to gain people's information. The last thing you want is someone tracking you down because they like the way your vehicle looks, or they want the stereo out of it, or they like the way the girl next door looks, or something of that nature. So most of the time it is done for privacy issues.

1
0

In the US it's common practice to blur license plates. This is another basic difference between N.America and elsewhere. In the US because of state's rights, each state has their own laws regarding plates. In Michigan, where I live, the plate goes with the owner.. You can transfer a plate from a car you sold, to a new car. And we are required to just have a rear plate, renewed each year by putting a color coded year tab over the previous years. That gives away the registered owners birth month. Our plates are valid from birth month to birth month. In California, unless it's changed recently, the plates stay with the car for the life of the car, from owner to owner. And they are required to have plates both front and back. We can get vanity plates for an extra charge, but generally plates that need to be purchased are in numerical order when delivered to the office. But with three to 15 lines at the Sec. of State office, and over a hundred offices throughout the state, you can say plate numbers are random. Each state has their own rules, so available personal info could be easier in one state than another. I never gave the blurred license plate thing a second thought. Other than high traffic video, at a longer distance, all plates are commonly blurred. It's too easy to get the info on a person if you know the plate number. With privacy, comes people who want to exploit that.

0

Between the information that is given out within certain counties licensing authorities, and with the online live access to many public roads and highways, cloud processing, and machine learning. For instance in America (not sure about EU and UK) with the roundabouts and tollways and tollbooths, traffic cam cctv footage, not to mention any other purposely set private cameras and manual methods. A sole hacker could quite easily find you, discover your route (more information), ID your work location, your schedule, your patterns within a matter of days, and work you with the limitless minute details that add up to a useful amount of info and data that is powerful. Once found they could go even further by simply querying and crosschecking public information to fully Identify you through methods that provide so much more than just a name or birthday. It's exploitable like none other. Not to mention just the limited information one could gather is valuable to dark people and businesses. I didn't know that, I'm just talking through a few small ways that if someone wanted to get info on the "rude guy that cut me at bagel n bagel" they have enough to go off and perform a full blown exploitation, or data collection operation on thousands of citizens similarly to government surveillance in the past via CCTV (not satellite), not trying to say thats what the gov does, but I hope you understand what I mean by that. I would try personalized plates, covers, and if you suspect you're being targeting which is most likely not the case as you probably would never even know if a hacker was going to come after your information to do, sell, further exploit you, or launch targeted "exploits" and hacks to get what they want or are looking for. Most likely your license plate is in more than just the governments database if you live in a highly populated city.

  • There are so many ways to get exploited, this is just one main one, I would advise you to try to get your lawmakers to change their line of thinking in terms of rendering licenses. It's 2019 but EU's traditional and to recall plates of people/cars that exist but get driven infrequently like many european and metro area cars, depending on geography... yikes! But phasing them out on expiration years every other year would make sense. U.S. rolled this out with stamps and many states in the midwest made all cars register on even years for security and financial reasons as well as tracking technologies.

Id like to say don't sweat it, and you probably shouldn't if you're worried about the risks and potential but I understand why one would want to do that in areas that give you plates based on personal information.

Also consider this, covering it may draw additional attention instead of blending in with the herd. It tells exploiters you have a license plate with personal info. Either way you could get screwed so just drive my EuroBrex-friends across the pond. Even if it's not public, hackers with resources and will can ALWAYS hack or exploit you, and as long as demand exists corporations will always seek out information to exploit you through consumerist marketing ploys.

It's not 2000 anymore. Private lives are forever gone, nothing's private anyone and we've allowed that to happen due to technology and insidious governments in the name of "security" and more. The internet and tech sector are building products from realtime visual recognition and on. It's not new by any means. "Bobbies" and Police have been using it for many years to scans plates on the road, not to mention federal departments and institutions with security have been using it far longer, practically a millennial lifetime. One doesn't need to name their passwords P@ssword1 or lose a wallet, or give them your information to get hacked by an exploit these days. All it takes is the collection of information and analysis, or rather patterns in general everyday life and provided information volunteered on the web is sufficient. I'd limit it.

0

A simple explanation is the owner doesn't want to associate his car to themselves.

I know of some "YouTube influencers" who got their car vandalized because some haters figured out the car parked in the street was owned by that person.

If you blur the tag nobody can know who's the car owner.

-3

The answer is simple...

Security theater

Most people have little understanding of how security works or what aspects of their privacy should be protected. They see others masking the licence plate number and do the same, without serious understanding of the reasons behind such policies.

2
  • Most people don't know anything about mathematical entropy. Does that mean that long passwords are security theater? Obviously no - security theater is something that seems to help security but actually doesn't do anything. This behavior actively helps you to protect your privacy, so it is anything but theater..
    – T. Sar
    Commented Apr 16, 2019 at 20:11
  • also the term security theatre doesn't apply here, as that typically means doing something to give the general public the feeling they are safe and particularly that you keep them safe, which doesn't apply even if one were to follow the answer in that it adds nothing of worth to security. Btw. a core principle of security is to not give away information if you don't need to, no matter whether you know a given threat is connected to it, simply because often enough you don't know (yet) what attack vectors are currently possible with it or may become possible with it. Commented Apr 16, 2019 at 20:31

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .