NH banned ALPRs, with some narrow exceptions.

https://gc.nh.gov/rsa/html/XXI/261/261-75-b.htm

It’d be hard to keep individuals from doing this. But individuals aren’t running networks of cameras. Companies are. Those companies probably couldn’t fly under the radar selling LPR data if the practice was banned.

You can ban possession of the data if you attach statutory damages per infraction.

You can make it illegal to use private cameras for surveillance of public spaces. In Europe this is already the case.

You can ban mass surveillance.

You can ban certain ways of using them, and enforce it and serve punishment for violation.

You can ban what’s done with the software/hardware, just as we ban assault with a deadly weapon.

You can ban pictures with certain content.