HB 58 Is Now Law: The End Of Repo Scanning In Kentucky?

Kentucky has officially drawn a line around license plate recognition, and for the repossession industry, the debate is over. With Governor Andy Beshear signing House Bill 58 into law, what was being argued in comment sections just days ago is now something agencies have to operate under.

The bill was sold as a privacy measure, and on paper, that’s exactly what it is. It limits how automated license plate reader data can be collected, stored, and shared, while placing guardrails around who is allowed to use the technology. Supporters will point to consumer protections, retention limits, and oversight requirements. Those pieces are real. But they are not where the impact to repossession shows up.

The impact shows up in control.

For years, much of the industry has operated on a model where agents in the field were not just recovering collateral, but actively generating the data that made those recoveries possible. Mobile scanners, fixed cameras, and access to large plate databases became part of the workflow. That model now runs headfirst into a law that does not clearly authorize repossession companies to operate ALPR systems, while at the same time restricting use of the technology to specific, named purposes and entities.

At the same time, the law does acknowledge collateral recovery. It allows ALPR data to be shared with financial institutions for lien enforcement and recovery of defaulted vehicles. That language did not get there by accident. It reflects the reality of how the technology is used today. But it also creates a shift that shouldn’t be ignored. The data can be used for repossession, but the law centers that use around lenders and authorized channels—not the agent independently operating in the field.

That distinction matters more than anything else in this bill.

What this creates, in practical terms, is a funnel. Data is collected within the confines of the law, accessed by financial institutions, and then used to drive recovery decisions. The independent scanning model that many agents have relied on is no longer clearly supported, and in some cases may fall outside what the statute allows. Whether that becomes a hard stop or a heavily restricted gray area will depend on how the law is interpreted and enforced in the coming months.

There are also new compliance realities baked into this law. Most ALPR data cannot be retained beyond 90 days. Sharing is limited to specific purposes. And beginning in 2027, borrowers entering into new financing agreements must be notified that ALPR data may be used in enforcing those contracts. That means lenders will adjust their paperwork, and it means the legal framework around repossession data is tightening whether agencies are ready for it or not.

Some in the industry are already pointing to “avenues” that may allow operations to continue as they always have. Maybe those avenues hold up. Maybe they don’t. But relying on interpretation instead of clear authorization is a different level of risk than most agencies have had to think about before, especially when the law carries penalties for misuse.

This law does not eliminate repossession, and it does not eliminate the use of ALPR in recovery. What it does is shift where that power sits. The leverage point moves away from the truck and closer to the institution holding the paper. For an industry that has spent the last decade building around access to data, that’s not a small change.

HB 58 is no longer a possibility. It’s the framework Kentucky is operating under now. What happens next won’t be decided in comment sections or vendor statements. It will be decided by how regulators interpret it, how companies adjust to it, and eventually, how it holds up when someone tests it.