Go even further and just adopt the New Hampshire law which doesn't even allow "non-hit" license plate images or records to be transferred off the camera device itself and must be deleted locally within 3 minutes.
All you'd need after enforcing all cameras be 'hit-based' is also mandating warrants to enact a search, and you've significantly neutered the issue with them in their current state.
You know what, if a camera maker is incompetent enough to do this I'm fine leaving it as a back-end for figuring out what the surveillance state is up to.