should also mandate that the license plate data that constitutes a 'hit' must be sent and stored at rest encrypted so that someone can't break into a camera and see who's beeing searched for.
You know what, if a camera maker is incompetent enough to do this I'm fine leaving it as a back-end for figuring out what the surveillance state is up to.