How does having the data tell the EFF how they are using the data? If you give me a spreadsheet with a bunch of data in it, I don't know how you use it.
Are they using it legally? How can we know just by looking at the data they have?
It doesn't matter how they are using the data, what matters is how they can use the data. We shouldn't trust that they will always do the right thing for citizens' privacy.
How about what parts of town they are collecting this data in and where APLR readers are located. Are all readers based on police vehicles? Are there fixed links location readers? I would assume every entry comes with lat\long and time of day.
In addition to data Creation and Reading, we also have to address Update and Delete.
Do they change the data or delete "special" cars or "special" events. If there are any exceptions to collecting and storing the data, we can't trust it for much of anything: maybe the license plate entry was changed to a different license, maybe seeing a license at a location was added to the data, maybe other suspects are ruled out because data was deleted. And there will absolutly be exceptions: undercover officers, the presidents motorcade, people with stalkers, etc...
Are they using it legally? How can we know just by looking at the data they have?