License plate reader surveillance prompts legal and privacy debate