RFID tags instead of pictures.
Brazil, of all the places, already developed a solution to avoid that kind of leak.
It all began with road tolls.
Some bright chap had the idea of using RFID tags glued to the windshield, and automated tool booths. If you decide to buy into the system, you don't need to pull over on every tool booth, you just pick a lane with the RFID reader, and slow down to 25MPH. The system does the rest, charging you by the end of the month.
But the system isn't fit just for toll booths. It works on parking lots too.
Large parking lots - including Walmart here - bought into the idea. Hassle-free paid parking, regardless if you are buying anything or not (people parked for free at the supermarket all day long and would go to work next block - dick move. Parking on Walmart is pretty cheap, though, cents). They extended the service to gas stations and - of all places - MacDonald's drive-through. You can literally stop by for a snack, and fill the car, without money or credit card on your person. You park under the tag reader while it fills, and gets charged when done.
Private office buildings can also include on the system, excluding people that work there from charge, as long they bring a tagged vehicle that was included on the system, while opening a revenue stream. They just need to split their parking spots into reserved and unreserved sections.
The benefits don't stop there. It is marked as evidence when the car gets stolen. You can ask the company to track its whereabouts on any reader of the system and report to the police. Yes, some dumb burglar can be seen driving a car deep into the State by the tag reader, and can be easily intercepted.
Since you are buying into the system, it isn't invasion of privacy per se (contracts, EULAS). The system can't read other RFID tags, or make any sense of them, even if they match the system.
Instead of collecting data of the general public, it collects data from agreeing parties. Much harder to go wrong.
Biting the hand that feeds IT
