As much hate as it gets, the GDPR has pretty clear guidelines for situations like these. Essentially, the purpose of the data collection matters. Your license plates may be public information as in they are visible in the public, but that doesn’t mean collecting the information is, or providing others access to it - without your consent.