It’d be hard to keep individuals from doing this. But individuals aren’t running networks of cameras. Companies are. Those companies probably couldn’t fly under the radar selling LPR data if the practice was banned.

You can ban the commercialization and mass scaling of the technology. Just because you can't prevent something at a small scale doesn't mean you can't prevent corporations and government agencies from doing it without exposing themselves to unacceptable legal risk.

NH banned ALPRs, with some narrow exceptions.

https://gc.nh.gov/rsa/html/XXI/261/261-75-b.htm

You can ban possession of the data if you attach statutory damages per infraction.

You can make it illegal to use private cameras for surveillance of public spaces. In Europe this is already the case.

You can ban what’s done with the software/hardware, just as we ban assault with a deadly weapon.

You can ban mass surveillance.

You can ban certain ways of using them, and enforce it and serve punishment for violation.

You can ban pictures with certain content.