Some of California's largest police departments have been collecting millions of images of drivers' license plates and sharing them with entities around the country—without having necessary security policies in place, in violation of state law, according to a newly released state audit.