Click through to the law in question. It's the Civil Code not Criminal Code, and states, "an individual who has been harmed by a violation of this title, including, but not limited to, unauthorized access or use of ALPR information or a breach of security of an ALPR system, may bring a civil action in any court of competent jurisdiction against a person who knowingly caused the harm."

So you have to prove actual harm. You have to identify the individual person who caused the harm. You have to prove they knowingly caused the harm. You have to quantify the harm in monetary terms. Then you can sue them for actual damages + attorneys' fees.