There's a nice list here with references to statutes: https://www.ncsl.org/technology-and-communication/automated-...

Just so we're clear, across all these statutes, the term "private" means "for private use". State and local governments can engage private firms to collect data in all of them.