Despite 'New' Updates, Flock's Creepy Cameras Remain Major Civil Liberties Threat
Surveillance company Flock Safety several operational changes in response to a and overwhelming public opposition to its mass government surveillance product.
Flock鈥檚 threat to privacy stems from its operation of more than 120,000 automatic license plate readers (ALPRs) nationwide, which includes broad location data collection and sharing. While one proposed change to Flock鈥檚 operations might constitute a positive development, most of the other changes seem to be following Flock鈥檚 playbook of treating legitimate privacy concerns as mere public relations problems. Several of the proposed changes Flock is touting are merely retreads of previous inadequate safety measures.
ALPR companies like Flock violate our privacy鈥痑cross the country by taking photos of鈥痚very鈥痸ehicle passing their cameras, logging detailed information about them into鈥痑 massive nationwide鈥痙atabase, and making鈥痠t possible to track those vehicles and apply AI to uncover their occupants鈥 private patterns of life. The 桃子视频is fighting alongside communities to cancel local ALPR contracts and push lawmakers to protect our rights from this surveillance nightmare. Below, the 桃子视频details and responds to Flock鈥檚 announced changes.
Flock reduces default data retention time period, but the devil may be in the details.
Flock announced it is reducing its standard data retention from one month to one week, conceding for the first time that 鈥渞oughly 90 percent of all searches on Flock already happen within a week鈥 of the data鈥檚 collection.
鈥淔or cases that need more time, Flock is launching Evidence Mode: when a search is tied to a case number, that data is preserved instead of aging out after 7 days,鈥 Flock said in its statement. 鈥淎gencies can still set retention to whatever their state or local policy requires. Evidence Mode will be provided to customers at no cost.鈥
Our Response: While Flock has not shortened the default retention period to the ACLU鈥檚 recommended 48 hours, its proposal may be a step in the right direction. Whether this is a real change or just another Flock PR move, however, will depend on how its 鈥淓vidence Mode鈥 operates.
If 鈥淓vidence Mode鈥 only retains hit result data that police determine may be evidence in an active investigation of a specific case, then the change may be a positive one. But if 鈥淓vidence Mode鈥 triggers the retention of any ALPR data that is searched, then the new mode could indefinitely retain all the ALPR data Flock collects and shares nationally. This would make Flock鈥檚 data retention problem even worse. Even if 鈥淓vidence Mode鈥檚鈥 data retention hold only applies to hits returned on a given search, it would still retain significant amounts of location data on persons and vehicles who law enforcement do not suspect have engaged in any wrongdoing.
While Flock doesn鈥檛 establish state or local ALPR data retention periods, its system empowers governments to choose their own retention periods. For states and localities that want and permit longer data retention periods, all they have to do is ask. Although Flock may not technically be the one unlocking the door to months of people鈥檚 private location data, it is responsible for building the door and handing out the keys.
Flock claims to provide more local control over what their ALPR data can be searched for; it has repeatedly failed to effectuate such limitations in the past.
Flock claims that its changes will provide 鈥渕ore local control,鈥 meaning local police can decide what types of offenses other Flock customers can search their data for. 鈥淔or example,鈥 Flock said, 鈥淐ity A could allow City B to search its cameras for a stolen vehicle or violent crime while blocking searches related to immigration enforcement.鈥
Our Response: This is not new. Flock has attempted this before, and the security measure failed because users were easily able to circumvent the system鈥檚 requirement that police input the purpose of their search.
For example, on June 12, 2025 Flock started claiming its new 鈥淧roactive Search Term Tool鈥 would block any 鈥渋mpermissible鈥 searches, such as abortion-related searches in states like Illinois that prohibit sharing reproductive healthcare data. But police officers quickly realized they could just input as a search reason and it would be approved. Flock later switched from an open text box to a drop-down menu of reasons, but that just offered police a list of acceptable purposes they could choose from, whether it was accurate or not. Until Flock demonstrates they can develop a reliable, workable system to prevent improper searches, this promise of local control provides nothing more than a false sense of security.
Flock claims the universal roll out of its audit assistance tool will detect police misuse, but the effectiveness of its audit tool has never been independently evaluated.
Flock鈥檚 next change makes its 鈥淎udit Assistance鈥 tool, which the company claims 鈥渇lags abnormal search behavior,鈥 a standard feature for all its customers. Flock lauds the effectiveness of its audit tool by simply stating that 鈥渋dentification of [police officer] misuse went up鈥 after it established its audit tool.
Our Response: While providing 鈥淎udit Assistance鈥 to all departments makes sense, there is no evidence that the tool works consistently to address what the Washington Post is a growing pattern of police officers turning Flock into a personal stalking tool. While dozens of officers have recently been arrested, fired, or otherwise disciplined for misusing Flock for personal reasons, Flock claims these arrests are proof its auditing tool works. However, unless we know the number of officers misusing the system, we cannot conclude if Flock and its auditing tools are catching 95 percent of violators or 5 percent. Flock needs to have its auditing tool analyzed by an independent evaluator to determine its actual effectiveness. Until then, we don鈥檛 know if the tool is a real security measure or just window dressing.
Flock claims requiring the reasons for a search will prevent abuse, even though that same intervention failed miserably before.
Perhaps the oddest part of Flock鈥檚 announcement is its claims that 鈥渘ow every search will require鈥 police to input a case code, a previously optional requirement it first rolled out in July 2025. While claiming that a 鈥渟earch without a reason is a search that shouldn鈥檛 happen in the first place,鈥 Flock鈥檚 announcement fails to note how easily users have circumvented 鈥渟earch reason鈥 security measures in the past or how its new policy improves the quality of the feature. This leaves the public wondering how making an ineffective voluntary security measure mandatory will improve its functionality.
Our Response: Until Flock demonstrates through independent evaluation that its search reason requirement is an effective, air-tight security measure, it鈥檚 reasonable to assume its past failures are prologue.
Transforming an exceptionally dangerous mass surveillance system into one that is fully protective of civil rights and civil liberties is a difficult, if not impossible task. That is even more the case with a company like Flock, whose nearly $1 billion in venture capitalist funding has locked it into an operational model that seeks to trade our privacy for massive profits. Given that Flock鈥檚 latest announcement still appears more focused on addressing a perceived PR problem than the significant harms its products create, this is hardly the step forward Flock wants us to think it is. Change may still come as Flock faces this ever growing threat to its corporate viability, and we will continue to analyze the company鈥檚 proposals fairly and honestly, but we certainly won鈥檛 be holding our breath.