Flock Safety's Architecture Prompts National Scrutiny Over ALPR Expansion

Automated license plate reader networks face mounting questions from lawmakers, legal scholars, and privacy advocates as investigations reveal widespread institutional misuse and cross-jurisdictional data sharing. Built by companies like Flock Safety, these automated license plate readers (ALPRs) capture vehicle plates, exact locations, and distinguishing marks such as dents or bumper stickers. Artificial intelligence then sorts the photographs by date, enabling cross-jurisdictional searches without requiring warrants or supervisory approval, according to reports by The Conversation, The Apopka Voice, Cobb Courier, and Berkeley Varitronics Systems.

What does the data reveal about system misuse?

A Washington Post investigation identified at least 100 police department employees charged with or accused of misusing ALPRs, including 26 officers who used Flock's cameras to track current or former partners or individuals they hoped to meet. Among the documented cases, Braselton Police Chief Michael Steffman—the ex-boyfriend of Georgia single mother Marci Bakely—searched the license plates of Bakely and her teenage daughter approximately 600 times via Flock Safety. The Georgia Bureau of Investigation arrested Steffman in November 2025 on charges of stalking, harassment, and misuse of an ALPR, though he was found dead before trial.

Additional misuse incidents extend beyond personal stalking into sensitive law enforcement overreaches. Public records from Danville, Illinois, revealed more than 4,000 searches by federal agencies, pointing to a focus on immigration enforcement despite U.S. Immigration and Customs Enforcement (ICE) having no active contract with Flock. Furthermore, a 2026 campus police study found 11,935 immigration-related searches across partial records from eight college police departments. In May 2025, a Texas sheriff’s office searched more than 83,000 cameras for a woman who had self-managed an abortion, logging the reason as "had an abortion, search for female." The query reached Illinois, where state law prohibits sharing plate data to enforce out-of-state abortion bans. While the Texas office labeled the inquiry a "welfare check," public logs documented it differently.

How are companies and police departments responding?

In response to mounting scrutiny, Flock Safety implemented changes in August 2026, shortening its recommended data retention window from 30 days to seven days while requiring misuse-detection protocols and case codes to document searches. Flock has maintained that misusing users represent a tiny fraction of its monthly user base and that permanent audit logs help uncover misconduct. The company also stated that customers control their data and that each user walked through the front door without hacking or stolen credentials. However, Flock noted it lacked sufficient information to assess hackers' technical claims regarding security vulnerabilities, following a September 2026 analysis by Wired and 404 Media that successfully copied data from a Flock camera containing 21 days of logs with roughly 50,200 vehicles and 1.6 million images.

Institutional pushback has followed these disclosures. The Los Angeles Police Department (LAPD) suspended its use of Flock cameras in July amid questions regarding data control, sharing, and oversight. Berkeley Varitronics Systems reported that more than 50 jurisdictions have ended their relationships with Flock. In Indianapolis, Marion County did not regularly audit Flock searches until The Washington Post flagged thousands of inquiries by a single officer, prompting a systemwide audit that uncovered alleged misuse by four additional officers. Marion County Prosecutor Ryan Mears stated that many proposed guardrails would have proven ineffective, pointing to a need for independent or judicial oversight.

What are the legal and constitutional stakes?

Legal challenges are currently testing whether continuous automated tracking violates the Fourth Amendment. In October 2025, a Virginia appeals court ruled that no warrant was required to retrieve three images spanning seven minutes from Norfolk's 172-camera network. A federal judge reached a similar conclusion in January 2026, holding that Norfolk's expanded 176-camera network did not violate Fourth Amendment protections despite vehicles being photographed 475 and 325 times over four and a half months. That federal ruling is currently being appealed. These cases build upon historic precedents such as Carpenter v. United States (2018), which established that acquiring seven days of historical cellphone location records generally requires a warrant, and Chatrie v. United States (June 2026), which was returned to a lower court to determine whether a warrant satisfying Fourth Amendment requirements existed for two hours of stored Google location history.

Henry F. Fradella, a criminal procedure scholar and professor of criminology and criminal justice at Arizona State University, proposed five distinct safeguards to address these architectural concerns: judicial authorization based on individualized suspicion for retrospective regional or national searches; technical access controls to restrict immigration and reproductive-health searches; short-period data deletion; opt-in interstate data sharing; and independent audits of search logs and device security.

This is educational information, not legal, financial, tax, or investment advice.