Privacy Principles

Why the nation's third-largest police force just walked away from Flock Safety

The LAPD ended its contract with Flock Safety over privacy and data security concerns. Explore what this means for the future of urban surveillance.
Why the nation's third-largest police force just walked away from Flock Safety

Long before you notice a small, solar-powered camera mounted on a utility pole, your vehicle is already in a database. These devices are part of a private surveillance network that records your plate number, the make and model of your car, and your exact location at a specific time. This information enters a searchable cloud where police departments across state lines can track your movements for weeks. This hidden mechanism is the core of Flock Safety, a company that has quickly become a primary provider of automated license plate recognition technology for law enforcement.

On Saturday, the Los Angeles Police Department ended its relationship with this network. The LAPD is the third-largest police department in the United States and was one of the biggest government clients for the Atlanta-based surveillance firm. Dean Gialamas, the department chief information officer, cited serious concerns about civil liberties and privacy as the reason for the exit. The department had a three-year contract that it chose not to renew because the data collection practices did not meet its standards for security and rights protection. This move signals a change in how large urban centers view the trade-off between automated policing and public privacy.

The mechanical reality of automated license plate readers

Automated license plate readers or ALPRs are cameras that scan every vehicle in their field of vision. Unlike traditional red-light cameras that only trigger during a violation, these cameras capture data on every driver regardless of suspicion. Flock Safety operates a network of at least 80,000 cameras nationwide. The company sells a subscription service where the hardware and the data management are part of a single package. The LAPD does not own these cameras. Instead, the police department pays for access to the software and the data that Flock collects.

From a technical standpoint, this creates a digital dragnet. Every time a car passes a sensor, the system creates a timestamped record. Law enforcement agencies can search this data by plate number or vehicle description. Because Flock allows different agencies to share their data feeds, a police officer in one city can track a vehicle that passed through a different city hundreds of miles away. This extraterritorial reach is what concerns privacy advocates and legal experts. It transforms local police tools into a national tracking system that lacks federal oversight.

When algorithms make high-stakes mistakes

Accuracy is the most frequent defense for the use of ALPRs, yet the technology is prone to errors. These errors have physical consequences for drivers. In one recent case, a journalist for the car review website The Drive was driving a loaner vehicle for a story. A Flock camera mistakenly flagged the plate of the vehicle as stolen. Because of this false positive, police officers surrounded the journalist and boxed in his car. This type of error is a systemic risk because the algorithms sometimes misread characters on a plate or fail to update the status of a vehicle that was recovered months prior.

When a computer makes an error, the police often treat the data as an objective fact. This leads to situations where motorists are pulled over and held at gunpoint based on flawed software output. The LAPD decision reflects a growing skepticism about the reliability of these automated alerts. If the data is not accurate, the tool is a liability for the department and a danger to the public. These mistakes are not isolated incidents. They are a predictable result of a system that prioritizes the volume of data over the precision of the identification.

A history of security lapses and unauthorized access

Privacy is not just about who has the right to see data but also about how well that data is protected from those who do not. Flock has faced several security challenges that call into question its data hygiene. Independent researchers and the news outlet 404 Media discovered publicly exposed Flock cameras that allowed anyone with a web browser to watch live feeds. This level of exposure is a major failure of privacy by design, which is a principle where security is the foundation of a product rather than an afterthought.

There are also reports of unauthorized use of the system. In one instance, the U.S. Drug Enforcement Administration used a local officer's login credentials to search for a suspect. This search happened without the officer's knowledge. Furthermore, many police logins for the Flock system do not require multi-factor authentication. This is a basic security standard that requires a second form of ID, such as a code sent to a phone, before a user can access sensitive data. Without these protections, the massive database of vehicle movements is vulnerable to hackers or government officials who want to bypass local laws.

California law and the future of surveillance transparency

In California, ALPR use is subject to Senate Bill 34, which is codified in Civil Code section 1798.90.5. This law requires any agency that uses ALPR data to implement a usage and privacy policy. The policy must ensure the data is secure and that its use is consistent with the respect for individual privacy and liberty. The LAPD cited the need for new contract language that specifically addresses these legal requirements and data storage concerns. The department wants to iron out the details of how data is shared and who is responsible for its security.

From a regulatory context, the LAPD exit is a sign that existing laws are finally being used to scrutinize surveillance vendors. Large cities are beginning to realize that data is a toxic asset. If a department collects too much information without proper safeguards, that data becomes a target for lawsuits and security breaches. The LAPD chose to stop the service until they can establish a more stringent contractual relationship that protects the city and its residents. This decision reflects a shift toward more proportionate surveillance where the benefit of a tool must outweigh the risk to constitutional rights.

Community resistance and the sanctuary city conflict

Los Angeles is not the first city to reconsider its deal with Flock Safety. Mountain View, California, and South Portland, Maine, have also ended their relationships with the company. These cities expressed concerns that federal immigration officials could use the camera network to track people. In sanctuary cities, local laws often prohibit the use of municipal resources to assist in federal immigration enforcement. Because the Flock network allows for wide data sharing, it is difficult for a local police department to ensure that its data is not used for purposes that violate local policies.

Residents have also taken individual action against the cameras. In some neighborhoods, people have covered the lenses with trash bags or dismantled the hardware. This physical resistance highlights the lack of community consent for these systems. When a city council approves a surveillance contract without a public hearing, it creates a gap between the government and the people it serves. The LAPD move suggests that the department is listening to these concerns and recognizes that public trust is more valuable than a high-tech camera network.

How to check your local surveillance footprint

Transparency is the first step in protecting your privacy. Many police departments that use ALPR technology are required by law to publish their usage policies and data sharing agreements. You can take specific steps to understand how your city handles this data and advocate for better protections.

First, search your local police department's website for an ALPR or surveillance transparency portal. California law specifically requires these departments to be transparent about their data practices. Look for information on how long the department keeps the records and which other agencies have access to the data. If the information is not public, you can submit a public records request to your city clerk for the contract and usage policy related to surveillance cameras.

Second, engage with your local city council or police commission. Many of these contracts are signed during administrative sessions with little public debate. Ask your representatives if the city has a surveillance oversight ordinance. These laws require the police to get public approval before they buy or use new tracking technology. By participating in these meetings, you can push for data minimization, which is the practice of only collecting the data that is absolutely necessary for a specific task and deleting it as soon as that task is complete. Privacy is a fundamental human right that requires active defense through both legal and civic action.

bg
bg
bg

See you on the other side.

Our end-to-end encrypted email and cloud storage solution provides the most powerful means of secure data exchange, ensuring the safety and privacy of your data.

/ Create a free account