Too Little, Too Late: Flock Admits Their Technology Needs Reforms
Original reporting by Electronic Frontier Foundation
Flock Safety is a prominent vendor of automated license plate reader (ALPR) technology, widely used by law enforcement but increasingly scrutinized for its mass surveillance implications. After facing significant nationwide anger and numerous contract cancellations over privacy concerns and potential for abuse, the company has rolled out a series of reforms. These changes, presented as a response to public demands, include a default 7-day retention period for ALPR data, a significant reduction from the previous 30 days, with longer retention now requiring an "Evidence Mode" linked to active investigations and potentially incurring a cost. Flock is also introducing "offense filtering" to limit other departments' data access to specific crime types and claims to have beefed up audit features to proactively identify and lock out officers making suspicious data requests.
Assessing the changes Accompanying these technical shifts, CEO Garrett Langley has adopted a more conciliatory tone, moving past previous dismissals of privacy advocates to acknowledge concerns about mission creep and police abuse. However, this article argues that Flock’s reforms are a blend of long overdue adjustments and superficial fixes that fail to address the fundamental dangers of its technology. Critically, they do not establish the need for a judicial warrant to access historical ALPR data, a minimum standard advocated by privacy groups. Ultimately, the piece contends, these company-imposed changes leave the core problem unaddressed: privacy should be determined by robust laws, not by the shifting policies of a surveillance technology vendor.
While Flock Safety’s recent reforms and its CEO’s shift in tone indicate a recognition of mounting public and regulatory pressure, they ultimately represent a reactive attempt to mitigate widespread opposition rather than a fundamental recalibration of their invasive technology. The changes, such as a shorter default data retention period and enhanced audit features, are incremental at best, failing to address the inherent risks of a mass surveillance system that captures and stores license plate data on millions of innocent individuals. The core issue remains: a private company should not dictate the parameters of public privacy.
The Path Forward The broader implications of this development extend far beyond a single vendor. Flock Safety's experience is a harbinger for the entire surveillance technology industry, demonstrating that public scrutiny and organized resistance can force concessions, however limited. This evolving landscape underscores the critical necessity for robust legislative intervention. Relying on companies to self-regulate or to merely respond to market pressure for privacy protection is a precarious strategy. As surveillance capabilities continue to advance with new AI applications and data analytics, the urgency for policymakers to establish clear, legally binding restrictions on data collection, retention, and access becomes paramount. Without such frameworks, the default state will remain one where corporations define our privacy, rather than democratic institutions. This ongoing battle highlights that the future of digital and physical privacy will hinge on proactive legislation, not piecemeal corporate reforms.
Frequently asked questions
- What are the key reforms Flock Safety has introduced for its automated license plate readers?
- Flock Safety has introduced several reforms for its ALPR systems. Key changes include a default 7-day data retention period, down from 30 days, requiring "Evidence Mode" for longer retention in active investigations. The company also offers offense filtering, allowing cities to restrict data access by crime type, and has enhanced audit features to flag suspicious data requests by officers. The CEO has also adopted a more conciliatory tone regarding surveillance issues.
- How do Flock Safety's recent changes address concerns about mass surveillance privacy?
- Flock Safety's reforms aim to enhance privacy by defaulting to a shorter 7-day data retention, which limits the period non-investigative data is held. They also introduced "offense filtering," allowing cities to restrict data access to specific crimes, and beefed up audit features to flag improper use. However, critics suggest these changes don't fully resolve the core privacy concerns of continuous mass surveillance and the potential for abuse.
- Why are privacy advocates critical of companies like Flock Safety regarding surveillance?
- Privacy advocates criticize Flock Safety for allowing a private company to dictate surveillance policies, rather than lawmakers. They argue the reforms are insufficient, easily bypassed, and fail to address the fundamental problem of mass data collection on innocent people without warrants. Concerns persist that the company's business model inherently creates an abusable system for tracking vehicles continuously, leading to mission creep and potential police abuse.