Flock Overhauls Privacy, Security & Transparency Safeguards
Flock Safety Updates: Making Communities Safer While Protecting Your Privacy
Quick Summary: Flock Safety—the company behind license plate reading cameras used by police and neighborhoods—just announced big changes. They’re keeping data for less time, adding stronger safeguards against misuse, making security tougher, and being more open about how everything works. Here’s what you need to know in plain English.
What Is Flock Safety? (ELI5)
Imagine a security camera that only reads license plates—it doesn’t record faces, just the plate numbers and the state they’re from. Police and communities use these cameras to:
- Find stolen cars
- Locate missing people (like Amber Alerts)
- Solve crimes faster
Flock Safety makes these cameras and the software that runs them. Over 1,500 agencies use their technology, helping solve over 1 million crimes per year.
Major Updates at a Glance
| Area | What’s Changing |
|---|---|
| Privacy | Default data retention drops from 30 days → 7 days |
| Accountability | New required audit tools, automatic lockouts, and case codes for every search |
| Data Ownership | Crystal-clear contracts: customers own their data |
| Security | Mandatory 2-factor login, independent security audit, bug bounty program |
| Accuracy | Better plate reading + human verification = fewer mistakes |
| Transparency | Public dashboards showing exactly how each agency uses the system |
Privacy: Less Data Stored, More Control
7-Day Default Retention (Down from 30 Days)
- Why? Flock analyzed their data: over 90% of useful searches happen within the first week
- What this means: Cameras automatically delete plate reads after 7 days unless…
- Exception: Evidence Mode lets detectives "freeze" specific plates for active investigations (cold cases, ongoing probes). This data goes into secure cold storage—only for approved cases, following existing laws.
Important: Communities still choose their own retention period. The 7-day setting is just the new recommendation and default. Existing customers keep their current democratically-approved periods.
Offense Filtering: Cities Choose Who Sees What
Cities can now set rules like:
- "Neighboring city can search our cameras for stolen vehicles"
- "Neighboring city can search for missing persons"
- "Neighboring city cannot search for immigration enforcement"
This lets communities collaborate on safety while drawing clear lines around sensitive uses.
Accountability: Stopping Misuse Before It Spreads
1. Audit Assistance → Now Required for All Police Customers
- What it does: Automatically detects unusual search patterns (e.g., an officer running plates for personal reasons)
- Results so far: Already flagged activity leading to arrests of several officers for alleged abuse
- Deadline: All law enforcement customers must adopt by end of 2025
2. Proactive Lockouts (New!)
- If a user triggers "abnormal behavior" criteria → automatic suspension pending admin review
- Goal: Stop misuse early, before it becomes a pattern
3. Case Codes → Now Required for Every Search
- Officers must enter a case number/reason for each search
- Emergency bypass allowed — but every emergency search gets flagged for supervisor review
- Deadline: End of 2025
Callout: Why This Matters
These aren’t just "promises"—they’re technical enforcement. The software won’t let officers skip these steps. It builds accountability into the system itself.
Data Ownership: You Own Your Data. Period.
- Always been true: Customers (cities, police, HOAs) own the plate data their cameras capture
- What’s new: Flock is publishing a plain-English, section-by-section contract explanation on their website next week
- Simple principle:
You own the data → You decide who accesses it → You choose who to share it with
Data Security: Banking-Grade Protection
| Measure | What It Means for You |
|---|---|
| Mandatory MFA (Multi-Factor Authentication) | Every login requires a second factor (like a code on your phone). No exceptions. |
| Bishop Fox Independent Audit | Top security firm stress-tested Flock’s systems. Full summary + fixes published September 2025. |
| Coordinated Vulnerability Disclosure (CVD) | Security researchers can safely report bugs at vulnerability.disclosure@flocksafety.com and get public credit. |
Bottom Line: Flock is treating security like a bank treats vaults—constant testing, outside experts, and a "see something, say something" program for researchers.
Data Accuracy: How the Technology Actually Works (ELI5)
The Problem: "An Alert Is a Lead, Not a Conclusion"
A recent news story highlighted a wrongful stop. Flock’s response: The system is designed to prevent this—if humans follow the process.
How Flock Reads Plates (3 Layers of Protection)
-
Smart Plate Reading (Not Just OCR)
- Regular OCR = "I see characters: 7, F, G, 9…"
- Flock = Machine learning trained on all 50 states’ plate designs (stacked letters, small characters, new designs)
- Retrained weekly as plate designs change
- Every read gets a confidence score — low confidence = flagged, never sent as an alert
-
Double-Check Against Hotlists
- System matches both plate + state against stolen/missing lists
- Low-confidence reads filtered out before any alert goes to an officer
- Human Verification (The Final Safeguard)
- Officer must visually confirm the plate matches the alert
- Officer must confirm the stop follows law & agency policy
- No stop should ever rely on an unverified alert alone
The Error Rate
Fewer than 9 human-reported errors per 1 million alerts
That’s 0.0009% — but Flock says even one is too many, so they keep improving.
Transparency: See for Yourself
1,500+ agencies have published a Flock Transparency Portal — a public dashboard showing:
- Their retention policy
- Data sharing partners
- Search activity (how many, what types)
- In the agency’s own words
Call to Action: If your agency doesn’t have a portal turned on — ask them to enable it. It’s free, built-in, and builds trust.
Why Now? The Big Picture
- 9 years ago: Flock started with a 30-day default, trying to balance safety + privacy
- Today: Technology assists in 1M+ crimes solved/year
- July 2025 alone: 1,000+ missing people found, 20,000+ stolen cars recovered
- These changes = years of work + listening
- Not the end — Flock commits to keep listening, improving, and raising the bar
Summary: What You Should Remember
| Key Takeaway | What It Means |
|---|---|
| Less data kept by default | 7-day auto-delete unless Evidence Mode used |
| Stronger abuse prevention | Required audits, auto-lockouts, mandatory case codes |
| You own your data | Plain-English contracts coming; you control access/share |
| Bank-level security | Mandatory MFA, independent audit, researcher bug program |
| Accuracy = tech + human | Alerts are leads; officers must verify before acting |
| Transparency built-in | Public portals show exactly how each agency uses Flock |
FAQ: Your Questions Answered
Does this mean police can’t solve old cases anymore?
No. Evidence Mode lets detectives preserve specific plates for active investigations before the 7-day deletion. Cold cases with known plates can be protected. The 7-day limit only affects bulk data with no investigative value.
Can my city choose a longer retention period?
Yes. The 7-day setting is the new default recommendation. Cities/counties/agencies can still vote to keep data longer (or shorter) based on local policy.
What stops an officer from using "emergency" as an excuse to skip case codes?
Every emergency bypass automatically flags the search for supervisor review. It’s not a free pass—it’s a "break glass in case of fire" that triggers immediate oversight.
How do I know if my local police use Flock?
Check your police department’s website for a Flock Transparency Portal link, or ask them directly. Over 1,500 agencies use it nationwide.
What happens if Flock gets hacked?
With mandatory MFA, independent audits (Bishop Fox), and a vulnerability disclosure program, the risk is minimized. But critically: Flock doesn’t own your data—you do. They’re the processor, not the owner.
Final Thought: Technology moves fast. Policies need to move with it. Flock’s updates show what happens when a company builds privacy, accountability, and security into the code itself—not just the press release. Whether you’re a resident, officer, or policymaker: ask for the transparency portal, review the contract, and keep the conversation going.