Flock cuts plate-read retention to seven days, and admits defaults beat policy

Flock Safety is cutting the default holding period for licence plate reads from 30 days to seven, and making most of the package its chief executive Garrett Langley published on 13 August mandatory for law enforcement customers on 1 January ^[1][3][4]. The consequential part is not the number. It is the concession underneath it: the company that spent a year offering abuse controls as free options now says the options were the problem ^[11][12].

The retention cut removes 23 days of history, about 77 percent of the default window ^[26]. Flock's stated justification is its own telemetry: officers finish more than 90 percent of searches without a full plate within a week ^[5]. A feature called Evidence Mode, rolling out in the coming weeks, lets detectives preserve specific data for active investigations, and is free for customers "who adopt the seven-day window" ^[6]. That phrasing is worth reading twice. A default is not a ceiling, and the free tooling is framed as an inducement to accept the shorter period rather than a consequence of it ^[6].

The adoption numbers explain the shift to compulsion. Audit Assistance, which flags abnormal activity for administrator review and can suspend access automatically pending that review, launched 16 weeks ago as a free option ^[8][9]. Roughly a third of agencies had switched it on ^[8], meaning about two-thirds had not ^[27]. According to Ars Technica, one Georgia sheriff's office turned the tool on and then arrested three officers who were separately using Flock cameras to stalk acquaintances, and Flock says identification of abuse "predictably went up" at agencies that activated it ^[16][17]. Case codes followed the same arc: introduced as an option in July 2025, resisted as a requirement, now required ^[10][11]. Langley told Engadget it was "such an obvious way to curb abuse" and that "we got this one wrong" ^[12].

The requirement has a hole in it. MIT Technology Review reports that Flock will not verify the case numbers officers enter, so the control is a paper trail rather than a gate ^[13]. That matters because the paper trail is what the automated auditing reads.

The pressure came from documented harm, not from a product roadmap. The Washington Post counted nearly 50 instances of officers charged or accused of unauthorised use, most of them tracking current or former partners or family members ^[14]. Savannah Police Department dismissed six employees this month, four of them officers, after finding the searches through Flock's voluntary audit function ^[15]. Langley told CBS News, of a woman who said the technology was used to stalk her, "I apologize. It kills me that she went through that" ^[28].

Critics are not persuaded that instrumentation is the fix. The ACLU called the measures retreads of inadequate safeguards while allowing the shorter retention window may be a step in the right direction, and wants an independent evaluator, saying there is "no evidence that the tool works consistently" ^[19][18]. Robert Frommer of the Institute for Justice told the Associated Press it was "window dressing that doesn't address the fundamental problem", because officers still decide who gets searched and when ^[20].

Three things to watch. Whether the Bishop Fox security review summary, due in September, is specific enough to check ^[21]. Whether Flock publishes lockout and false-positive rates for Audit Assistance, or lets an outside evaluator do it ^[18]. And what the transparency portals at more than 1,500 agencies actually show as retention periods after 1 January, since that is the only public record of whether the new default held ^[23][3].