Flock Makes Its Access Controls Mandatory After Two-Thirds of Agencies Skipped Them

Flock will require officers to enter a criminal case number before searching its network of 120,000 license plate readers, and will switch on for everyone an auditing tool that flags abnormal search behavior and locks the user out until an administrator reviews the activity ^[1][2][3]. Both controls already shipped last year as optional features, and both became mandatory only after a surveillance backlash cost the company contracts ^[4][5][6].

The adoption numbers are the whole story. Audit Assistance launched as a voluntary feature in April, and according to The Verge only about a third of Flock's agency customers turned it on ^[7]. That leaves roughly two thirds of agencies operating with the abuse-detection layer switched off ^[8]. Flock says abuse identification went up at the departments that enabled it ^[9], which is the expected result and also the argument against ever having made it a toggle.

What ran in the gap is documented. A Washington Post investigation found 46 cases in which officers were accused of using Flock cameras for unauthorized purposes such as stalking ^[10], including a police chief in Braselton, Georgia, who the Post reported searched his ex-girlfriend's plate more than 500 times over seven months ^[11]. The nonprofit Institute for Justice dates reports of automatic license plate reader abuse to 2021 ^[12].

CEO Garrett Langley has previously argued that lawmakers, not Flock, should set these guardrails, and told The Verge that little such regulation materialized ^[13][14]. On the case code requirement he said, "This is such an obvious way to curb abuse," and, "we got this one wrong" ^[15]. He told MIT Technology Review something harder to square with that: "If you look at the main reason we've lost customers, it's misinformation" ^[16].

The new controls still depend on officer honesty in the places that matter. Flock does not verify case numbers ^[17], and the ACLU found that when the company previously required a stated search reason, officers used generic entries or mocked the prompt, including one Oregon department where officers typed "hehehe" 20 times ^[18]. Flock has not disclosed how accurate the automatic auditing tool is and has not opened it to independent evaluators ^[19]. The default retention window drops from 30 days to seven, a 23-day cut that departments can override ^[20][21][22]. Sharing between agencies moves from all-or-nothing to granular, so a department can permit searches for a homicide suspect but not for immigration enforcement, which again relies on the searching officer stating a truthful reason ^[23][24].

Commercially, NPR found in February that at least 30 cities had dropped Flock in the previous year, with the activist group DeFlock putting the figure higher ^[25][26]. Flock counters that cancellations are a small number against the 5,000 agencies it has contracted with ^[27], which works out to under one percent on those two figures, though cities and agencies are not the same unit ^[28]. Some jurisdictions are moving to Axon or Motorola instead ^[29]. The ACLU's Chad Marlow told MIT Technology Review the backlash is driven less by individual abuses than by the scale of surveillance the cameras enable ^[30].

Watch how many departments override the seven-day default, since the override is the same design choice that left Audit Assistance off at most agencies. Watch whether Flock publishes flag rates or lets an outside party test the audit model. And watch whether the cancelled contracts come back, because that is the only signal this rollout was priced to answer.