Flock's Real Admission Is Not About Cops. It Is About Defaults.

Flock Safety is converting two optional abuse controls into mandatory ones: Audit Assistance, which flags "abnormal search behavior" and locks out suspicious users until an administrator reviews their activity, and case codes, which officers must now enter to run a search ^[2][3]. The interesting part is not the features, which already existed, but the concession underneath the change: the misuse brakes shipped switched off, and each customer decided whether to use them ^[2].

CEO Garrett Langley announced the package on August 13, 2026, describing it as a new standard for privacy, security and accountability in public safety ^[4]. His account of the case-code decision, given to The Verge, is more informative than the framing: "This is such an obvious way to curb abuse," he said, adding, "I think that's right, and we got this one wrong. We should make it a requirement" ^[5]. That is a statement about a configuration default, not about police training or state law. For years the standard industry answer to Flock-enabled stalking was that agencies set their own policies. This week's change relocates part of the failure to the product.

Only part. Both mechanisms end at an administrator's discretion: the case-code requirement can be overridden by an administrator in certain scenarios ^[3], and an Audit Assistance lockout is cleared by an administrator's review ^[2]. Neither control constrains searches that are logged, coded and authorised, which is where the most contested uses sit. The ACLU and the Electronic Frontier Foundation have accused Flock of misleading the public about what the cameras can do ^[6]. There are allegations the cameras were used to track a woman seeking an abortion ^[7], and police have used them to track people travelling between states to buy marijuana where it is legal ^[8]. Multiple reports say Flock data has been shared with ICE; Langley's response was that "if the state of Texas wants to enforce immigration, they might use Flock, but they're gonna go enforce immigration no matter what Flock does" ^[9]. At least 24 people have reportedly died in ICE custody in 2026 ^[10]. A case code field does not address any of that.

The retention change is where the optional-versus-mandatory pattern repeats. Default licence plate reader retention drops from 30 days to a week, a cut of roughly 77 percent ^[11][12], with exceptions for cases that take longer, such as an active investigation in cold storage ^[11]. But it applies to new customers; existing customers keep their current, "democratically approved" retention periods ^[13]. The installed base, in other words, is grandfathered into the old default.

Timing is the other cost. Reports of officers using Flock to stalk people date to 2021, five years before the controls became compulsory ^[14][15], and the company turns 10 next year ^[16]. Langley, who once called a website tracking the cameras "terroristic" and has since apologised, told The Verge, "All I guess I'm asking for is for a fair shot," and that it took him longer than it should have to realise the company's impact ^[17][18]. Meanwhile agencies in Los Angeles have severed ties ^[19], cameras have been vandalised, destroyed or stolen around the country ^[20], and one Minnesota town found its entire stock gone overnight, with the police department declining to replace them ^[21].

Watch three numbers: how often administrators override the case-code requirement, whether Audit Assistance lockouts produce actual discipline rather than a click-through, and how many grandfathered customers voluntarily move to the seven-day retention default. If the overrides are routine, the mandatory setting is a log entry, not a control.