HomeMy WebLinkAbout07/21/2026 04.. Distributed at the MeetingAbout
Flock Safety Credibility Lost as it
Repeatedly Lies to City Councils,
Police Departments, and Public
Across the Country
Chad Marlow,
ACLU
TaY3Iardey
ACLU Speech, Privacy, and
Technology Project
Tracking ALPR Cameras
News Series
Share This Page
•
July 2, 2026
Issues « Our Work v News Take Action Shop
Distributed of ee
`,,tin
9
_ Item#_;
The ACLU documents how an automatic license plate reader company has lied
about its operations, signaling a need for reputable governments to avoid
working with Flock Safety.
During a city council meeting in a suburb of Wisconsin in April, the city of Oshkosh
considered whether it should approve a contract to use automatic license plate
readers (ALPR) from Flock Safety, a prominent company that provides. ALPRs to law
enforcement agencies across the country. During the meeting, one city council
member asked Flock if the company's ALPR system created heat maps that could
reveal where a particular vehicle had driven over a period of time. Flock's chief
information security officer, who was in attendance, told the council that Flock's
system did not "create a pattern or Twat neap of an individual ;s movement" through
the tracking of their vehicles. At the end of that meeting, the Oshkosh City Council
approved a contract with Flock. The very next morning, the city learned that Flock
bad lied.
Later that day, the city council reconvened to discuss what it had learned.
Confronting Flock, Oshkosh Deputy Mayor Joe Stephenson said "I don't know how
this body can govern if someone tells untruths, mistruths, exaggerated truths. I don't
know how I can make a decision or discern what's right or what's wrong, or even the
capabilities of this system if you lie to me."
"Shame on them; Oshkosh Mayor Matt Mugerauer added. "All I'm saying is if you
give bad information, then I just don't want to work with you."
Ultimately, the Oshkosh City Council voted to immediately revoke its approval,
thereby setting a record for the shortest rime between a city approving and
cancelling a Flock contract: one day.
Flock later admitted that its ALPR system does indeed produce a "heat map" that
shows where "point -in -time images have been captured of a vehicle" for up to an
entire month. However, the company chose to respond to the revocation of its
contract by attacking the City of Oshkosh and its city council, complaining that
Flock had "not [been] afforded the opportunity" to explain its lie after being caught.
Flock also sought to trivialize its factually inaccurate statement by categorizing it as
"one small misconception" and referring to the dispute over the system's heat map
tracking feature as "a minor nuance."
What happened in Oshkosh was not an isolated incident. Rather, it reflects a pattern
of Flock regularly misleading or even lying about its business practices, safety
record, commitment to privacy, and efforts to protect vulnerable populations. And
as was the case in Oshkosh, Flock's lies are not just directed at the general public;
they often specifically target Flock's potential government customers. The urgent
takeaway for government officials and police departments is that they should be
extremely hesitant to believe anything Flock's tells them about its company, its
products, or its commitment to safety and privacy.
Technology
Fight Creepy ALPR Cameras
Automatic license plate reader (ALPR)
companies like Finch Safety are quietly trying
to build i nationwide mass surveillance.,.
Flack's Pattern of Lies
This is far from the first rime Flock' has misled the public and elected officials. The
company has demonstrated a pattern of treating legitimate operational questions
and concerns not as problems to be solved, but rather as mere public relations
issues.
In Colorado, Loveland Police Chief Tim Doran raised concern that federal agents
were accessing the town's ALPR data. Flock responded by telling the chief that
federal agencies no longer had access to Loveland's license plate readers, and had
their CEO reiterate to the press that federal data sharing was a non -issue because
Flock had no federal contracts. After contradictory information later came to light,
the company was forced to admit that it did, in fact, have contracts with. U.S.
Customs and Border Protection (CBP) and Homeland Security (DHS) for pilot
projects that gave those agencies direct access to license data. "We clearly
communicated poorly," Flock's CEO, acknowledging that Flock's "public
statements inadvertently provided inaccurate information"
Last year, e o is revealed that, even in the absence of federal contracts, cooperating
police officers and departments were regularly sharing Flock ALPR data and search
results with immigration agencies like U.S. Immigration and Customs Enforcement
(ICE) and CBP. The company responded to the reports with a disingenuous kgg
entitled "Does Flock Share Data With ICE? No. Flock Does Not Work With ICE." In
its blog, the company pushed back by asserting that "ICE does not have direct access
to Flock cameras, systems, or data" and that license data is "owned and controlled by
the customer."
Flock knew that, despite not being a customer, ICE had indirect access to Flock's
data and system through the company's state and local law enforcement customers.
The issue was never about having direct access to Flock's data, it was about having
any access to the data. But rather than address these data security and control issues
on their merits, Flock released a misleading blog which reads as an attempt to
confuse the public and create a false sense of security among its potential
government customers. Ultimately, Flock was forced to accept that its denials were
simply not credible. The CEO admitted Flock was used for immigration enforcement
out argued Char sucn matters were not rlogt pros enl.
In May 2025, the press began reps2Ellg that Flock's ALPR system had been used by
law enforcement in at least one state, Texas, to track down a person seeking abortion
care in another state, Illinois. Flock sought to assuage concerns about its system
being used for cross -state abortion enforcement by unveiling "New Product
Solutions to Strengthen Compliance" led by its "Proactive Search Term Tool." In
describing this new tool, Flock wrote:
Flock
Products Solutions Privacy & Security Resources Company
New Product Solutions to
Strengthen Compliance
Proactive Search Term Tool (LaunchedJune 12, 2a25)
Immediately following these incidents, our Product team deployed a new safeguard that will block
4mpermissible searches from accessing Illinois data in real time° Here's how it works:
• Ail Flock system searches require a -search reason," This is part of our longstanding focus on
transparency and accountability
• if a search invoking lltuta camera altrta includes terms that indicate an impermissible purpose under
Illinois law, the Illinois data csiliautc a atic2+lly be excluded.
This proactive measure significantly reducestne risk of inadvertent misuse,
While Flock claimed its new oversight tool would "significantly" reduce the risk of
improper uses like abortion enforcement, in reality the tool doesn't work. As an
investigation by our colleagues at the ACLU of Massachusetts found, Flock network
audits showed police frequently enter vague terms like "investigation" or"susp"
instead of information about the substance of the investigation into the search
reason field. In September 2025 alone, a local Oregon police department was
Allowed to search Flock's ALPR system after entering "investigation" into the search
reason field 111 times and "hehehe" into the field on 20 occasions, which
demonstrates how easy it is to search Flock's system while avoiding security -
triggering words like "abortion." Flock certainly would have known, if it conducted
even a rudimentary test of its system, that the search field's protections were
extremely simple to circumvent. Nevertheless, Flock's financial interests appear to
have been better served by the company misrepresenting the efficacy of its security
features to the public and its potential ,government customers.
Flock Even Lies About Partnering with the ACLU
Flock has even made false claims to the public and elected officials about working
with the ACLU. Earlier this year, after the ACLU of New Mexico and Flock supported
the same state -level ALPR legislation — albeit for very different reasons — Flock's
Senior Director of Public Affairs took to social media to claim that Flock partnered
with the ACLU of New Mexico to craft the bill and pass it.
Trevor L.
ndleri.
+ Follow
in New Mexico, f^ftrek partnered with the ACLU of New Mexico and law
enforcement partners to craft a bill that balanced both community safety
and community values. It is important to note that public safety tech doesn't
only protect the public, but law enforcement themselves.
eracx.r,atery Aqlockcarncris tecnnorogy ,apu Tcsarcty vmock
https:J/InkdJn/gdhGhp5A
License Plate Readers save lives; lead to 'precise
policing': On anniversary of Officer Justin Hare'...
d Like
Trevor L. Chandler srmm�
J Repast T Send
ACLU NM, and ieearrigrant tights groups came together to pass a
serious data privacy bill. Don't believe the ideologues who say safety and privacy
can't be balanced,
t`m proud to work on is team that's engaging in
communities and privacy saiet
https://inkd>in/gMugxebk3
ty $flocksafety a'ftockcsmeras Flock
Driver Privacy and Safety Act (S13 43) Clears Legislature,
Heads to Governor's Desk - ACLU of New Mexico
This was not the first time the ACLU has caught Flock falsely claiming to have
worked with us. During an Urbana, Illinois City Council meeting in 2021, the
company told councilmembers 23 minutes into the discussion that "Flock has
worked with groups like the ACLU to design an ALPR system that takes
considerations they have into account?'
To be clear, neither the ACLU nor any of our affiliates have ever partnered with Flock
Safety or worked with them to design any ALPR system. As an organization that has
spent 106 years earning our good name and reputation, we can confidently advise
Flock that lying to the public and elected officials about your work and your
relationships is not how you get there.
Ultimately, reputable governments should not do business with disreputable
companies. While governments should think long and hard about not using ALPRs,
if local governments insist on doing so, at a bare minimum, they should adopt strong
guardrails governing future ALPR use - including strictly limiting data retention,
data sharing, and what crimes they can be used to enforce. And, of course, they
should refuse to partner with any company that regularly misleads the public,
elected officials, and even its own customers.