The short version
- Flock is making its Audit Assistance feature mandatory for all users, requiring case codes for searches and automatically locking out accounts exhibiting abnormal behavior patterns.
- The company has reduced the default data retention period for license plate reader information from thirty days to seven days, though agencies can still opt for longer storage under specific evidence protocols.
- Civil liberties organizations remain skeptical of the changes, arguing that independent verification is necessary to determine if these measures effectively prevent misuse rather than simply managing public perception.
Flock, a major provider of surveillance technology to law enforcement agencies, has announced significant updates to its platform designed to curb the misuse of its tools by police officers. The changes come in response to widespread reports detailing how officers across the United States have exploited the company’s systems to stalk former romantic partners and conduct unauthorized personal investigations. CEO Garrett Langley acknowledged that the company previously underestimated its responsibility for how law enforcement utilizes its technology, stating that Flock got this aspect of oversight wrong.
The most substantial change involves the mandatory implementation of a feature known as Audit Assistance. Previously optional, this tool will now be required for all users. It is designed to flag abnormal search behavior and immediately suspend access for suspicious accounts until an administrator reviews the activity. Additionally, officers will be required to enter specific case codes before running any searches. This measure aims to limit the ability of personnel to query data for personal or nefarious purposes without official justification.
Administrators retain the ability to override the case code requirement in emergency situations, such as tracking a missing child. However, any such overrides will automatically be flagged for subsequent review. Langley noted that this approach offers an obvious method to curb abuse and acknowledged that the regulatory process moves too slowly for lawmakers to craft necessary policies on their own. Consequently, Flock is taking direct action to enforce these guardrails rather than waiting for external legislation.
Data retention policies are also being tightened. The default period for storing data from devices like automatic license plate readers will drop from thirty days to seven days. This adjustment aligns more closely with limits suggested by critics, including the American Civil Liberties Union. While police departments can still choose to extend this retention period, they must do so explicitly. A new Evidence Mode will allow agencies to preserve searches tied to specific case numbers, ensuring that data relevant to active investigations is not lost while reducing the volume of indiscriminately stored information.
The company is also introducing more granular controls for data sharing between localities. Previously, agencies could share data on an all-or-nothing basis. Under the new system, departments can set specific limits, such as allowing another police department to search their Flock data for a homicide suspect while blocking access for immigration enforcement purposes. This shift allows for more precise cooperation between agencies without compromising broader privacy standards.
These updates follow a series of high-profile incidents involving alleged misuse of Flock’s technology. In Braselton, Georgia, a police chief reportedly searched his ex-girlfriend’s license plate more than five hundred times over seven months. Similarly, California prosecutors alleged that a former Riverside County Sheriff’s Office deputy used Flock data to stalk and harass his ex-girlfriend by looking up information on men she was dating. Reports of such abuse date back to 2021, but recent incidents have brought the issue into sharper public focus.
Critics remain cautious about the effectiveness of these changes. The ACLU released an analysis suggesting that the updates appear more focused on addressing a perceived public relations problem than on mitigating the significant harms caused by the products. While the shorter data retention period was called a potential step in the right direction, the organization emphasized that the reality will depend heavily on how Evidence Mode is implemented. They also called for independent review of Flock’s auditing tools to determine their actual efficacy.
Langley’s tone toward critics has softened significantly compared to previous years. He previously characterized DeFlock, a site tracking Flock’s technologies, as a terroristic group, but later apologized for that characterization. The Electronic Frontier Foundation and other groups have accused Flock of misleading the public about the risks of its tools, including potential uses for tracking women seeking abortions. Langley stated that his approach has evolved due to frequent engagement with these concerns, though he maintains that officers are prohibited from conducting searches related to reproductive care in states where such actions are restricted.
The company predicts that the mandatory nature of Audit Assistance will lead to more officers being fired or arrested for abusing police power. Langley argued that the tool makes it easier to surface suspect behavior without requiring departments to manually comb through thousands of lines of logs. Only a third of agencies had voluntarily enabled the feature since its launch in April, but identification of abuse predictably increased among those who did. The coming weeks will test whether these technical adjustments can effectively prevent misuse or if they merely serve as superficial compliance measures.
As Flock rolls out these updates, the broader question of surveillance accountability remains unresolved. While the company has taken steps to internalize oversight, civil liberties advocates argue that true protection requires independent verification and stricter legal frameworks. The effectiveness of case code requirements and automated flags will depend on rigorous enforcement by agency administrators and continued scrutiny from external watchdogs. The incident highlights the ongoing tension between law enforcement efficiency and individual privacy rights in an era of advanced digital surveillance.
Sources behind this briefing
Go to the original reporting
- The Verge↗Flock CEO: ‘We got this one wrong’
