Flock Safety, a provider of automated license plate readers (ALPRs) widely used by law enforcement, is facing renewed scrutiny following reports that its camera network is capable of tracking people in addition to vehicles. While the company has historically marketed its devices as tools for identifying stolen cars and wanted suspects, a joint investigation by 404 Media and WIRED found that the on-device software explicitly includes models designed to detect people, bicycles, and license plates.
The technical capabilities of the system were highlighted after hackers reportedly removed a Flock camera from a roadway and recovered an encryption key from its storage. This allowed them to access video files that contradicted the company's claims regarding the extent of its on-device encryption. Although researchers found no evidence that facial recognition features were actively deployed, the ability to record repeated sightings of individuals allows for the mapping of sensitive movement patterns, such as where a person lives, works, or seeks medical care.
Separate from the technical findings, public records have exposed that Flock created a fake police department account, dubbed “Flock City PD,” to conduct searches on live cameras during sales demonstrations. Audit logs indicate that this account performed searches for politically sensitive topics, including religious symbols, political bumper stickers, and individuals wearing masks. Flock stated that these searches were intended to demonstrate the effectiveness of its moderation tools and guardrails, noting that some queries were blocked or triggered warning prompts.
The use of these cameras has also sparked internal labor disputes. In Washington, D.C., the police union reported that the Metropolitan Police Department utilized Flock data to track officers under internal affairs investigation without their knowledge. The department defended the practice as appropriate for misconduct investigations, though the union has challenged the lack of transparent rules governing such surveillance. This incident has raised broader questions about the potential for the system to be used for monitoring residents, journalists, and activists without clear oversight.
In response to the backlash, Flock Safety has stated that the “Flock City PD” demo environment is now isolated from real-world cameras and that law enforcement agencies cannot establish sharing relationships with it. The company maintains that its moderation policies are designed to flag or block searches that implicate First Amendment protections or involve sensitive content. However, critics argue that the reliance on vendor-configured settings and internal audit logs is insufficient to protect civil liberties, calling for more robust public oversight and stricter limits on data retention and cross-jurisdictional sharing.