Flock CEO: 'We got this one wrong'
Flock is making its "Audit Assistance" feature mandatory, which flags abnormal search behavior and locks out suspicious users pending admin review The company is reducing default data retention from ALPRs from 30 days to 7 days, aligning more closely with ACLU recommendations Flock is introducing granular data-sharing controls, allowing agencies to set specific limits on what other departments can access CEO Garrett Langley has shifted from a combative stance toward critics to acknowledging the
Analysis
TL;DR
- Flock is making its "Audit Assistance" feature mandatory, which flags abnormal search behavior and locks out suspicious users pending admin review
- The company is reducing default data retention from ALPRs from 30 days to 7 days, aligning more closely with ACLU recommendations
- Flock is introducing granular data-sharing controls, allowing agencies to set specific limits on what other departments can access
- CEO Garrett Langley has shifted from a combative stance toward critics to acknowledging the company's responsibility in preventing misuse
- These changes follow high-profile cases of officers using Flock's tools to stalk ex-partners, including 500+ searches of an ex-girlfriend's license plate
Why It Matters
This case illustrates the growing tension between surveillance technology vendors and civil liberties advocates, marking a turning point where a company is taking proactive responsibility rather than deferring to slow-moving regulation. For AI and surveillance practitioners, it underscores that voluntary safety features are insufficient—mandatory guardrails are becoming an industry expectation. The shift also highlights how public backlash and documented abuse can force rapid policy changes in the surveillance tech sector.
Technical Details
- Audit Assistance: Previously optional, now mandatory; automatically detects abnormal search patterns and locks out flagged users until an administrator reviews the activity
- Data Retention: Default ALPR data retention shortened from 30 days to 7 days; agencies can extend this or use "Evidence Mode" to preserve case-linked data
- Granular Data Sharing: Replaces all-or-nothing inter-agency data sharing with customizable permissions (e.g., allowing homicide searches but blocking immigration enforcement access)
- Override Mechanism: Case codes are now required for searches, with admin override available for emergencies like missing child cases, but such overrides are automatically flagged for review
- Abuse Detection Correlation: Agencies that voluntarily enabled Audit Assistance saw a predictable increase in identified abuse cases, validating the system's effectiveness
Industry Insight
- Mandatory vs. Voluntary Safeguards: The failure of voluntary adoption (only one-third of agencies enabled Audit Assistance) demonstrates that privacy-preserving features must be default and mandatory to be effective—this should inform product design across surveillance tech
- Regulatory Lag Creates Liability: Companies cannot indefinitely defer responsibility to lawmakers; as regulation stalls, public pressure will force vendor-led accountability measures, creating both risk and competitive advantage for early adopters
- Transparency as Trust-Building: Langley's acknowledgment of the company's "sheer impact" and obligation suggests a broader industry shift toward proactive responsibility narratives, which may become a differentiator as scrutiny of policing technologies intensifies
Disclaimer: The above content is generated by AI and is for reference only.