Flock tightens privacy, accountability safeguards for ALPR platform

AUSTIN, Texas—Flock Safety announced a series of updates to its automatic license plate recognition (ALPR) platform, including a shorter recommended data retention period, expanded audit requirements and new security measures aimed at strengthening privacy, accountability and transparency.

In an Aug. 13 blog post, CEO Garrett Langley said the company is changing its recommended and default ALPR data retention period from 30 days to seven days and will introduce a new feature called “Evidence Mode” that allows detectives to preserve specific data tied to active investigations.

According to Flock, more than 90% of searches that do not include a full license plate number occur within a week. Existing customers will retain their current data retention policies, while agencies that adopt the seven-day recommendation will receive Evidence Mode at no additional cost.

The company also announced new offense-based data-sharing controls that allow agencies to limit the types of investigations for which outside law enforcement agencies can access camera data.  

As an example, Flock said a city could allow searches related to stolen vehicles, missing persons or violent crimes while restricting access for immigration enforcement-related searches.

On the accountability front, Flock will require all law enforcement customers to adopt its Audit Assistance feature by the end of the year. The tool is designed to detect abnormal system activity and flag it for administrator review. The company also plans to implement automatic account lockouts when user behavior meets predefined criteria for potential misuse.

In addition, Flock said it will require case codes for all law enforcement searches by year-end, though agencies will be able to bypass the requirement during emergencies. Those searches will be flagged for administrative review.

Langley said the changes build on safeguards the company has developed over the past nine years and follow recent incidents in which law enforcement officers allegedly misused the technology.

Flock also outlined several cybersecurity initiatives, including mandatory multi-factor authentication for all users, a forthcoming independent security assessment summary from cybersecurity firm Bishop Fox, and the launch of a Coordinated Vulnerability Disclosure program for security researchers.

The company reiterated that customers retain ownership and control of data collected through Flock cameras and said it plans to publish a plain-language explanation of its contract terms to clarify those rights.

“These changes reflect years of work and deliberation,” Langley wrote. “They are not the end of that work, but simply the continuation of our commitment to both safety and privacy.” 

Related: Flock Safety introduces Audit Assistance tool for accountable public safety technology