Every time your car rolls past a certain kind of pole-mounted camera, a quiet transaction happens without your knowledge. A read. A log. A timestamp. Flock Safety runs more than 120,000 of those cameras across 49 states, serving roughly 6,000 law enforcement agencies and about 1,000 private customers. Now, after sustained backlash over alleged misuse, the company is announcing new privacy guardrails. The central question isn’t whether the changes are real. It’s whether they’re enough — and who, exactly, gets to make that call.
New Rules, Same Network
Flock is tightening its defaults, but the underlying architecture — and its reach — stays intact.
The policy shifts are concrete. Default data retention drops from 30 days to 7 days. Every search now requires a mandatory case code. Audit logs become standard. Customers gain control over which offense types outside agencies can query, and anomalous search behavior can trigger automatic user blocks. According to Bloomberg, Flock says these changes exceed what most states currently require — a reminder that the regulatory floor here is remarkably low.
- Default retention: 30 days → 7 days
- Mandatory case codes for every search
- Required audit logs
- Customer-controlled access by offense type
- Abnormal search behavior triggers user blocks
“We’re not Big Brother,” CEO Garrett Langley said.
What the Guardrails Don’t Fix
Tighter defaults can’t retroactively address documented allegations — or fill the gap left by absent external oversight.
Documented allegations against ALPR systems include officers using the tools for stalking, immigration-related searches, tracking protesters, and monitoring individuals seeking abortions. The EFF has previously described systems like Flock’s as “susceptible to grave abuses.” Community backlash has already produced contract cancellations, and some residents have resorted to physically destroying cameras — a form of protest that tends to go viral for a reason.
None of the new rules retroactively address those incidents. And none introduce independent external oversight. The audit logs exist, but Flock reviews them.
The Revenue Problem With Pure Principle
A company valued at $8.3 billion and expanding into drones and audio detection doesn’t reform itself out of altruism.
Flock’s revenue run rate jumped from $300 million to $500 million in a single year. Backed by over $1 billion in venture capital — including Andreessen Horowitz — the company raised a $200 million equity round and $300 million in venture debt this year alone, reaching an $8.3 billion valuation. Newer products like surveillance drones, mobile trailers, and audio detection systems are now major growth drivers. Privacy reforms help defend contracts and reassure cautious municipal buyers. That’s not a cynical observation; that’s a business strategy.
Flock maintains that misuse represents a small fraction of active users, that it doesn’t sell customer data, and that its system has helped locate missing children and apprehend suspects. Those facts coexist with the documented abuse allegations. Both things are true simultaneously — which is precisely what makes this story uncomfortable to resolve neatly.
The network keeps expanding into a fragmented regulatory landscape where these new rules only apply where customers actually implement them. The real question worth sitting with: if Flock is doing the watching, and Flock is doing the auditing, who’s watching Flock?
