Flock CEO concedes error, mandates case codes and search audits
This digest was compiled by AI from multiple sources — links to the originals are below.
Flock CEO Garrett Langley acknowledged the company 'got this one wrong' and announced new controls on its surveillance tools after reports of police stalking and harassment. The changes, to be implemented over the coming weeks, will require case codes for searches, make Audit Assistance mandatory for all users, and shorten default license plate data retention from 30 to seven days. The ACLU responded that the measures appear more focused on PR than harms, though it called shorter retention a potential step in the right direction.
Key Facts
- Flock will make Audit Assistance mandatory for all users, turning on a previously optional feature that flags abnormal search behavior and locks accounts until an administrator reviews activity.
- Every search will require a case code, with an administrator override for emergencies such as a missing child that is automatically flagged for review.
- Flock will shorten the default retention period for automatic license plate reader data from 30 days to seven days, while police departments can extend retention or use Evidence Mode tied to a case number.
- Localities will be able to set granular sharing limits, such as allowing another agency to search Flock data for a homicide suspect but not access it for immigration enforcement.
- The ACLU said Flock's changes appear 'more focused on addressing a perceived PR problem than the significant harms' and called for independent review of the audit tools.
Search and Audit Requirements
Flock will begin implementing the new search controls over the coming weeks. Audit Assistance, previously optional, will become mandatory and will flag abnormal search behavior and lock accounts until an administrator reviews activity. Every user must enter a case code to run a search, a change meant to curtail personal or nefarious queries. Administrators can override the case-code requirement for emergencies such as a missing child, and each override is automatically flagged for review. CEO Garrett Langley told The Verge that requiring case codes was 'an obvious way to curb abuse' and said, 'We got this one wrong.'
Data Retention and Sharing Limits
Flock is shortening the default retention period for automatic license plate reader data from 30 days to seven days. The seven-day default moves closer to the limit recommended by the American Civil Liberties Union. Police departments can still choose a longer retention period or use the new Evidence Mode, which preserves searches tied to a specific case number. Localities will be able to set granular sharing limits after previously sharing data with other agencies on an all-or-nothing basis. For example, one agency could allow another department to search its Flock data for a homicide suspect but not access it for immigration enforcement.
ACLU Response
The American Civil Liberties Union released an analysis after Flock announced the updates. The group said the changes appear 'more focused on addressing a perceived PR problem than the significant harms its products create.' It called the shorter data retention period a potential 'step in the right direction,' but said the real effect will depend on how Evidence Mode is implemented. The ACLU also called for independent review of Flock's auditing and search-reason requirement tools to determine how effective they really are.
1 source
Flock CEO concedes error, mandates case codes and search audits
