Flock cuts plate-read retention to seven days, and admits defaults beat policy
The licence plate reader company is making most of its new safeguards mandatory on 1 January, after its chief executive conceded that optional abuse controls sat unused at two-thirds of agencies.
The Product Desk
What happened
- Flock Safety chief executive Garrett Langley set out the privacy and accountability package in a post on Flock's own blog on 13 August.
- Most of the Flock Safety privacy changes become mandatory for law enforcement customers on 1 January, the Associated Press reported.
- The default holding period for number plate reads drops from 30 days to seven days.
- Flock's stated reason for the retention change is its own usage data: officers finish more than 90% of searches without a full plate within a week.
- A feature called Evidence Mode lets detectives preserve specific data for active investigations. It rolls out in the coming weeks and is free for customers who adopt the seven-day window.
Why it matters
Flock Safety is cutting the default holding period for licence plate reads from 30 days to seven, and making most of the package its chief executive Garrett Langley published on 13 August mandatory for law enforcement customers on 1 January [4][14][3]. The consequential part is not the number. It is the concession underneath it: the company that spent a year offering abuse controls as free options now says the options were the problem [7][8].
The retention cut removes 23 days of history, about 77 percent of the default window [20]. Flock's stated justification is its own telemetry: officers finish more than 90 percent of searches without a full plate within a week [21]. A feature called Evidence Mode, rolling out in the coming weeks, lets detectives preserve specific data for active investigations, and is free for customers "who adopt the seven-day window" [5]. That phrasing is worth reading twice. A default is not a ceiling, and the free tooling is framed as an inducement to accept the shorter period rather than a consequence of it [5].
The adoption numbers explain the shift to compulsion. Audit Assistance, which flags abnormal activity for administrator review and can suspend access automatically pending that review, launched 16 weeks ago as a free option [1][2]. Roughly a third of agencies had switched it on [1], meaning about two-thirds had not [19]. According to Ars Technica, one Georgia sheriff's office turned the tool on and then arrested three officers who were separately using Flock cameras to stalk acquaintances, and Flock says identification of abuse "predictably went up" at agencies that activated it [12][13]. Case codes followed the same arc: introduced as an option in July 2025, resisted as a requirement, now required [6][7]. Langley told Engadget it was "such an obvious way to curb abuse" and that "we got this one wrong" [8].
The requirement has a hole in it. MIT Technology Review reports that Flock will not verify the case numbers officers enter, so the control is a paper trail rather than a gate [9]. That matters because the paper trail is what the automated auditing reads.
The pressure came from documented harm, not from a product roadmap. The Washington Post counted nearly 50 instances of officers charged or accused of unauthorised use, most of them tracking current or former partners or family members [10]. Savannah Police Department dismissed six employees this month, four of them officers, after finding the searches through Flock's voluntary audit function [11]. Langley told CBS News, of a woman who said the technology was used to stalk her, "I apologize. It kills me that she went through that" [17].
Critics are not persuaded that instrumentation is the fix. The ACLU called the measures retreads of inadequate safeguards while allowing the shorter retention window may be a step in the right direction, and wants an independent evaluator, saying there is "no evidence that the tool works consistently" [15][18]. Robert Frommer of the Institute for Justice told the Associated Press it was "window dressing that doesn't address the fundamental problem", because officers still decide who gets searched and when [16].
Three things to watch. Whether the Bishop Fox security review summary, due in September, is specific enough to check [22]. Whether Flock publishes lockout and false-positive rates for Audit Assistance, or lets an outside evaluator do it [18]. And what the transparency portals at more than 1,500 agencies actually show as retention periods after 1 January, since that is the only public record of whether the new default held [23][14].
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence70
- Adoption35
- Hype gap+35
- Incentives70
- Confidence65
Perspective Coverage
7 publishers- Builder
- Builder 32%
- Operator
- Operator 47%
- Investor
- Investor 21%
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
Audit Assistance flags abnormal activity for an administrator to review. It launched 16 weeks ago and more than a third of customers now use it; it becomes compulsory for every law enforcement customer by the end of the year. Ars Technica reports it has been available as an optional free feature since April and that only a third of agencies had opted in.
- [2]
A related Proactive Lockout suspends access automatically when user activity meets defined criteria for abnormal behaviour, and the suspension can only be lifted by administrator review.
- [3]
The default holding period for number plate reads drops from 30 days to seven days.
- [4]
Flock Safety chief executive Garrett Langley set out the privacy and accountability package in a post on Flock's own blog on 13 August.
- [5]
A feature called Evidence Mode lets detectives preserve specific data for active investigations. It rolls out in the coming weeks and is free for customers who adopt the seven-day window.
- [6]
Under the case codes requirement, officers must attach a records management code to a search before running it, with emergency bypasses flagged for review.
- [7]
Flock introduced case codes as an option in July 2025, and Langley told Engadget he had resisted making them a requirement.
- [8]
Langley said of case codes: "This is such an obvious way to curb abuse", and added that "we got this one wrong".
- [9]
MIT Technology Review reports that because Flock will not verify the criminal case numbers officers enter before searching, officers could still find ways around the safeguards.
- [10]
The Washington Post documented nearly 50 instances of officers charged or accused of unauthorised use of the technology, most involving tracking current or former partners or family members.
- [11]
Savannah Police Department sacked six employees this month, four of them officers, and the department found the searches through Flock's own voluntary audit function.
- [12]
After a single Georgia sheriff's office used the audit tool it subsequently arrested three officers who were separately using Flock cameras to stalk acquaintances; Langley told The Verge that dozens of such incidents helped the company realise it had made a mistake.
- [13]
According to Flock, identification of abuse "predictably went up" for agencies that chose to activate the audit tool.
- [14]
Most of the Flock Safety privacy changes become mandatory for law enforcement customers on 1 January, the Associated Press reported.
- [15]
The American Civil Liberties Union called the measures retreads of inadequate safeguards, while allowing that the shorter retention window may be a step in the right direction.
- [16]
Robert Frommer of the Institute for Justice told the Associated Press the package was "window dressing that doesn't address the fundamental problem", saying police officers are the ones deciding who and when to search and that the decision should sit with judges and real warrants.
- [17]
Langley told CBS News, of a woman who told the Washington Post that someone used the technology to stalk her, "I apologize. It kills me that she went through that", and added that the company could have done more earlier.
- [18]
Experts caution there is no data showing how well the audit tool detects malicious activity; the ACLU recommended an independent evaluator review Flock's tech, warned there is "no evidence that the tool works consistently", and said "We don't know if the tool is a real security measure or just window dressing."
- [19]
If only about a third of agencies had opted in to the audit tool, about two-thirds had not adopted it voluntarily.
- [20]
Cutting the default retention window from 30 days to seven removes 23 days, a reduction of about 77 percent.
- [21]
Flock's stated reason for the retention change is its own usage data: officers finish more than 90% of searches without a full plate within a week.
- [22]
Flock commissioned the security firm Bishop Fox to review its systems this year, and a summary of the findings and the fixes publishes in September.
- [23]
More than 1,500 agencies publish a transparency portal showing their policy, retention period and sharing partners.
Sources
7 independent publishers whose own reporting we read for this story.
- arstechnica.comFlock “can’t tech its way out” of the stalker cop problem, experts say
1 article · August 13, 2026
- fastcompany.comWhy we love to hate Flock
1 article · August 14, 2026
- gizmodo.comFlock is Trying to Find Out How Much of the Surveillance State You’ll Tolerate
1 article · August 13, 2026
- techcrunch.comFlock says its new tool will help identify police abuse, but hasn’t explained how it works
1 article · August 13, 2026
- technologyreview.comThe Download: Flock’s new rules, cloning’s future, and children’s cells
1 article · August 14, 2026
- thenextweb.comFlock Safety cuts data retention to seven days after dozens of police abuse cases
1 article · August 14, 2026
- theverge.comThe fight over Flock and other ALPRs
1 article · August 13, 2026