ATLANTA — Flock is cutting its recommended default retention period for automated license plate reader data and will require law enforcement customers to use new safeguards designed to identify and prevent improper searches.
Law enforcement leaders across the country have strongly endorsed ALPRs as valuable crime-fighting tools. Marion Police Chief Jay McDonald called Flock “the biggest crime-fighting tool of my career” and warned that losing it would be “a serious blow to public safety.” Apache Junction Police Chief Michael Pooley called the technology a “force multiplier” that has allowed his department to “solve a lot of crime.” Chiefs and sheriffs have credited ALPRs with locating missing people, recovering stolen vehicles and identifying suspects in violent crimes throughout the country.
However, as the technology has expanded, community members have raised questions about how agencies retain and share ALPR data and monitor access to it. Several cities have ended or reconsidered their contracts over privacy, security and oversight concerns. Flock cameras have also become targets of vandalism.
CEO Garrett Langley announced the changes Aug. 13, presenting them as a response to those concerns.
“You’ve asked for stronger privacy, accountability, security and transparency. We’re listening, and today our CEO Garrett Langley is sharing the changes we’re making to keep raising the standard for public safety technology,” the company said on Facebook.
The changes affect data retention, information sharing, user audits, account security and contract language. For officers and agency administrators, the changes will mean mandatory case codes, automatic lockouts tied to abnormal activity and more control over which offenses other agencies may investigate using their camera data.
Seven-day default retention period
Flock said it is reducing its recommended default retention period for ALPR data from 30 days to seven.
The company said its analysis found that officers conduct more than 90% of searches without a complete license plate number within a week. Those searches allow officers to look for a vehicle using a partial plate or details such as its make, color, body style or distinctive features. Flock cited the finding as evidence that a seven-day window would preserve the data used in most investigations while reducing how long other plate records remain in the system.
Existing customers will keep the retention periods already approved in their jurisdictions, and communities may continue to select a different period.
For investigations that extend beyond seven days, Flock plans to introduce Evidence Mode in the coming weeks. The feature will allow detectives to preserve specific ALPR records connected to an active investigation instead of having them automatically deleted. It will be free for customers that adopt the seven-day recommendation.
Evidence Mode would require investigators to identify and preserve a relevant record before the retention period expires.
During an April hearing on proposed California ALPR legislation, the California Police Chiefs Association opposed even a 30-day limit, noting that sexual assaults, domestic violence, human trafficking and organized theft are not always reported immediately.
Case codes, audits and automatic lockouts will become mandatory
Flock will require all law enforcement customers to activate its Audit Assistance feature by the end of 2026. The tool analyzes user activity and flags unusual searches for review by an agency administrator.
The feature has been optional since April. Langley said more than one-third of customers have adopted it and that recent reviews were associated with the arrests of several officers accused of misusing the system.
Flock will also introduce proactive lockouts. A user whose activity meets the company’s criteria for abnormal behavior will automatically lose access until an administrator reviews the account.
“The goal is to intervene before misuse becomes recurring or widespread,” Langley stated.
Officers will be required to enter a case code for every search by the end of the year. Agencies may bypass the requirement during an emergency, but those searches will automatically be flagged for administrative review.
“Abuse of Flock technology, at any level, is unacceptable,” Langley wrote in the announcement.
Contract, security and transparency changes
Flock will publish a plain-language explanation of its contract the week of Aug. 17 after acknowledging that its wording had created confusion about data ownership. The company said customers own the information collected by their cameras and control how it is shared.
Multifactor authentication became mandatory for all Flock accounts in August. The company also hired cybersecurity firm Bishop Fox to review its products and plans to publish a summary of the findings and its remediation work in September. A new vulnerability disclosure program will give researchers a formal way to report security flaws.
Flock said more than 1,500 agencies have activated published Transparency Portals showing their policies, retention periods, sharing partners and search activity.
Flock responds to concerns about ALPR accuracy
Addressing a recent wrongful traffic stop involving an automotive journalist, Langley said officers must verify an ALPR alert before taking enforcement action.
“No stop should ever rest on an unverified alert standing alone,” he wrote.
Flock noted that its system compares both the plate number and issuing state with hot-list records, assigns a confidence score to each read and filters out low-confidence matches before sending an alert. The company reported fewer than nine human-reported errors for every 1 million alerts.
Flock also said its technology assists officers with more than 1 million crimes each year. Langley said the system detected more than 1,000 missing people and more than 20,000 stolen vehicles in July 2026 alone.