The Senate investigation covers a network of more than 120,000 AI-powered cameras that Flock Safety says produces over 20 billion vehicle scans each month.
Sen. Josh Hawley (R-Mo.) opened an investigation into who can search information collected by Flock Safety’s AI-powered license plate cameras and how the company retains, shares, and protects that data.
Hawley, chairman of the Senate Judiciary Subcommittee on Crime and Counterterrorism, requested written answers and company records by September 8.
Flock Safety sells automated license plate readers to police departments and other customers. Its cameras photograph passing vehicles and use AI to identify license plates and vehicle details. A scan can include a vehicle’s plate number, appearance, location, and the time it passed a camera.
Flock says its network includes more than 120,000 cameras across 49 states and produces over 20 billion vehicle scans each month.
Investigation focuses on access to Flock camera data
In a five-page letter to Flock Chief Executive Officer Garrett Langley, Hawley asked the company to explain when customers can search vehicle information across an entire state or nationwide and whether those search options are turned on by default or must be enabled separately.
He also requested details about how long Flock camera data is kept, how many customers retain it longer than Flock’s standard period, and whether Flock connects camera records with information from data brokers or other outside sources.
The requested documents cover data sharing with other police departments, federal agencies, foreign governments, private organizations, and data brokers. Hawley also asked whether Flock uses customer or third-party data to train its AI systems.
The investigation does not establish that Flock broke the law or that misuse is widespread. The company’s responses and the requested internal records have not been made public.
Hawley cites misuse and incorrect alerts
Hawley said reported incidents raised questions about whether existing controls can prevent or detect improper searches.
His letter cited a Missouri police department audit that found a civilian employee had searched Flock data for personal reasons. It also cited criminal charges against a Milwaukee police officer who allegedly searched repeatedly for vehicles connected to his girlfriend and her former boyfriend.
Hawley also pointed to reports of arrests and vehicle stops linked to incorrect matches. He asked Flock to disclose its measured accuracy, its false-alert rate, and every known incident since 2021 in which its systems or data were misused.
Flock Safety says it is strengthening safeguards
Flock announced several privacy and security changes on August 13, nearly two weeks before Hawley opened the investigation.
The company reduced its recommended default data-retention period from 30 days to seven days. Existing customers can keep their previously approved settings, while communities can choose different periods.
Flock also said all law enforcement customers will be required by the end of 2026 to use software that flags unusual searches for review. Users will be required to enter a case code connecting each search to an official law-enforcement matter. During an emergency, a search can proceed without one, but it will be flagged so an administrator can review it afterward.
The company plans to automatically suspend accounts when activity appears abnormal. It said multifactor authentication is now required for everyone accessing its system.
Flock said customers own the information collected by their cameras and decide who can access or receive it.
