Who Pays for Flock?
Flock leases each camera for roughly $3,000 per year. The math doesn't add up. The company is valued at $8.4 billion. That gap is the entire story.
Oklahoma City pays Flock approximately $3,000 per camera per year for hardware, mounting, batteries, cell service, solar panels, and maintenance.[1] Across Flock's claimed deployment of more than 100,000 cameras serving over 5,000 agencies,[2] that works out to roughly $120-150 million in annual camera-leasing revenue.
In April 2026, the company was valued at $8.4 billion.[3]
The investor profile confirms the framing. Flock's lead investor is Andreessen Horowitz, which has put nearly $1 billion into the company.[4] A16Z's portfolio is dominated by data infrastructure and AI plays - Databricks, Snowflake, Scale AI, Palantir-adjacent ventures. They are not known for investing in security camera leasing companies. They invest in data platforms.
So either A16Z is wildly overpaying (unlikely - they have a long track record), or camera leasing fees are a loss leader for a much larger data business that has not been disclosed to the cities being surveilled.
And the investor's proximity to federal power is no longer theoretical. On June 29, 2026, Marc Andreessen was appointed to the Pentagon's Defense Policy Board - the advisory panel that counsels the Department's top civilian leadership on strategy and force structure. Bloomberg and InsideDefense covered the appointment; reporting also noted the Pentagon has published no financial disclosure requirements for the new board. The largest investor in the country's largest private surveillance network now advises the federal defense establishment, while his firm holds positions in Flock, Anduril, Skydio, and a portfolio of defense-tech companies with Department of Defense contracts. For every city asking "could the federal government ever get access to this network?" - the network's principal owner now has a standing seat at the federal table.
The data fusion product
The clearest evidence of where Flock is actually headed is their newer product, Flock Nova. In April 2025, 404 Media reported that Flock Nova was being built to combine ALPR data with third-party data, including data obtained from large-scale hacks and security breaches.[5] After the story ran, Flock announced it would stop using illegally obtained data.[6] The architecture of the product - a fusion platform joining ALPR data with external sources - remains.
Flock markets Nova as "one click, one case solved", querying:
- ALPR camera images and metadata
- Computer-aided dispatch (CAD) records
- Criminal records databases
- Video surveillance feeds (their own and third-party)
- "Third-party data acquired by Flock Safety"
That last category - "third-party data acquired by Flock Safety" - is the business model. The cameras generate the raw input. The data fusion platform is what gets sold.
Who is actually buying?
Flock does not publish a list of its data customers. Based on documented incidents and industry patterns, the candidates include:
Federal agencies. In Mountain View, California, the ATF, Air Force, and GSA Inspector General accessed local Flock data for 17 months without local police knowledge or approval.[7] Flock data has been queried for immigration-related searches over a thousand times in Denver alone.[8] The platform is designed to integrate with federal law enforcement systems.
Insurance companies. Vehicle location patterns are directly convertible into auto and home insurance risk pricing. Major insurers already buy vehicle telematics data; ALPR data is the next layer.
Other data brokers. Movement data joined with shopping data, employment data, and credit data produces extremely precise individual profiles. Data brokers are Flock's investor profile's primary business.
Retailers and HOAs. Companies and homeowners associations that host Flock cameras on private property are themselves customers of analytics derived from those cameras.
What this means for Oklahoma City
Oklahoma City pays Flock roughly $270,000 a year for 90 cameras.[9] That money buys the surveillance. It does not buy any visibility into who else is accessing the resulting data, what it is being used for, or who is paying Flock the difference between $270,000 and the share of an $8.4 billion valuation that OKC's data contributes.
Before the next contract renewal vote, the question Oklahoma City Council must answer is not just "is this system effective?", but also "do we know who else is buying the data we're paying to generate?"
- Per-camera cost derived from OKC contract documents. Master Agreement C241032 and Renewal Letters available on our Documents page. $270,000 annual fee ÷ 90 cameras = $3,000/camera/year.
- Flock Safety company statements and press releases citing customer count, including coverage in Tech Startups, April 2026.
- "Flock Safety Hits $8.4 Billion Valuation as AI-Powered Police Tech Sparks Nationwide Protests" - Tech Startups, April 17, 2026.
- A16Z investment confirmed in same Tech Startups article and prior Axios/The Information reporting. Investor portfolio context: a16z.com/portfolio.
- 404 Media investigation into Flock Nova's data sources. See also independent reporting referenced by Benn Jordan.
- Flock Safety statement following 404 Media reporting: "Correcting the Record: Flock Nova Will Not Supply Dark Web Data".
- "Mountain View police recommend terminating license plate camera contract" - Mountain View Voice, February 2026.
- Reporting on Denver Flock query volumes for immigration-related searches. See ACLU of Colorado and Colorado Sun coverage (February 2026) documenting 1,400+ immigration-related Flock searches in Denver since 2024. Broader context in EFF's 2025 in Review.
- City of Oklahoma City Procurement records. See Master Agreement and Renewal Letters on the Documents page.
The Company Behind the Cameras
When the same company gets caught lying in council chambers, lying in marketing materials, lying about security, and lying about who can access the data - the pattern stops being a series of unfortunate incidents and starts being a business strategy.
The public debate around Flock often starts with "is the technology good or bad?" That's the wrong question. The right question is whether the company building, selling, and operating this technology has earned the trust required to do so. The evidence is now substantial that it has not.
The Oshkosh moment
In April 2026, Oshkosh, Wisconsin's city council approved a Flock contract on a Tuesday and rescinded it less than 24 hours later after the Police Chief discovered that Flock representatives had given the council false information during the deliberation.[1]
A council member specifically asked whether the system creates "a pattern or heat map of an individual's movement." The Flock representative answered "no." That answer was demonstrably false. Flock's own platform contains a feature literally called a "heat map" that displays where a vehicle has been detected over a 30-day retention window. Flock's later "clarification" was that they don't track individuals, they track vehicles - as though the people inside those vehicles are not the point of the surveillance.[2]
Oshkosh Police Chief Dean Smith's response was unambiguous:
A council member added: "I don't know how I can make a decision or discern what's right and what's wrong, or even the capabilities of the system if you lie to me."[1]
The CEO's response to scrutiny
In December 2025, Flock CEO Garrett Langley sent an unsolicited email to law enforcement agencies nationwide. Its opening line:
Later in the same email, Langley named the attackers as "the same activist groups who want to defund the police, weaken public safety, and normalize lawlessness."
Langley went on to characterize independent journalism and public records requests as weapons used "against you and against us."[3]
"Terroristic organizations"
The email was not the ceiling. In 2025, in recorded remarks first documented by Forbes, Langley described DeFlock - the volunteer open-source project that maps camera locations from public roads, the same project whose map this site cites - in these terms:
DeFlock is a mapping project. Its contributors photograph camera poles from public rights-of-way and put pins on a map - the same activity Flock says is perfectly legal when its cameras do it to every driver in America. In July 2026, after the clip recirculated in a widely-viewed Benn Jordan / Tommy G investigation and drew criticism from across the political spectrum, Langley apologized through Forbes: "My comments were a mistake and I apologize." Gizmodo and IPVM covered the apology.
The apology confirms the quote is authentic. And the quote tells every city council in the country exactly how this vendor views public oversight: residents who document where the cameras are, sign petitions, and speak at council meetings are, in the CEO's own words, adjacent to terrorists. This site is part of the national DeFlock movement. Every OKC resident who has stood up at a council meeting is who he was talking about.
The "coordinated attack" he was describing consisted of:
- Security researchers publishing documented vulnerabilities (numerous CVEs in NIST's National Vulnerability Database)[4]
- Journalists at 404 Media, the EFF, NPR, and elsewhere reporting on the company's products and behavior
- Citizens filing public records requests through standard legal channels
- Independent investigators publishing findings on YouTube
The Staunton, Virginia Police Chief, Jim Williams, wrote back. After noting that his constituents were raising legitimate concerns about whether the system was being used to surveil private citizens for "nefarious purposes," he closed with:
Staunton terminated its Flock contract.[5]
The opacity playbook
When confronted with public scrutiny, Flock's documented responses include:
Sending cease-and-desist letters to community researchers. Flock sent a C&D to DeFlock.me, a community-run mapping project, claiming trademark dilution. EFF and the project's creator publicly refused the demand. The map remains online.[6]
Blocking the Internet Archive. Flock's master terms of service block the Wayback Machine from archiving the page, making it impossible for cities to track contract changes over time. We know this because the February 2026 contract update was caught only by third-party analysis - not by archived comparison.[7]
Rewriting contracts quietly. In February 2026, Flock made 147 changes to their standard master agreement. The most consequential: they deleted the clause stating "Flock does not own and shall not sell Customer Data" and replaced it with a "perpetual, irrevocable, worldwide, royalty-free" data license that survives contract termination.[7]
Public denial despite published evidence. The CEO has repeatedly claimed on LinkedIn and in press statements that Flock has never been hacked and that their security is best-in-class. Independent researchers have demonstrated cameras can be compromised in 30 seconds. at least 60 cameras were found streaming live video to the open internet without any authentication - including one pointed at a children's playground.[8]
What Flock employees actually do with the system
In Dunwoody, Georgia, public records requests by independent researcher Jason Hunyar revealed that Flock's own employees, including the company's VP of Business Development, were logging into customer Flock systems and running searches.
One Flock employee searched a city's database 63 times in a single year - despite not being a police officer or city employee. Multiple Flock employees were documented accessing cameras inside the Marcus Jewish Community Center of Atlanta, including the pool, fitness studios, and a children's gymnastics room.[9]
This is a vendor whose contract claims to restrict access to authorized law enforcement personnel. The audit logs say otherwise.
Who is actually labeling the data
Per ACLU National Senior Policy Counsel Chad Marlow, speaking at the May 27, 2026 town hall and reported by KOSU on July 1, 2026: Flock has been documented using workers in the Philippines to classify vehicle images for artificial intelligence training.[k] The images being classified include vehicles and passengers captured by the same public-safety cameras American cities are paying to operate. That labor is beyond the reach of any American public records law - and any American privacy law. It is also, on Flock's own terms, part of how the platform is continuously improved: every image an OKC camera captures is potential training data, processed by workers with no accountability to anyone in Oklahoma.
The vendor's own standard
Here is what makes the pattern particularly indefensible: Flock's own CEO has publicly stated that every city using Flock should have published use policies and should conduct regular audits to ensure compliance.[10]
Oklahoma City has neither. OKC is not meeting the standard set by the company selling us the product - and the company has not raised an objection, because the absence of oversight is what keeps the data flowing.
What this means for Oklahoma City
Before any renewal vote, the question is not whether Flock could behave better. The question is whether a company with a documented multi-year pattern of misrepresenting its product, its security, its data practices, and its critics is a company Oklahoma City should continue paying with public funds.
The evidence on that question is now public. The decision is the council's.
- "Oshkosh Council Rescinds Flock Camera Contract After False Statements" - WBAY, April 23, 2026. Includes direct quotes from Police Chief Dean Smith and council members.
- Flock Safety's public statement responding to Oshkosh, claiming the council member's question was "misinterpreted." Documented in WBAY's reporting.
- "Flock CEO Goes Ballistic on Critics as More Americans Question Mass Driver Surveillance" - ACLU, December 2025. Full text of Langley's email reproduced. Also see Cville Right Now.
- Flock Safety vendor entries in the National Vulnerability Database. Security research by Jon "GainSec" Gaines documented additional findings; coverage at Security Ledger.
- Staunton, Virginia city statement on terminating Flock contract. Reporting: "Democracy in action: Cities react to privacy concerns by canceling Flock surveillance contracts".
- "Anti-Surveillance Mapmaker Refuses Flock Safety's Cease and Desist Demand" - EFF, February 2025.
- February 2026 Flock master agreement changes documented by the DeflockYourCity toolkit. Includes a side-by-side diff of 147 contract changes.
- "Flock Safety exposed live police camera feeds in internet data breach, company says" - WFLX, January 2026. Independent verification and additional findings by Benn Jordan in collaboration with 404 Media.
- Dunwoody, Georgia Flock audit log analysis by Jason Hunyar. See jasonhunyar.substack.com. Documented by Benn Jordan; also see Have I Been Flocked?.
- Garrett Langley's public statements at police conferences and on LinkedIn regarding Flock's recommended deployment standards for cities. Statements were directly quoted by ACLU in its December 2025 analysis.
The Technology
Oklahoma City voted on a license plate reader. Three years later, the same hardware is part of a platform that follows people on foot, listens for human voices, and connects to drones - all without a single new council vote.
The 2023 contract Oklahoma City signed was framed as a tool for finding stolen vehicles and wanted plates. The marketing focused on Falcon cameras - fixed-position units that photograph passing license plates. That part is accurate. It is also a small fraction of what Flock now sells, and the contract grants Flock the unilateral right to activate new features on existing hardware without returning to council.[1]
What OKC contracted for. What OKC actually has.
The 2023 Master Agreement authorized a stolen-vehicle recovery tool. The 2026 platform is something else. The hardware never changed. Everything else did.
- Falcon fixed-position cameras
- Read license plates, check hot lists
- 90 cameras, one product line
- Data used by OKCPD for specific criminal investigations
- No new features without a new vote
- Vehicle Fingerprint - search by make, color, damage, no plate needed
- FreeForm AI Search - natural-language queries like "vehicles near the abortion clinic"
- Condor - PTZ AI cameras that follow people on foot
- Raven - always-on audio detection
- Aerodome - drone-as-first-responder integration
- Flock Nova - data fusion with criminal records + third-party data
- National Lookup - shared with 5,000+ agencies including federal
- Philippines-based AI classification - your neighbors' vehicles labeled offshore
None of the 2026 features required a council vote. Every one was activated on the same 90 poles OKC already paid for, under the same contract, without notice. The cameras you voted on are not the cameras you have.
What the cameras started as
The original Falcon camera does roughly what its name suggests:
- Photographs the rear of every vehicle that passes within range
- Runs OCR (optical character recognition) on visible license plates
- Classifies vehicle make, model, color, and cosmetic damage from the image
- Uploads images and metadata to Flock's cloud servers in Atlanta
- Cross-references each plate against a customer-defined "hot list" and Flock's nationwide network
That alone is a substantial surveillance system - one that captures every vehicle, every time, with no warrant requirement. But it is no longer the product Flock is selling.
What the cameras have become
Flock now markets a suite of products that share the same pole-mounted hardware OKC already has installed. The feature set has expanded dramatically:
Vehicle Fingerprint. Flock's own marketing describes a system that can search for vehicles by make, model, color, bumper stickers, and damage without ever capturing a license plate.[2] The plate is no longer the identifier. The car itself is.
FreeForm AI Search. A natural-language query interface that allows law enforcement to search the network by describing vehicles and locations in plain English rather than by plate number - enabling queries that target people traveling to sensitive destinations such as reproductive health clinics, houses of worship, gun shows, or protests. EFF has documented real Flock searches tied to abortion investigations and protest surveillance using this style of query.[3]
Condor cameras. A newer line of PTZ (pan-tilt-zoom) cameras with AI that automatically follows people on foot. Not vehicles. People. Independent investigator Benn Jordan documented Condor cameras zooming in on individuals jogging, arguing, taking phone calls, and in one case, watching unattended children at a playground - all streamed to the open internet without authentication.[4]
Raven audio detection. Always-on microphones originally sold as gunshot detection. In October 2025, Flock announced Raven would expand to detecting "human distress" - screaming and voices - under the marketing slogan "Safety you can see and now hear." The expansion arrived on already-installed hardware: the same microphones cities had approved as gunshot-only sensors began piloting voice detection through a software update. EFF and The Record documented the rollout; in July 2026, after sustained public pressure, Flock ended the distress-detection pilot. Both halves of that story matter for OKC: the scope creep happened on hardware already bolted to poles, without new city approvals - and it stopped only because the public pushed back. Recall that Section 2.4 of OKC's own contract lets Flock make any platform change it deems useful, with no city consent required.[5]
Aerodome (Drone-as-First-Responder). Autonomous drone deployment tied to ALPR hits and audio detection events. Flock acquired Aerodome in October 2024 to integrate aerial response into the platform.[6]
Flock Nova. The data fusion platform that joins all of the above with criminal records, dispatch data, and "third-party data acquired by Flock Safety." See Section 01 for the business model behind this.
The patent contradiction
Flock has publicly denied that its system performs facial recognition or classifies people by physical characteristics. The company holds a US patent that says otherwise.
US Patent 11416545B1, granted to Flock Safety in 2022, describes a system that classifies individuals by race, gender, height, weight, and clothing in searchable databases.[7] The patent is publicly accessible on Google Patents. It is not a leaked document or insider source. It is a filing Flock itself submitted to the federal government.
The security record
Flock's CEO has repeatedly stated that the company's products meet the highest security standards. The documented record contradicts that claim at every level.
Numerous CVEs. Independent researcher Jon "GainSec" Gaines published a white paper documenting 51 security findings in Flock's device ecosystem, with multiple confirmed vulnerabilities now logged in NIST's National Vulnerability Database.[8]
30-second compromise. Independent investigator Benn Jordan demonstrated on video that a Flock camera can be compromised in approximately 30 seconds, both with and without physical access, due to weaknesses in the Bluetooth and WPA2 implementations.[4]
Unsupported operating system. Flock devices run Android 8, which has not received security patches from Google since 2021. New vulnerabilities in the OS itself cannot be remediated through software updates because no software updates exist.[8]
60+ cameras streaming to the open internet. Researchers found at least 60 Flock cameras - including a Condor camera pointed at a children's playground - broadcasting live video and 30 days of archived footage to the public internet with no authentication required. Anyone with a search engine could view live or scrub through a month of recordings.[9]
Police credentials leaked publicly. Researchers found at least 35 sets of stolen police credentials for Flock systems being traded on hacking forums. Senators Wyden and Krishnamoorthi formally requested an FTC investigation into Flock's failure to enforce multi-factor authentication.[10]
You can't opt out anymore
Oklahoma City pays for 90 cameras. The DeFlock.me community map currently documents 299 Flock cameras inside the OKC metro area. The difference is private deployment.
Flock sells the same hardware to homeowners associations, retail chains, apartment complexes, gated communities, business parks, and parking lot operators. Once a private camera is installed, the property owner often grants the local police department - or the entire Flock National Lookup network - access to its feed. The result is that even if a city cancels its public contract, the surveillance network continues operating on private property all around it.
This means:
- You cannot opt out by avoiding city streets - the cameras are also in private parking lots
- You cannot audit the cameras through public records law - private property cameras are not city assets
- The 90-camera number in the OKC contract is not the count of cameras tracking OKC residents - it is only the count of cameras the city pays for
- If a council decided tomorrow to terminate the city's contract, the private camera network would remain in place
The physical installation is dangerous too
Beyond the surveillance question, there is a straightforward roadside safety question - and Flock's field installations keep failing it.
The federal standard is clear. Section 2A.19 of the Manual on Uniform Traffic Control Devices requires post-mounted sign and object marker supports inside the clear zone to be crashworthy - breakaway, yielding, or shielded by a barrier or crash cushion.[a] State DOTs apply the same principle to other roadside vertical supports, including camera poles. FHWA guidance is blunt about why: a sign post "must be forgiving (as opposed to a rigid fixed object) and should not become a flying projectile when hit."[b] The "clear zone" is the strip beside the travel lane where an errant driver is supposed to be able to leave the road and survive. On low-speed local streets that is typically 7 to 10 feet. On higher-speed highways it extends to 30 feet or more.[c]
Flock's approved specifications meet this standard on paper. Missouri DOT has an approved breakaway technical approval on file for the FLK2-4 configuration.[d] In Colorado, Flock stated publicly that "advanced breakaway poles are used on Department of Transportation managed roadways, highways and other higher-speed corridors, or when required by the jurisdiction overseeing the roadway."[e]
The problem is what actually gets installed. Independent investigations across at least four states document a consistent pattern of poles set directly into concrete with no breakaway hardware, placed inside the clear zone, or wedged between the travel lane and a guardrail where a struck pole becomes a spear pointed at the driver. In Maine, MaineDOT told the WGME I-Team it has not received a single waiver application for a Flock installation on state right-of-way.[f] In Maryville, Tennessee, public records show the approved plans required X-Squared breakaway and slip-base hardware; the pole that got installed near Foothills Mall Drive shows none of it.[g] In Iowa's Fayette County, an Iowa DOT permit for US-52 approved a "10-12 feet" clear zone when the DOT's own form lists 12 feet as the minimum.[h] In South Carolina, SCDOT found more than 200 unpermitted Flock cameras on state roads during routine monitoring.[i]
Steve Eimers is not a privacy activist. He became a roadside safety advocate after his 17-year-old daughter Hannah was killed in 2016 when a non-crashworthy guardrail end terminal speared her vehicle. His work led to nationwide bans on the Lindsay X-Lite terminal. He has spent the last two years documenting Flock installations with the same lens.[j]
One of his walkthroughs shows the failure at close range: a Flock camera set in concrete inside a guardrail run-out area, the strip of ground a vehicle crosses when it strikes an end terminal and the terminal does its job. The camera sits just past the terminal's lateral deflection distance, directly in the path a crashing car is designed to take. A few feet away, a chain-link fence had been built with wire instead of rigid pipe, specifically so it would not spear a windshield. One installation followed the roadside rules. The Flock pole, set in concrete in the same run-out area, did not.[n]
Eimers is careful that the problem is not unique to Flock. He has flagged the same clear-zone violations on cameras from other ALPR and traffic-camera vendors. He is a standards advocate, not an anti-Flock partisan, which is exactly what makes the pattern he documents hard to wave off.
The physics are not in dispute. Peer-reviewed crash research finds that a rigid pole "penetrates deep into the vehicle front even at low impact velocities" because the small impact surface bypasses the crumple zones a car is engineered around.[k] NHTSA data shows fixed-object collisions and non-collision events together account for 19 percent of all reported crashes but 44 percent of all fatal crashes.[l]
Closer to home, the Oklahoma Department of Transportation has already directed other Oklahoma municipalities - Pryor Creek and Bartlesville - to remove Flock cameras from state highway right-of-way, taking the position that ALPRs are "only statutorily authorized for verifying vehicle insurance" on state ROW.[m] Oklahoma City has never publicly disclosed whether any of its roughly 90 Flock installations were reviewed for MUTCD clear-zone compliance, whether the breakaway hardware called for in Flock's approved specs is actually in the ground, or whether ODOT was consulted on any pole placed near a state route. Request #11 in our Round 2 records request asks the city to produce those records. If the answer is that no such review happened, OKC is running the same play that has already forced removals, cease-and-desists, and DOT interventions in half a dozen other states.
The mission creep is the model
Every feature above was added to the platform after Oklahoma City signed its initial 2023 contract. None required council approval. None triggered public notice. None involved a new vote.
That is not an accident of contract drafting. It is by design. The original contract authorizes Flock to update the platform unilaterally and continue to invoice OKC for the same hardware.[1] The cameras you voted on are not the cameras you have.
What this means for Oklahoma City
Before any renewal vote, Oklahoma City Council should know with specificity:
- Which features are currently enabled on OKC's 90 city cameras
- Which additional features Flock has the contractual right to enable without notice
- How many additional Flock cameras have been deployed on private property within OKC city limits, and which of them feed data into law enforcement queries
- Whether OKCPD has received any documented assurance that the security vulnerabilities described above have been remediated on OKC hardware specifically
If those questions cannot be answered, the renewal vote is being conducted in the dark.
- Flock Master Agreement C241032 and standard Flock Master Services Agreement terms (publicly available). See also the DeflockYourCity toolkit analysis of the standard contract.
- Flock Safety - Vehicle Fingerprint (archived). Company's own product page describing search-without-plate capability; original URL now returns 404 and is preserved via the Internet Archive.
- Flock FreeForm AI Search announcement and product demonstrations. Coverage by EFF.
- "We Hacked Flock Safety Cameras in Under 30 Seconds" and "This Flock Camera Leak Is Like Netflix for Stalkers" - Benn Jordan (YouTube), November-December 2025. Independent verification by 404 Media.
- Flock Safety Raven product page. Independent coverage of audio surveillance concerns by EFF and ACLU.
- Flock Safety acquisition of Aerodome (Drone-as-First-Responder). Company press releases and industry coverage.
- USPTO Patent US11416545B1 - "Identification and classification of objects in images." Filed by Flock Group Inc., granted August 2022. Patent claims describe classifying people by race, gender, height, weight, and clothing.
- "AI Surveillance: Unmasking Flock Safety's Insecurities" - Security Ledger, December 2025. Original white paper by Jon "GainSec" Gaines. CVE entries logged in the National Vulnerability Database.
- "Flock Safety exposed live police camera feeds in internet data breach, company says" - WFLX, January 2026. Original discovery and reporting by Benn Jordan in coordination with 404 Media.
- "Lawmakers say stolen police logins are exposing Flock surveillance cameras to hackers" - TechCrunch, November 2025. Sen. Wyden / Rep. Krishnamoorthi FTC investigation request.
- MUTCD Section 2A.19 crashworthiness requirement for sign supports in the clear zone, as reproduced verbatim in PennDOT LTAP Technical Information Sheet #212, "Breakaway Sign Posts".
- FHWA on breakaway sign and luminaire supports - "Sign supports must be forgiving (as opposed to a rigid fixed object) and should not become a flying projectile when hit." Federal source at FHWA - FAQs: Breakaway Sign and Luminaire Supports; verbatim wording is reproduced across state DOT guidance including the PennDOT LTAP #212 document cited above.
- FHWA / AASHTO Roadside Design Guide clear-zone dimensions. Low-speed local roads 7-10 feet, higher-speed highways up to 30 feet or more depending on speed, ADT, and slope. See FHWA Program Administration Clear Zone page and NCHRP Report 612 Appendix D.
- Missouri DOT Engineering Policy Guide - "FLOCK SAFETY FLK2-4 BREAKAWAY" Technical Approval. Confirms a compliant breakaway design exists on Flock's product shelf.
- "Safety advocate questions roadside installation of Flock cameras as company says Colorado installs meet requirements" - 9News / Yahoo News, June 10, 2026. Flock's on-the-record "lower-speed roadway" statement quoted in full.
- "As Flock cameras spread across Maine, safety advocates question some roadside poles" - WGME Maine I-Team. MaineDOT confirmed no Flock ROW waiver applications received.
- Maryville Residents for Privacy - Flock Camera Map. Public records obtained via Tennessee Public Records Act request show approved plans required X-Squared breakaway and slip-base hardware for pole near 955-977 Foothills Mall Dr; installed base does not appear to include it.
- "The Many Faces of Flock Permits (Part II)" - Footnote4a investigative report. Iowa DOT permit 22A-2024-016 for US-52 approved a "10-12 feet" clear zone below the DOT's own printed 12-foot minimum. Additional non-compliance documented across multiple Iowa routes and municipalities.
- "Ubiquitous Flock license plate reader cameras face scrutiny from South Carolina lawmakers" - Post and Courier (Charleston), February 2024. SCDOT identified more than 200 unpermitted Flock cameras on state roads during routine monitoring.
- Steve Eimers background documented in Corporate Crime Reporter. Additional documentation at @realguardrailguy on TikTok. Eimers' advocacy following his daughter Hannah's death in 2016 led to Lindsay X-Lite guardrail terminal bans across all 50 US states and Canadian provinces.
- "Crash Severity in Collisions with Roadside Light Poles: Highlighting the Potential of Passive Safe Pole Solutions" - peer-reviewed research on rigid pole crash outcomes, available at MDPI Infrastructures. Documents that collisions with rigid roadside poles at or above 50 km/h resulted in injury or fatality in 71.4% of cases studied, supporting the case for passively safe pole solutions in place of rigid fixed objects.
- National Highway Traffic Safety Administration crash statistics - fixed-object collisions and non-collision events (rollovers) together account for 19% of all reported crashes but 44% of all fatal crashes. See NHTSA Traffic Safety Facts, Publication 811144.
- "Flock Cameras debate continues, with ODOT asking cities to remove cameras from ODOT roads" - FOX23 News (Tulsa). ODOT directives to Pryor Creek and Bartlesville. Position statement: "ALPRs are only statutorily authorized for verifying vehicle insurance."
- Steve Eimers, "Flock Camera in the Guardrail Runout Area," walkthrough posted to his @TheGuardrailGuy channel. Documents a Flock camera set in concrete inside a guardrail terminal run-out area, contrasted with an adjacent chain-link fence built to yielding standards. Location not specified in the clip; presented as a national example of the clear-zone pattern, not an Oklahoma City installation.
The Law
The Supreme Court has already ruled that the government cannot track your movements without a warrant. Flock built a system that does exactly that - and sells access to it. The courts are now being asked whether the workaround is legal.
The legal status of Flock's surveillance model is not settled. It is actively being challenged in federal court, contested in state legislatures, and openly questioned by police chiefs, civil libertarians, and lawmakers on both sides of the political aisle. That alone should give a city pause before signing another year of contract.
The constitutional question
In 2018, the United States Supreme Court ruled in Carpenter v. United States that the government cannot acquire historical cell-site location information from a person's phone without a warrant. The Court's reasoning is directly applicable to ALPRs:
Flock's system creates exactly that record - except instead of pulling data from a person's phone, it builds the record by photographing every vehicle that passes thousands of fixed-position cameras. The 30-day retention window in OKC's current configuration captures roughly the same time period the Supreme Court found constitutionally significant.[1]
The Supreme Court has not yet ruled on whether warrantless ALPR mass surveillance specifically violates the Fourth Amendment. That question is now being litigated in federal court in at least two active cases.
The active federal lawsuits
Schmidt v. City of Norfolk (2024). The Institute for Justice filed a federal Fourth Amendment lawsuit on behalf of Norfolk, Virginia residents whose movements were tracked by the city's 176 Flock cameras. The lead plaintiff's vehicle was logged 526 times in four months - roughly four times per day - without any criminal investigation, warrant, or probable cause.[2]
Tan v. City of San Jose (April 2026). The Institute for Justice filed a second federal class action in the Northern District of California challenging San Jose's 474-camera Flock deployment. The complaint cites 360 million images captured in a single year - of which only 0.25% matched any law enforcement hotlist - and argues the system "creates an unconstitutional mass surveillance regime."[3]
Lead plaintiff Tony Tan stated publicly: "Having spent time in China, I know what an authoritarian surveillance state looks like, and I worry about the proliferation of similar mass surveillance technologies across the United States."
If either case succeeds, the legal foundation for Flock's nationwide deployment model collapses. Oklahoma City is currently a participant in a model whose constitutionality is actively under challenge.
What Oklahoma law actually allows
Oklahoma statute 47 O.S. §7-606.1 is the only state law specifically governing ALPR use. Its text is narrow and explicit. ALPR systems may be used:
- For enforcement of the Compulsory Insurance Law (verifying that vehicles on Oklahoma roads carry valid insurance)
- For criminal investigations - but only with a warrant, subpoena, or court order
Data collected by ALPR systems is required to be deleted or destroyed once an investigation or enforcement action ends, or once the data has served its limited authorized purpose.[4]
The Flock Master Agreement Oklahoma City signed in 2023 lists the system's "Permitted Purpose" as "crime awareness, prevention, and prosecution" - a phrase that does not appear anywhere in Oklahoma statute, and which is plainly broader than insurance enforcement or warrant-backed investigations.[5]
OKCPD's own published policy
The Oklahoma City Police Department Operations Manual contains one section governing ALPR use: Section 5-118, in the 6th Edition dated February 5, 2026.[6]
Section 5-118 is the policy OKCPD pointed to when responding to three separate open records requests asking for Flock-specific governance. It contains the following clauses, quoted directly:
- "ALPR data will not be shared as part of a law enforcement information database."
- "ALPR data will be used only by members of the Oklahoma City Police Department who have been properly trained in the use of ALPR for a legitimate law enforcement purpose."
- "Data will be purged from the system once the maximum retention period of sixty (60) days has been reached."
Each of those provisions is directly contradicted by how Flock's platform operates:
- Flock's National Lookup network is a shared law enforcement information database, used by more than 5,000 agencies
- Flock's own employees have been documented accessing customer databases (see Section 02)
- Flock's February 2026 contract update added a "perpetual, irrevocable, worldwide, royalty-free" data license that survives contract termination - effectively making the 60-day retention rule applicable only to local OKCPD copies, not to the underlying data on Flock's servers
The full text of Section 5-118 is available on okc.gov and is also analyzed in detail on our Documents page.
The manual just got rewritten - only after the scrutiny started
KOSU digital producer Abigail Siatkowski reported on July 1, 2026 that between the February 2026 version of the Operations Manual quoted above and a June 15, 2026 update, OKCPD quietly rewrote Section 5-118.[k] Her reporting focused on the data-sharing clause. A direct read of the June version shows the rewrite reached further than the sharing rule alone - three separate material clauses were softened, and each one weakens governance in a different direction.
"ALPR data will not be shared as part of a law enforcement information database."
"ALPR data may only be shared with other law enforcement agencies with the approval of the System Administrator."
Blanket prohibition → permission with single-officer approval. Flock's National Lookup network has operated for the entire duration of OKC's contract with the sharing the February manual prohibited baked into the platform's design.
"ALPR data will be used only by members of the Oklahoma City Police Department who have been properly trained in the use of ALPR for a legitimate law enforcement purpose."
"Only authorized police employees shall operate or be given access to ALPR data."
Proof of training → mere authorization. The word "trained" no longer appears in the section. A supervisor grant of access now satisfies the standard where documented training used to.
"Data will be purged from the system once the maximum retention period of sixty (60) days has been reached."
"Each ALPR system will have its own data retention timelines as outlined in contracts, agreements, MOUs, or system settings. However, no ALPR system shall retain data any longer than sixty (60) days unless required by law."
Purge mandate → soft cap with a vendor-contract override. The 60-day figure survives but the manual now explicitly defers retention timelines to whatever is written in vendor contracts, MOUs, or system settings. A Flock master agreement clause is now capable of overriding the department's own retention policy.
Asked why the section was rewritten, the department told KOSU that policies are "periodically reviewed and updated to ensure they align with current best practices, legal standards, and operational needs."
And one detail buried in the June revision's definition list makes the "System Administrator approval" language in Change 1 land differently once you read it in full. The manual defines the System Administrator as: "Manages the technical aspects of the server (maintenance and connections) and establishes access accounts for ALPR users." Sole authority over every outside data-sharing decision now sits with a role the manual itself defines as server maintenance. Round 2 Request #5 (OCPD-10084-2026) asks who currently holds that role and what criteria they apply. On the manual's own terms, the answer to the second question appears to be: none.
Flock says one thing to Oklahoma. Flock's contract says another.
On July 14, 2026, Flock Safety issued a corporate statement to KOCO 5 News making specific promises about safeguards, oversight, data ownership, and access. Read against the Master Services Agreement Oklahoma City signed with Flock in 2023, six of those promises do not survive contact with the contract itself. Every contract quote below is verbatim from the signed document on file with the OKC City Clerk. Every public claim is verbatim from Flock's KOCO 5 statement.
"Agencies own and control their data." Except the license is irrevocable and perpetual.
"Agencies own and control their data."
"Customer hereby grants to Flock a limited, non-exclusive, royalty-free, irrevocable, worldwide license to use the Customer Data..."
The nail: Section 4.3 additionally grants Flock a "non-exclusive, worldwide, perpetual, royalty-free right" to anonymized versions of that same data to train machine-learning algorithms and to build "other Flock offerings." Owning data you cannot revoke a license on, and cannot pull back from ML training in perpetuity, is a strange definition of control.
"Local oversight." Except Flock changes the platform unilaterally, disclaims warranty, and caps its own liability.
"We remain committed to transparency, accountability, and local oversight in Oklahoma City and every community we serve."
"Flock may make any upgrades to system or platform that it deems necessary or useful..."
The nail: Section 8.4 disclaims all warranties and provides the service "as is." Section 9.1 caps Flock's total liability at twelve months of fees no matter what happens. Local oversight requires local authority. The contract concentrates authority in the vendor and immunizes the vendor against consequences.
"Access is limited to authorized users." Except Flock itself has independent disclosure rights.
"Access is limited to authorized users, every search requires a documented reason and creates a permanent audit trail..."
"Flock may access, use, preserve and/or disclose the Footage to law enforcement authorities, government officials, and/or third parties, if legally required to do so or if Flock has a good faith belief that such access... is reasonably necessary..."
The nail: The "authorized users" and "permanent audit trail" Flock described to KOCO 5 refers to OKCPD user accounts. Section 5.3 grants Flock itself parallel disclosure authority, exercised on Flock's own "good faith belief," that lives entirely outside OKCPD's audit trail.
"Local oversight." Except Flock can assign this contract to any parent, subsidiary, affiliate, or acquirer without OKC's consent.
"Committed to... local oversight in Oklahoma City..."
"Either Party may assign this Agreement, without the other Party's consent, (i) to any parent, subsidiary, or affiliate entity, or (ii) to any purchaser of all or substantially all of such Party's assets or to any successor by way of merger, consolidation or similar transaction."
The nail: Flock is a private company valued at 8.4 billion dollars, backed by Andreessen Horowitz. Under Section 11.3, if Flock is acquired, OKC has no say in who ends up with this city's surveillance infrastructure. If Flock spins the surveillance division off to a new corporate entity, OKC has no say. That decision was made for us in 2023 when this contract was signed.
"Flock helps agencies generate leads." Except the contract disclaims liability for "inability to capture footage."
"Flock's LPRs help law enforcement generate objective investigative leads that can help locate missing people, solve violent crimes, and recover stolen vehicles..."
"...FLOCK... SHALL NOT BE RESPONSIBLE OR LIABLE... (E) FOR ANY MATTER BEYOND FLOCK'S ACTUAL KNOWLEDGE OR REASONABLE CONTROL INCLUDING REPEAT CRIMINAL ACTIVITY OR INABILITY TO CAPTURE FOOTAGE..."
The nail: Flock's public pitch is that Flock captures footage. Flock's own signed contract with Oklahoma City says Flock is not liable when it fails to. OKCPD cannot demonstrate Flock works because it does not measure it (see OCPD-10088-2026). The vendor cannot be held accountable when Flock does not work because the contract said so on day one. The system is unaccountable on both ends.
"Local oversight." Except Flock can terminate the contract when OKC or its employees are in Flock's judgment of "public disrepute."
"Committed to... local oversight in Oklahoma City..."
"In the event Customer or its employees become the subject of an indictment, arrest, public disrepute, contempt, scandal or behaves in a manner that, in the reasonable judgment of Flock, reflects unfavorably upon Flock... such act(s) or omission(s) shall constitute a material breach... and Flock shall... have the right to elect to terminate this Agreement."
The nail: Local oversight means the local government oversees the vendor. Section 11.14 flips that direction: Flock reserves the right to judge Oklahoma City's conduct and terminate the contract accordingly. A private vendor writing a moral-turpitude clause against a municipal police department is not local oversight. It is the vendor grading the customer.
The full Master Services Agreement and the KOCO 5 article containing Flock's July 14 statement are both linked here for direct verification of every quote above.
OKCPD knows how to write a real surveillance policy. They did - just not for Flock.
The defense that OKCPD "couldn't" produce Flock policies because that kind of governance work is hard does not survive contact with their own Operations Manual. Sections immediately adjacent to 5-118 cover two other surveillance technologies the department uses - and both come with detailed policies the Flock system entirely lacks.
Section 5-119 (Facial Comparison Program), adopted October 2025. Eight pages of policy governing OKCPD's facial recognition program, including:[a]
- Audit logs retained for a minimum of three years, including the requester, the approving supervisor, the authorized examiner, the justification for access, and whether any leads were verified
- Monthly audits conducted by the Special Operations Division commander
- Mandatory training including "intelligence gathering limitations, constitutional rights to privacy, records retention requirements"
- Supervisor review and approval required for every request
- Independent peer review of every candidate match
- Explicit prohibition on Live Facial Recognition in live video feeds
- Explicit prohibition on "monitoring daily activities of individuals or groups"
- Explicit prohibition on retaining information based on race, religion, political views, or "social views or activities"
Section 7-208 (Small Unmanned Aircraft Systems - drones), revised October 2025. Detailed policy governing OKCPD drone use, including:[a]
- Mandatory FAA Part 107 certification for pilots
- Fourth Amendment compliance requirement: "absent exigent circumstances or the consent of the property owner, a warrant shall be obtained"
- Personal sUAS prohibited - only department-approved equipment
- Visual Observer required for all flights
- Selection process with documented qualifications
- Incident reporting documented in the first line of the officer's narrative
The full Police Operations Manual sections covering ALPRs, Facial Recognition, and Drones are available on this site for direct comparison.
Tulsa PD wrote a real Flock policy. OKCPD chose not to.
Even within Oklahoma, OKCPD's Flock policy absence is not the norm. Tulsa Police Department Captain Richard Meulenberg, speaking to KOSU on July 1, 2026, described the specific policy his department has published for its Flock system:[k]
- Data searches are explicitly restricted to criminal investigations, Amber Alerts, Silver Alerts, Blue Alerts, and missing persons cases
- Officers are prohibited from entering personally identifiable information into the system
- Tulsa opts out of Flock's National Lookup network - other agencies must sign an explicit data-sharing agreement with Tulsa PD before they can access Tulsa's data
OKCPD's Section 5-118 has none of these controls. And Meulenberg, a working Tulsa police captain who supports the technology, told KOSU that Flock "seems like it's cloaked in secrecy for some reason." When the leaders of departments still using Flock are saying the transparency picture is a problem, the picture is a problem.
Federal access without authorization
The clearest documented evidence that Flock's platform circumvents normal legal channels comes from Mountain View, California. In 2026, the city's Police Chief publicly recommended terminating the Flock contract after discovering that the ATF, the Air Force, and the GSA Inspector General had been accessing the city's Flock data for 17 months without local police knowledge or approval.[7]
Federal access of that kind would normally require a subpoena, warrant, or formal data-sharing agreement signed by the local jurisdiction. Through Flock's National Lookup feature, none of that was needed. The setting had been silently enabled on Mountain View's account.
Oklahoma has no state law prohibiting outside agencies from querying OKC's Flock data. Whether the same kind of unauthorized federal access has occurred here is an open question - and one OKCPD's own memo confirms it has no audit procedure to answer.[8]
State-level violations elsewhere
California. A class-action lawsuit filed in February 2026 (amended April 2026) alleges Flock allowed out-of-state agencies to search the San Francisco Police Department's Flock database 1.6 million times in seven months - in direct violation of California state law, which explicitly prohibits sharing ALPR data outside the state.[9]
Texas. The Texas Department of Public Safety issued a cease-and-desist to Flock Safety for installing cameras at private homes and businesses without state authorization.[10]
These are not isolated edge cases. They are the documented pattern of a vendor whose technology and business model routinely operate outside the bounds of state-level legal frameworks.
The argument the city will make
Speaking to KOSU on July 1, 2026, OKC Mayor David Holt defended the Flock program on the record:[k]
The argument rests on two claims. Neither survives scrutiny.
Claim 1: "There is no expectation of privacy in public." This is the exact framing the Supreme Court rejected in Carpenter v. United States. The Court found that constant, aggregated tracking of a person's movements over time - even in public space - constitutes a search that requires a warrant. Flock's platform creates precisely this kind of persistent, aggregated record. The "no expectation of privacy in public" formulation predates the modern surveillance stack; the Court has already refused to apply it here.[1]
Claim 2: "That's how our residents feel." On May 27, 2026, 100+ Oklahoma City residents filled Mayflower Congregational Church specifically to say the opposite. On June 16, when nothing Flock-related was on the council agenda, 8 of 10 public commenters brought Flock up anyway. The ACLU of Oklahoma's petition against renewal has been collecting signatures from OKC residents for months. The Mayor is describing residents who are not the ones showing up.
This is the argument the coalition needs to be ready to answer at the mic when the vote lands - not because it is strong, but because it is the argument that will be made.
What this means for Oklahoma City
The legal questions facing Oklahoma City Council before any renewal vote are:
- Does the Flock contract's "Permitted Purpose" exceed the authorization granted by 47 O.S. §7-606.1? If so, the contract may be unenforceable as a matter of state law.
- Has OKCPD's data been queried by federal agencies through Flock's National Lookup without local authorization, as occurred in Mountain View? The department has confirmed it has no audit procedure capable of answering this.
- If Carpenter is extended to ALPRs by the federal courts, does Oklahoma City have legal exposure for having operated a warrantless mass surveillance system on its residents?
- Why is the city's own published policy (Section 5-118) so plainly inconsistent with how the Flock system actually operates?
None of these questions can be answered with "Flock told us it's fine." Each requires independent legal analysis, and that analysis should happen before public funds are committed to another year of operation.
- OKCPD Police Operations Manual, Sections 5-119 (Facial Comparison Program, adopted October 2025) and 7-208 (Small Unmanned Aircraft Systems, revised October 2025). Full text covering ALPR, Facial Recognition, and Drones is available on this site and on okc.gov.
- "Surveillance or safety? OKC City Council to consider automated license plate reader contract renewal" - Abigail Siatkowski, KOSU / KGOU, July 1, 2026. Documents the Section 5-118 rewrite between February and June 2026, Mayor Holt's "no expectation of privacy" statement, Councilman Cooper's voting record and quotes, Tulsa PD Capt. Meulenberg's policy description, and the coalition's town hall organizing.
- Carpenter v. United States, 138 S. Ct. 2206 (2018). Full opinion via Supreme Court of the United States. The Court found that obtaining 127 days of cell-site location information without a warrant violated the Fourth Amendment.
- Institute for Justice complaint in Schmidt v. City of Norfolk. Coverage: NBC News. Case background: Institute for Justice.
- Institute for Justice complaint in Tan v. City of San Jose, filed April 2026 in U.S. District Court for the Northern District of California. Coverage: Reason, April 2026 and KQED.
- Oklahoma Statutes Title 47, Section 7-606.1 - Automated License Plate Reader Systems. Full text available via the Oklahoma Statutes.
- Flock Safety Master Agreement C241032 with the City of Oklahoma City, June 20, 2023. "Permitted Purpose" clause defined within the system specifications.
- OKCPD Operations Manual, 6th Edition (February 5, 2026), Section 5-118, pages 283-284. Available via okc.gov. Full analysis on our Documents page.
- "Mountain View police recommend terminating license plate camera contract" - Mountain View Voice, February 2026.
- OKCPD Department Memorandum OCPD-2885-2026, March 10, 2026. View PDF. Item 5 specifically: "No audit procedures exist in policies, SOPs, directives, training or guidance for Flock."
- Gibbs Mura class action against Flock Safety, filed February 26, 2026, amended April 3, 2026 in San Francisco Superior Court. Gibbs Mura case page. California Civil Code §1798.90.55 explicitly restricts ALPR data sharing.
- "Company operating popular automatic license plate readers issued cease and desist order by Texas DPS" - KENS 5. Additional coverage: FOX 26 Houston.
The Track Record
Every case below has been documented through court filings, public records requests, official government statements, or original investigative journalism. None of it is hypothetical. All of it has already happened.
The most common defense of Flock - "the system would only ever be misused in theory" - has not been true for some time. The system has been misused in practice, by named individuals, with documented consequences, in jurisdictions all over the country. The harms below are not abstract risks. They are receipts.
Officers using Flock to stalk people they know
Milwaukee, Wisconsin. Former Milwaukee Police Officer Josue Ayala was charged with misconduct in public office for using Flock to track his girlfriend and her ex-boyfriend. Audit logs showed Ayala searched his girlfriend's plate 124 times and her ex's plate 55 times over a roughly two-month period. The justification he entered for every single search was one word: "investigation." He resigned hours before his first court appearance.[1] In July 2026, Ayala pleaded guilty to misconduct in public office and was sentenced to probation.[22]
Menasha, Wisconsin. A Menasha police officer was charged with a Class I felony for using Flock to track his ex-girlfriend's vehicle and her brother's vehicle while off duty. He conducted seven searches in a single week. He pleaded not guilty and was bound over for trial.[2]
Kenosha County, Wisconsin. Sheriff's Deputy Frank McGrath was found to have used Flock and the Polaris squad-car tracking system to surveil a fellow deputy he was dating. An internal investigation concluded the misuse was "knowingly and repeatedly" committed and that McGrath was "not truthful when confronted by a supervisor." McGrath resigned under a negotiated separation agreement before formal discipline was imposed. No criminal charges were ultimately filed.[3]
Greer, South Carolina. Two Greer Police Department officers - Corporal Kareem Lynch and Officer Sebastian Echeverry - were terminated on June 26 and June 29, 2026, respectively, after the department's own internal audit surfaced violations of Greer's ALPR policy. Greer conducted the audit using Flock Safety's own built-in "Audit Assistant" tool. The firings were reported nationally on July 15, 2026, as Oklahoma City's own renewal vote remained deferred, and stand as a working example of what a real ALPR audit process produces when it exists.[19]
Albany, Georgia. On July 8, 2026, as Oklahoma City's own renewal vote remained deferred, Flock Safety itself issued a press release announcing that "five officers were terminated and subsequently arrested after investigators alleged they used license plate reader technology for purposes unrelated to legitimate law enforcement investigations." The Albany Police Department internal audit was conducted using Flock's own Audit Assistance tool. Flock Co-Founder Paige Todd, quoted in the same press release: "Technology doesn't create misconduct. People do." Five criminal arrests, on Flock's own admission, surfaced by an audit process Flock itself sells and Oklahoma City does not use.[20]
Pasadena, Texas. Sergeant Michael Palitz resigned from the Pasadena Police Department in July 2026 while under an active internal investigation. Pasadena City Council Member Emmanuel Guerrero, describing the alleged conduct: "Based on what we gathered, [he] was using our camera system, our Flock system, to track and stalk a female officer." The department confirmed the resignation and stated the investigation would continue regardless of employment status. Discovery method: the Flock system itself flagged repeated account usage. Another jurisdiction that had a mechanism to catch stalking-by-cop.[21]
McHenry County, Illinois. William C. Copp, the police chief of Holiday Hills (and an officer in Prairie Grove), was charged in June 2026 with two counts of official misconduct, a Class 3 felony, for using Prairie Grove's Flock license plate readers and the Illinois State Police LEADS database to track six people he knew personally, on duty and off. Prosecutors say Copp tracked the ex-boyfriend of a woman he had dated 140 times, while leaving the man threatening voicemails from his police phone: "This is the only time that I'm going to be nice about this." A judge barred Copp from police work and firearm possession pending trial.[23]
The pattern is not limited to Flock's network. In March 2026, Monroe County, Florida Deputy Lamar Roman was fired and arrested on three felony counts after he met an actress while moonlighting as security on an Apple TV+ set, added her plate to a hotlist on the Guardian ALPR system (a Flock competitor), and used the real-time alerts to track and pull her over - nearly causing a head-on collision in the process. His words at the stop: "I told you I'd find you and pull you over." The Institute for Justice's running tally now counts at least 24 documented cases of officers using license plate readers to stalk romantic interests. The hotlist-stalking playbook works identically on every ALPR network - which is why demand #3 exists: no replacement vendor.[24]
Every case above was discovered because someone went looking - a victim who searched her own plate on a public audit log and recognized her ex's badge ID, an internal investigation triggered by suspicion, a department that ran its Flock usage through Flock's own audit tool, or a system that flagged its own anomalous account usage. In Oklahoma City, no such public audit log exists and OKCPD has confirmed in writing that no internal audit procedure exists either.[4] Greer's audit worked. Albany's audit produced five criminal arrests. Pasadena's system flagged the usage. Oklahoma City has none of the above.
Politically targeted searches
Tulsa, Oklahoma. The Electronic Frontier Foundation obtained Flock search logs from 3,900+ agencies through public records requests. Tulsa PD was one of the most consistent users of Flock to investigate protest activity, logging at least 38 searches in which officers queried the network with terms like "protest" without specifying any underlying crime.[5]
Johnson County, Texas (abortion investigation). Sheriff's deputies queried the Flock nationwide network for a vehicle, entering the search reason as: "had an abortion, search for female." The search crossed 83,345 cameras across 6,809 networks. Flock and the sheriff initially claimed the search was for a "missing person." EFF obtained the public records that contradicted that account. The sheriff was later indicted on unrelated felony charges including aggravated perjury.[6]
Wrongful detentions based on Flock data
Aurora, Colorado. A mother and her young children were held at gunpoint after a Flock camera misread their license plate as belonging to a stolen vehicle. The family received a $1.9 million settlement from Aurora taxpayers. Flock's contractual liability provisions protected the company from any direct exposure.[7]
Bow Mar, Colorado. A Denver-area woman was confronted by a Columbine Valley Police sergeant who accused her of stealing a package off a porch - based entirely on a Flock camera record showing she drove through the neighborhood. She offered to show the officer her own vehicle's recorded video proving she never stopped. The officer refused to consider the contradictory evidence, citing the Flock data as definitive.[8]
Both incidents illustrate the same pattern: Flock data is treated as conclusive in the field, even when contradicted by direct physical or video evidence. The Aurora case proved that the financial cost of those errors lands on local taxpayers, not on the vendor that supplied the data.
Unauthorized federal access
Mountain View, California. ATF, the Air Force, and the GSA Inspector General accessed Mountain View's Flock data for 17 months without local police knowledge or approval. Flock had silently enabled nationwide search on the city's account without notifying the customer. The Police Chief - not an activist, the Police Chief - publicly recommended terminating the contract.[9]
Denver, Colorado. Public records obtained by EFF document that Flock data was accessed by outside agencies nearly 1,400 times in a single year, with multiple searches related to immigration enforcement. Denver's city council terminated its Flock contract in response to that disclosure.[10] Oklahoma has no state law prohibiting equivalent access here.
San Francisco, California. A class-action lawsuit filed February 2026 (amended April 2026) alleges Flock allowed out-of-state agencies to search the San Francisco Police Department's Flock database 1.6 million times in seven months - in direct violation of California state law.[11]
Vendor misconduct against customer cities
Cambridge, Massachusetts. Cambridge voted to deactivate and remove its Flock cameras. Shortly after, the city discovered that Flock had installed two new cameras without the city's knowledge or consent. The City Manager publicly called it a "breach of trust." The contract was terminated and all cameras removed.[12]
Oshkosh, Wisconsin. Flock representatives gave the Oshkosh City Council false information during deliberations on a contract - specifically denying that the system creates a "heat map" of vehicle movements, when in fact Flock's own platform contains a feature called a heat map. The Police Chief recommended rescinding the contract within 24 hours of its approval. See Section 02 for details.[13]
Texas (statewide). The Texas Department of Public Safety issued a cease-and-desist to Flock Safety for installing cameras at private homes and businesses without state authorization.[14]
Flock employee misconduct
Dunwoody, Georgia. Public records audit logs revealed Flock's own VP of Business Development searched a customer city's Flock database 63 times in a single year - despite not being a police officer or city employee. Multiple Flock employees were documented accessing cameras inside a community gym, including the pool, fitness studios, and preschool daycare areas. See Section 02.[15]
Security failures
60+ cameras streaming live to the open internet. Researchers found Flock Condor cameras - including one pointed at a children's playground - broadcasting live video and 30 days of archived footage to the public internet with no authentication required.[16]
Stolen police credentials traded online. Researchers found at least 35 sets of stolen police credentials for Flock systems on hacking forums. Senators Wyden and Krishnamoorthi formally requested an FTC investigation. See Section 03.[17]
Norfolk: tracking a private citizen 526 times
The cleanest case of "ordinary person, no crime, tracked anyway" comes from Norfolk, Virginia. The city's 176 Flock cameras logged the location of a retired veteran 526 times in four months - approximately four times per day - without any underlying criminal investigation, warrant, or probable cause. The Institute for Justice filed a federal Fourth Amendment lawsuit on his behalf, which is currently pending.[18]
Norfolk has 176 cameras. Oklahoma City has 90 city cameras and at least 299 total Flock cameras in the metro according to the community map. The math is not encouraging.
Oklahoma City, July 2026: the claim vs. the paper trail
The rest of Section 05 documents harms elsewhere. This one is here. On July 10, 2026, the OKC Municipal Counselor's Office formally denied an Open Records Request (OCPD-10088-2026) that sought data on whether Flock cameras have contributed to stolen-vehicle case outcomes. The denial cited 51 O.S. § 24A.8(C): "records are not kept in the way requested nor does the open records act impose any new recordkeeping requirements." Translation: OKCPD does not track whether Flock is material to case outcomes at all.
Four days later, on July 14, 2026, in a KOCO 5 pre-vote story, the OKCPD Fraternal Order of Police president told broadcast television: "our folks who utilize that technology, it has been instrumental in catching very violent and bad folks getting out on the streets of Oklahoma City."
This is the exact vulnerability the renewal vote turns on. When it lands, Chief Ron Bacy is expected to present the department's case for renewal. Every "Flock helped us catch..." claim he makes will be measured against the same paper trail. See the Records page for the full side-by-side and the follow-up correspondence going to the Municipal Counselor's office.
What this means for Oklahoma City
OKCPD has confirmed in writing that no audit procedures exist for Flock use. That means: if an officer searched a partner's license plate 124 times this year, OKC has no internal process to catch it. If a federal agency has been quietly accessing OKC's Flock data for 17 months, OKC has no record of it. If a private camera operator is sharing OKC residents' data with parties OKCPD has not vetted, there is no audit trail to review.
The absence of evidence here is not evidence of absence. It is the consequence of the city's own admission that it has not built a system capable of producing evidence either way.
- "Milwaukee Cop Used Flock Cameras to Track Romantic Partner" - Urban Milwaukee, February 2026. Also see channel3000.com.
- "Complaint: Menasha police officer allegedly used Flock cameras to find victim's car" - WBAY, January 2026.
- "KCE Editor Files John Doe Petition Seeking Criminal Investigation Into Former Kenosha Deputy" - Kenosha County Eye, March 2026.
- OKCPD Department Memorandum OCPD-2885-2026, March 10, 2026. View PDF. Public audit tool referenced: haveibeenflocked.com.
- "How Cops Are Using Flock Safety's ALPR Network to Surveil Protesters and Activists" - EFF, November 2025.
- "Flock Safety and Texas Sheriff Claimed License Plate Search Was for a Missing Person. It Was an Abortion Investigation." - EFF, October 2025.
- Aurora, Colorado $1.9M settlement. Documented in Benn Jordan's reporting and contemporaneous news coverage of the Aurora case.
- Lakewood, Colorado false accusation case. Documented in social media accounts and follow-up reporting; Rivian dash-cam footage cited as exculpatory evidence the officer refused to consider.
- "Mountain View police recommend terminating license plate camera contract" - Mountain View Voice, February 2026.
- Denver Flock query volumes for outside-agency searches. EFF analysis: 2025 Year in Review.
- "Lawsuit Says Flock Allowed Out-of-State Agencies Access to SFPD Database 1.6 Million Times" - SFist, February 2026. Class action page: Gibbs Mura.
- "Statement on the Flock Safety ALPR Contract Termination" - City of Cambridge, December 2025.
- "Oshkosh Council Rescinds Flock Camera Contract After False Statements" - WBAY, April 2026.
- "Company operating popular automatic license plate readers issued cease and desist order by Texas DPS" - KENS 5.
- Dunwoody, Georgia Flock audit log analysis by Jason Hunar. Documented by Benn Jordan. Tool: Have I Been Flocked?.
- "Flock Safety exposed live police camera feeds in internet data breach" - WFLX, January 2026. Original research by Benn Jordan and 404 Media.
- "Lawmakers say stolen police logins are exposing Flock surveillance cameras to hackers" - TechCrunch, November 2025. Wyden/Krishnamoorthi FTC investigation request.
- "Virginia Police Used Flock Cameras to Track Driver 526 Times in 4 Months, Lawsuit Says" - NBC News. Institute for Justice case page.
- "Officers Fired After Alleged Misuse of Controversial Surveillance Tool" - Newsweek, July 15, 2026 (Mandy Taheri). Greer Police Department (SC) fired Corporal Kareem Lynch (June 26, 2026) and Officer Sebastian Echeverry (June 29, 2026) after an internal audit using Flock Safety's own "Audit Assistant" tool surfaced ALPR policy violations. City Administrator Andrew Merriman quoted on privacy responsibility.
- "Flock's Audit Assistance Surfaces License Plate Reader Misuse in Albany, Georgia; Five Officers Arrested" - Flock Safety press release, July 8, 2026 (via GlobeNewswire). Flock's own confirmation of five terminations and criminal arrests following an Albany PD internal audit using Flock's Audit Assistance tool. Includes verbatim quote from Flock Co-Founder Paige Todd.
- "Pasadena police sergeant resigns while under internal investigation; council member cites alleged misuse of Flock camera" - Click2Houston / KPRC 2, July 10, 2026 (Rilwan Balogun, Kylie Frakes, Jon Hill). Sergeant Michael Palitz resignation; Council Member Emmanuel Guerrero's verbatim quote about Flock-based stalking of a fellow officer.
- "Flock search misuse: Former Milwaukee police officer gets probation" - FOX6 Milwaukee, July 2026. Josue Ayala guilty-plea sentencing outcome.
- "Prosecutors say McHenry County police chief used Flock license plate reader data hundreds of times to track people he knew" - Lake McHenry Scanner, June 19, 2026. Also Shaw Local / Northwest Herald, June 18, 2026.
- "Florida deputy pulled over actress he met on TV show set to flirt with her, cops say" - Tampa Bay Times, March 11, 2026. System used: Guardian ALPR (not Flock). Aggregate count: Institute for Justice, "Police Have Reportedly Used License Plate Readers to Stalk Romantic Interests at Least 24 Times in Recent Years."
Common Ground
The American Civil Liberties Union, the Institute for Justice, Republican state legislators, Democratic senators, libertarian property-rights advocates, police chiefs, federal agencies, and city councils across the political spectrum all agree on one thing: Flock's surveillance model is a problem.
This is unusual. The kind of issue that draws opposition from both the ACLU and the Institute for Justice - from both Senator Ron Wyden and Republican Oklahoma state legislators - from both police chiefs and the people who normally hold those chiefs accountable - is not a left-versus-right issue. It is a concentration-of-power issue, and the coalition opposed to it is broader than almost any other privacy fight in recent memory.
For Oklahoma City Council members weighing whether opposing Flock is a "political risk" - it isn't. It is one of the few positions in 2026 with documented public support from every direction.
Civil liberties organizations
ACLU National. Through Senior Policy Counsel Chad Marlow, ACLU has publicly stated: "Oklahomans have a right to know more about Oklahoma City's use of automatic license plate readers. Nearly 50 cities have terminated their relationships with Flock in the past year."[1]
ACLU of Oklahoma. Organizing the May 27, 2026 community town hall on Flock surveillance in Oklahoma City. Working with state-level partners.[2]
Electronic Frontier Foundation (EFF). Obtained 12+ million Flock search logs from over 3,900 law enforcement agencies through public records requests. Published more than a dozen investigative pieces in 2025 alone documenting protest surveillance, abortion investigation searches, and discriminatory targeting.[3]
This is big government, wearing a corporate badge
Oklahoma is one of the most pro-limited-government states in the country. The case against Flock is not a left or right case - it is a concentration of power case. Flock has built infrastructure that the government itself would not be allowed to build directly:
- The government cannot warrantlessly track every vehicle in a city. Flock can - and then sells access back to government agencies.
- The government cannot run a nationwide database of citizens' movements without statutory authority. Flock's National Lookup operates one and the statute came after.
- The government is bound by public records law. Flock's data sits on private servers in Atlanta, beyond the reach of any FOIA request.
- The government is accountable through elections, oversight boards, and civilian review. Flock is accountable to its investors.
This is not a libertarian critique that civil libertarians have to bend to accept. It is the same critique. Both sides are looking at the same problem and identifying the same harm: a private corporation has been installed between residents and the agencies that surveil them - which removes accountability, not adds it.
Property rights and libertarian organizations
Institute for Justice. Libertarian-aligned public-interest law firm. Filed federal Fourth Amendment lawsuits against Flock-using cities in Norfolk, Virginia (2024) and San Jose, California (April 2026). The IJ frames Flock as a property-rights and individual-liberty violation. The ACLU frames it as a civil liberties violation. They are on the same side of the same lawsuits.[4]
Texas Privacy Coalition. Right-leaning state-level privacy organization. Published patent analysis documenting Flock's person-tracking and classification capabilities. Active in opposing Flock contracts at Texas city council meetings.[5]
Building Blocks for Liberty. Conservative civil-liberties outlet. Published critical coverage of Flock CEO Garrett Langley's "activist" email to police departments.[6]
Federal lawmakers
Senator Ron Wyden (D-OR) and Representative Raja Krishnamoorthi (D-IL) formally requested an FTC investigation into Flock Safety in November 2025, citing the company's failure to enforce multi-factor authentication and its pattern of cybersecurity claims that did not hold up to independent review.[7]
The FTC investigation request was filed alongside ongoing oversight inquiries into the broader surveillance technology industry. Flock's response to the inquiry has not addressed the substance of the senators' concerns.
Oklahoma voices
Representative Tom Gann (R) has convened multiple legislative interim studies on Oklahoma ALPR use, with testimony from constituents, academic experts, and civil liberties advocates. The studies have documented widespread use of Flock by more than 50 Oklahoma agencies and concerns that data is being accessed for purposes far beyond what state law authorizes.[8]
Marven Goodman, an Oklahoma resident, successfully campaigned to remove Flock cameras from State Highway 33 and to push Guthrie, Oklahoma to terminate its contract with the company.[9]
Councilman James Cooper (Ward 2), Councilwoman JoBeth Hamon (Ward 6), and Councilman Camal Pennington (Ward 7) have engaged publicly with this issue. All three attended the May 27, 2026 community town hall. Cooper has served on the council since 2019 and has voted against every Flock contract in front of him - the initial 2023 signing and every renewal since. His position, as reported by KOSU on July 1, 2026:[k]
And on the underlying stakes:
Pennington signaled active conversations are underway ahead of the July renewal vote. Hamon has been engaged with the records produced by our FOIA filings since April. Five OKC council members did not attend the town hall: Bradley Carter, Katrina Avers, Todd Stone, Matt Hinkle, and Mark Stonecipher.[10]
Police chiefs and law enforcement leaders
The strongest counter to "if you oppose Flock, you must be anti-police" is that police chiefs themselves have terminated Flock contracts and publicly explained why.
Police Chief Mike Canfield, Mountain View, California. Publicly recommended terminating the city's Flock contract after discovering that hundreds of California law enforcement agencies had searched local Flock data without authorization for roughly 17 months, and that federal entities had access during a separate period in late 2024.[11]
Police Chief Jim Williams, Staunton, Virginia. Wrote a public response to Flock CEO Garrett Langley's email rejecting the framing that critics were attacking law enforcement. Williams' words: "It is democracy in action." Staunton terminated its contract shortly after.[12]
Police Chief Dean Smith, Oshkosh, Wisconsin. Recommended rescinding the city's Flock contract within 24 hours of approval after Flock representatives gave the council false information. His words: "I will not betray that trust."[13]
The cities that have already said no
The Los Angeles Police Department walked away.
One of Flock's largest government customers. LAPD Chief Information Officer Dean Gialamas: "The sticking point is around having very clear terms about who owns the data, what happens with the data once they collect it." The decision followed an LAPD Inspector General audit finding that over a two-month period, LAPD investigated 161 car owners whose vehicles Flock had wrongly identified as stolen. Flock's response, reported by The Record: called LAPD's decision a "surprise."[16]
More than 30 cities and counties have terminated Flock contracts since January 2025. A partial list:
- Los Angeles Police Department, California - Non-renewal announced July 11, 2026, after an LAPD Inspector General audit found 161 wrongly-identified stolen vehicles in a two-month window. The largest municipal customer to walk away.
- Guthrie, Oklahoma - Terminated contract. The closest geographic precedent for OKC.
- Lynnwood, Washington - 7-0 unanimous vote to cancel after a University of Washington report.
- Tompkins County, New York - 12-1 vote calling Flock "untrustworthy and not aligned with the county's values."
- Mountain View, California - Terminated after federal agency access disclosure.
- Cambridge, Massachusetts - Terminated after Flock installed cameras without authorization.
- Staunton, Virginia - Terminated after CEO's "activist" email.
- Oshkosh, Wisconsin - Rescinded within 24 hours of approval over Flock misrepresentations.
- Austin, Texas. Flagstaff, Arizona. Eugene, Oregon. Evanston, Illinois. Coralville, Iowa. Denver, Colorado. Dane County, Wisconsin. And growing.
Each termination is a small data point. Together, they form a pattern.[14]
The independent press and research community
Independent journalists and researchers have done the bulk of the substantive investigative work on Flock. The list of outlets that have published critical reporting includes:
404 Media (live camera exposure, Flock Nova data sources), EFF (12M+ search log analysis), NPR (national cancellation coverage), NBC News (Norfolk lawsuit), The Markup, Reason (San Jose lawsuit), Axios (valuation reporting), Mountain View Voice, Wisconsin Examiner, Urban Milwaukee, Kenosha County Eye, Cville Right Now, San (Straight Arrow News), and many more.
Locally: KOSU / NPR Oklahoma, Free Press OKC, KOCO 5, The Gayly, KGOU, News9, KFOR, and Hoodline have all covered the OKC story. The May 27 town hall produced same-week coverage from Free Press OKC and KOCO 5.
Independent researchers documented core findings: Benn Jordan (YouTube investigations, security demonstrations), Jon "GainSec" Gaines (CVE research and 51-finding white paper), Jason Hunar (audit log analysis, Have I Been Flocked? tool), and the DeflockYourCity Toolkit contributors (contract analysis, model legislation, talk tracks).
Even industry has pulled back
In February 2026, Amazon terminated its Ring-Flock data-sharing partnership, ending a major channel through which Flock had accessed residential security camera networks.[15] When Amazon - a company not historically known for restraint on consumer surveillance - decides a partnership has become too reputationally risky, that signal is worth noticing.
What this means for Oklahoma City
For an Oklahoma City Council member, the question of whether to terminate or impose strict conditions on the Flock contract is not a political risk. It is one of the rare votes in 2026 where principled action is supported across the entire political spectrum - by civil rights groups, by libertarian property-rights organizations, by federal legislators of both parties, by Oklahoma's own state lawmakers, by police chiefs, by the broader media landscape, and by every neighboring city that has already made the same decision.
Oklahoma City is not being asked to be a leader on this. It is being asked to catch up.
- "Municipalities: Beware of Changes in Flock's Legal Terms if You're Using or Considering License Plate Readers" by Jay Stanley - ACLU National, April 16, 2026. Marlow quote from May 2026 town hall press release.
- "ACLU and Community Partners Come Together to Discuss Concerns About Automatic License Plate Readers" - ACLU of Oklahoma, May 2026.
- "EFF's Investigations Expose Flock Safety's Surveillance Abuses: 2025 in Review" - Electronic Frontier Foundation, December 2025.
- Institute for Justice ALPR litigation portfolio. ij.org. Active cases include Schmidt v. City of Norfolk and Tan v. City of San Jose.
- Texas Privacy Coalition "End Flock" campaign. texasprivacycoalition.com.
- "Flock Safety's CEO Pouting" - Building Blocks for Liberty.
- "Wyden, Krishnamoorthi Urge FTC to Investigate Surveillance Company Flock Safety for Poor Cybersecurity Practices" - Senator Wyden's office, November 2025.
- Oklahoma legislative interim studies on ALPR use. Coverage: KGOU / NPR and KFOR.
- Marven Goodman testimony at the Oklahoma House Public Safety Committee. KFOR coverage.
- Council member attendance and quoted statements documented in Free Press OKC's May 29, 2026 recap of the town hall. Council member contact: Ward 2 - Cooper, Ward 6 - Hamon, Ward 7 - Pennington.
- Cooper's voting record and quotes documented by Abigail Siatkowski, "Surveillance or safety? OKC City Council to consider automated license plate reader contract renewal," KOSU / KGOU, July 1, 2026.
- "Mountain View police recommend terminating license plate camera contract" - Mountain View Voice, February 2026.
- "LAPD sidelines relationship with license-plate reader company Flock Safety" - The Record from Recorded Future News, July 15, 2026 (Suzanne Smalley). LAPD announced non-renewal on July 11, 2026. Chief Information Officer Dean Gialamas quotes on data ownership dispute. LAPD IG audit found 161 wrongly-identified stolen vehicles over a two-month period. Flock called the decision a "surprise."
- "Democracy in Action: Cities react to privacy concerns by canceling Flock surveillance contracts" - Straight Arrow News.
- "Oshkosh Council Rescinds Flock Camera Contract After False Statements" - WBAY, April 2026.
- "Why More Cities Are Suddenly Pulling The Plug On Flock Safety Cameras" - Carscoops, February 2026. See also NPR for the broader pattern.
- Amazon termination of Ring-Flock data-sharing partnership, February 2026. Coverage in the same NPR cancellation roundup and broader industry reporting.