Flock Safety's New 'Audit Assistance' Tool Faces Scrutiny Amid Transparency Gaps

Surveillance technology firm Flock Safety has rolled out a suite of new policies and a tool dubbed 'Audit Assistance,' asserting these measures will enhance accountability and curtail misuse of its automated license plate reader (ALPR) systems by law enforcement. However, the company's reluctance to disclose the operational specifics of its flagship auditing feature has drawn sharp criticism from privacy experts and civil liberties organizations, who question its genuine effectiveness and potential for independent verification.

Quick summary

• Flock Safety announced new policies and a tool, 'Audit Assistance,' to combat misuse of its license plate reader systems by law enforcement.
• The company now recommends police retain data for only seven days (down from 30) and introduced 'Evidence Mode' for longer retention in specific cases.
• 'Audit Assistance,' which flags 'abnormal activity' for administrator review, is now mandatory for all customers by year-end, despite being launched in April.
• Privacy advocates and critics express significant skepticism due to a lack of transparency regarding how the tool functions, its effectiveness, and the absence of third-party audits.

Why it matters

The proliferation of surveillance technologies like automated license plate readers (ALPRs) has long ignited debates surrounding privacy rights, potential for abuse, and the balance between public safety and civil liberties. Flock Safety's latest initiatives directly address these contentious issues, signaling an acknowledgment of widespread concerns about misuse. For citizens, the effectiveness of tools like 'Audit Assistance' could dictate the extent of protection against unwarranted surveillance and data abuse by authorities. For law enforcement agencies, these policies present both a framework for responsible data management and a challenge to foster public trust, particularly if the mechanisms designed to ensure accountability remain opaque. For the broader tech industry, this case underscores the increasing demand for transparency and independent oversight, especially when developing technologies with significant societal impact and potential for rights infringement.

Background

Flock Safety has been a prominent player in the rapidly expanding market of law enforcement surveillance technology, deploying thousands of ALPR cameras across communities. These systems capture images of vehicles, read license plates, and store data, which can then be searched by police for various investigations. While proponents argue such technology is vital for solving crimes like car theft and identifying suspects, critics have consistently raised alarms about its pervasive nature, potential for mission creep, and documented instances of misuse.

Over the years, numerous reports have detailed incidents where Flock's technology, or similar ALPR systems, were allegedly abused by law enforcement personnel for personal reasons, such as stalking or tracking individuals without legitimate investigative grounds. This pattern of misuse has fueled a growing demand for stronger accountability measures and robust oversight. The company's previous policy of retaining data for 30 days, while offering investigative flexibility, also presented a larger window for potential unauthorized access or abuse. These ongoing concerns and incidents have pressured Flock to demonstrably address the ethical challenges inherent in its technology, culminating in the recent announcement of new policies and the 'Audit Assistance' tool.

Flock's New Policy Rollout

Beyond the 'Audit Assistance' tool, Flock Safety has introduced several key policy adjustments aimed at tightening controls around its surveillance data. Notably, the company is now recommending that police departments reduce their data retention period from the previous 30 days to a mere seven days. This significant reduction aims to minimize the overall data footprint and, consequently, the window for potential misuse or security breaches.

To accommodate legitimate longer-term investigative needs, Flock has also introduced 'Evidence Mode.' This feature allows customers to retain data for extended periods in 'exceptional cases,' but critically requires a specific case number, theoretically linking longer retention to active investigations and preventing arbitrary data stockpiling. Furthermore, the company is empowering customers to impose limits on how much data they share with other agencies. These limits can now be based on the type of offense under investigation, adding a layer of control over inter-agency data sharing that was previously less restrictive. These changes represent a concerted effort by Flock to respond to privacy critiques regarding data volume and sharing practices.

The 'Audit Assistance' Enigma

At the core of Flock's latest accountability push is a tool called 'Audit Assistance.' Initially launched in April, the company has now made its adoption mandatory for all customers by the end of the year, claiming over a third of its clientele have already enabled it. According to Flock, 'Audit Assistance' is designed to 'detect abnormal activity and flags it for Administrator review.' If such activity is detected, the tool can automatically lock out flagged users until an administrator intervenes, a feature Flock states has already helped identify and stop abuse.

Despite its purported importance and touted capabilities by executives, including one police major who described it as an 'algorithm that has notified us of any type of bias,' Flock has remained conspicuously vague about the tool's underlying mechanics. When pressed for details, the company specified that 'Audit Assistance' is not based on machine learning or artificial intelligence. Instead, it is described as a 'data tool that flags atypical search patterns for further review.' An example provided is flagging a user who searches for the same license plate using multiple different case codes, indicating potential abuse. However, critical questions remain unanswered: what specific patterns constitute 'abnormal activity'? What data is it trained on? What are its false positive and false negative rates? Has its efficacy been validated by an independent third party? The lack of concrete, verifiable information leaves a significant void in understanding its true operational integrity.

Skepticism from Privacy Advocates

The announcement of 'Audit Assistance' has met with deep skepticism from privacy experts and civil liberties organizations. Chad Marlow, senior policy counsel at the American Civil Liberties Union (ACLU), expressed concerns that there is 'no evidence that the tool works consistently' to address abuse. Marlow criticized Flock's assertion that recent arrests for misuse are proof of the tool's efficacy, arguing that without knowing the total number of officers misusing the system, it's impossible to determine if the tool is catching 5% or 95% of violators. He emphasized the necessity of an independent evaluation to determine its actual effectiveness, calling it 'window dressing' without such an audit.

Cooper Quintin, a security researcher at the Electronic Frontier Foundation (EFF), took a more cynical view, suggesting that even if the tool works, law enforcement could find ways to circumvent it. Quintin underscored that ultimate accountability relies on consequences for abusers and an independent oversight structure, rather than relying on internal mechanisms within the same agencies that might be perpetrating the abuse. Similarly, Rachel Levinson-Waldman, director of the Brennan Center’s Liberty and National Security Program, while acknowledging that making the tool mandatory is a step in the right direction and 'a great idea in theory,' stressed the imperative for the tool itself to be audited due to the insufficient information surrounding its practical operation.

Recent Incidents Fuel Debate

The timing of Flock's announcements is particularly relevant, coming on the heels of continued reports of its technology being misused. Just recently, three former Georgia sheriff's deputies were arrested and accused of using Flock cameras to stalk individuals with whom they had personal relationships. Significantly, in this specific case, Bibb County Sheriff David Davis credited Flock's new Audit Assistance tool with uncovering the misuse. While this incident is cited by Flock as evidence of the tool's utility, critics argue that a single, albeit positive, outcome does not establish systemic reliability or broad effectiveness without independent validation and transparency on the tool's overall performance metrics.

The Broader Challenge of Surveillance Accountability

The ongoing debate around Flock Safety's 'Audit Assistance' tool encapsulates a broader, enduring challenge in the realm of modern surveillance technology: how to ensure accountability and prevent abuse when powerful tools are deployed by government agencies. The inherent power imbalance between the state and its citizens necessitates robust, verifiable safeguards, not just assurances from technology vendors. Without clear, auditable explanations of how these systems detect and deter misuse, public trust remains tenuous. This lack of transparency, coupled with documented instances of abuse, reinforces the argument for independent regulatory oversight, strong legislative constraints on technology deployment, and, most critically, warrants for its use in all but the most exigent circumstances.

Qnews24h insight

Flock Safety's introduction of 'Audit Assistance' represents a belated, yet necessary, acknowledgment of the severe ethical and privacy challenges inherent in its surveillance technology. While the move towards shorter data retention and mandatory auditing is theoretically positive, the company's persistent opacity regarding the tool's operational mechanics is deeply problematic. True accountability cannot be built on an unverified 'black box' algorithm, particularly when deployed in sensitive law enforcement contexts. Without transparent methodology, demonstrable efficacy through independent audits, and clear metrics on false positives and negatives, 'Audit Assistance' risks being perceived as a public relations maneuver rather than a robust safeguard. The ultimate burden of proof now rests with Flock to open its technology to scrutiny, not just for the sake of its reputation, but for the fundamental protection of civil liberties in an increasingly surveilled society.

Sources

• Flock says its new tool will help identify police abuse, but hasn’t explained how it works | TechCrunch

Frequently Asked Questions (FAQ)

What is Flock Safety's 'Audit Assistance' tool?

Flock Safety's 'Audit Assistance' is a new feature designed to detect and flag 'abnormal activity' by law enforcement users of its automated license plate reader (ALPR) systems. When flagged, the tool can lock out the user for administrator review, aiming to curb misuse. Flock states it identifies atypical search patterns but is not based on machine learning or AI.

Why are privacy advocates concerned about Flock's new tool?

Privacy advocates are concerned due to a significant lack of transparency from Flock Safety regarding how 'Audit Assistance' actually works. They question its effectiveness, the absence of independent audits, its false positive/negative rates, and the specific criteria for flagging 'abnormal activity.' Critics argue that without this information, its ability to consistently prevent abuse is unproven.

How has Flock Safety previously addressed concerns about misuse?

Before introducing 'Audit Assistance' and updated data policies, Flock Safety had faced years of scrutiny and reports of its ALPR technology being misused by law enforcement for personal reasons. The company's previous data retention policy allowed for data storage for 30 days. The new measures represent a shift towards more restrictive data policies and a proactive tool to monitor user activity, following persistent calls for greater accountability.