Flock Safety CEO Garrett Langley says the United States needs a “compromise” between privacy and public safety.

It’s a neat phrase, except I don’t like to see “compromise” and “privacy” that close together.

“When people talk about just one of these, privacy or safety, they’re prioritizing the wrong thing, and what we have to prioritize as a country is compromise.”

Langley call for compromise comes as the company faces intensifying resistance to its automated license plate reader (ALPR) network. The opposition has begun to affect Flock commercially and operationally, with agencies disabling cameras or canceling contracts.

The problem is that the public has already been doing the compromising: People’s movements have been routinely captured, stored, searched, and, in some cases, shared far beyond the communities that installed the cameras.

Flock’s ALPRs collect detailed records of where vehicles travel, then make that data available to law enforcement for investigations. Langley now says the company wants more regulation and accountability. Flock says it’s reducing its recommended default retention period to seven days and will require case codes for law enforcement and an audit tool designed to flag suspicious access by the end of the year.

Those are welcome concessions, but they do not resolve the underlying concern: A rapidly expanding, privately operated surveillance network can turn ordinary travel into searchable historical data.

The opposition has not faded; it has intensified. NPR reports that cameras have been vandalized in at least 36 states. Vandalism is neither a productive nor lawful answer, but its spread offers a useful measure of how profoundly many people feel excluded from decisions about surveillance in their communities.

A genuine compromise would not start with the assumption that widespread collection is inevitable and then negotiate the retention period. It would begin with democratic consent, strict limits on how the data can be used, independently enforceable access controls, public reporting, meaningful opt-outs where possible, and a clear requirement that surveillance be necessary and proportionate.

Calls to meet halfway are also harder to take seriously when the CEO has been accused by 404 Media of misleading police about the outlet’s reporting on an abortion-related case. According to 404 Media, his account is contradicted by court records and police reports. That accusation makes his public calls for compromise much harder to accept.

Flock is right about one thing: There needs to be accountability. But calling for “compromise” after the cameras are already up sharply limits the choices left to communities. Privacy is not a bargaining chip to be surrendered whenever surveillance vendors promise safety.

Browse like no one’s watching. 

Malwarebytes Privacy VPN encrypts your connection and never logs what you do, so the next story you read doesn’t have to feel personal. Try it free → 

Last week on Malwarebytes Labs:

• Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords
• How to use GitHub safely
• The backlash against Flock cameras is spreading
• Security updates available for Adobe, Chrome, Firefox, VMWare, and Zoom
• Samsung backs down on threat to delete health data
• Claude for Chrome flaw could let rogue extensions access your Gmail
• July 2026 Patch Tuesday fixes 622 Microsoft CVEs, including three zero-days
• This fake Apple app can unlock your Mac’s password vault
• Warning: Scammers are using FaceTime to empty bank accounts
• The inside job that cost ransomware victims millions
• Trusting your kids online isn’t enough (Lock and Code S07E14)
• Ghostcommit attack hides malicious AI instructions in images
• Fake crypto gift card sites are getting harder to spot

Stay safe!

Scammers know more about you than you think. 

Malwarebytes Mobile Security protects you from phishing, scam texts, malicious sites, and more. With real-time AI-powered Scam Guard built right in. 

Download for iOS → Download for Android → 

Flock-style ALPR systems carry serious privacy and civil-liberties risks, and the backlash is now starting to show up in agency decisions too.

For those not yet familiar with Flock, Flock Safety operates an automated license plate recognition (ALPR) system that uses cameras and computer vision to identify and log vehicle license plates.

According to ACLU.org, in the US there are currently:

“80,000–100,000 Flock cameras in both urban and rural areas on highways, in neighborhoods, and outside your local hardware store.”

Automated license plate readers were sold as a crime-fighting tool, but growing evidence suggests the privacy and accountability problems surrounding Flock are becoming increasingly difficult to dismiss. A growing number of incidents now show the same pattern: broad surveillance, shaky oversight, and enough operational risk to create real harm for ordinary people.

ALPR systems create durable location records about people who are not suspected of anything. Every scan can become part of a searchable trail, and once that data is collected, the risks expand through misuse, unauthorized sharing, vendor practices, and simple errors.

Abuse and errors

One of the most troubling aspects is how easily this technology can be misused. Straight Arrow News (SAN) reported that another police officer was charged after allegedly abusing Flock surveillance tools, adding to a growing list of cases in which officers have allegedly misused license plate reader systems for personal reasons, including stalking and monitoring ex-partners or protesters. An Institute for Justice analysis identified at least 22 cases nationwide in which officers allegedly abused ALPR to keep tabs on their romantic interests, with the bulk of those incidents happening since 2024.

That misuse problem is amplified by how widely the data can spread once it enters the system. Earlier this year, we reported that Mountain View disabled its Flock cameras after discovering that Flock had shared license plate data with hundreds of agencies, including federal entities, without permission, and that some lookup features had been activated without the city’s intent or knowledge. That kind of unauthorized sharing turns a local surveillance tool into a much broader data-exchange network with far weaker public visibility than most residents would expect.

Then there is the accuracy problem. SAN also reported that the Los Angeles Police Department (LAPD) allowed its Flock pilot contract to expire after an inspector general audit found 161 vehicles were falsely flagged as stolen over a two-month period. The audit concluded that 32.3% of the alerts it reviewed were inaccurate. When the system gets it wrong that often, the result is not just inconvenience. It can lead to unnecessary stops, detentions, and avoidable confrontations with law enforcement.

As the audit by the department’s inspector general stated:

“When a license plate matches with a vehicle of interest on a Hot List, an alert will appear on the police vehicle’s Mobile Digital Computer. Often, officers will approach the vehicle with extreme caution or conduct a ‘high-risk’ stop. This involves calling for back up, air support and a supervisor and ordering the suspect out of their vehicle.”

What makes this notable is that the criticism is no longer limited to privacy advocates and researchers. Some agencies are now acting on the concerns themselves, whether by ending contracts, disabling camera networks, or pausing renewals until privacy and oversight rules improve.

Flock is still marketed as a public-safety tool, but the latest reporting shows its real-world impact is increasingly defined by privacy concerns, weak oversight, and growing institutional skepticism. That skepticism is beginning to influence agency decisions. Once law enforcement itself begins pulling back, it suggests the debate has moved well beyond criticism from privacy advocates alone.

Browse like no one’s watching. 

Malwarebytes Privacy VPN encrypts your connection and never logs what you do, so the next story you read doesn’t have to feel personal. Try it free →