What Flock's Privacy and Security Updates Mean for Private Sector Customers

On August 13, Flock announced several updates to privacy, security, and accountability safeguards across our platform. Some apply broadly across Flock. Others are specific to how law enforcement agencies use our technology.

For private-sector customers, the most important distinction is simple: the new seven-day default retention period applies to new law enforcement customers. Private-sector customers continue to operate under the retention terms established for their accounts.

Here’s what changed, what applies to private-sector customers, and how these updates help protect the people, places, and operations you’re responsible for.

What changed for law enforcement

The August 13 updates build on privacy, security, and accountability tools Flock has introduced over time.

For law enforcement customers, the updates include:

• A new recommended and default seven-day automated license plate reader (ALPR) data retention period for new law enforcement customers, alongside Evidence Mode for preserving specific data needed for active investigations.
• More control over which offense types partner agencies can use when accessing shared camera networks.
• Required Audit Assistance enablement and proactive lockout to help administrators identify and respond to atypical activity.
• Required case codes for law enforcement searches, with emergency searches flagged for administrator review.

‍

In addition, Flock made mandatory multi-factor authentication (MFA) standard for all customers logging into Flock, and engaged independent security firm Bishop Fox to conduct a platform security review, with results expected to be published in September.

Together, these changes build on work already underway to strengthen how Flock technology is protected, accessed, and reviewed.

‍MFA applies to all Flock users

Multi-factor authentication is now required for anyone logging into Flock, including private-sector customers.

MFA adds another layer of protection against unauthorized account access, helping protect the information your organization relies on.

‍Existing retention terms still apply for  private-sector customers

Your existing retention terms remain in place. The seven-day default is specific to new law enforcement customers. Private-sector customers continue to operate under the retention terms established for their accounts.

If you have questions about your organization’s retention settings, your Customer Success Manager can help you review them.

Some accountability requirements are specific to law enforcement

The new requirements for Audit Assistance, proactive lockout, and case codes apply to law enforcement customers. They are designed around law enforcement workflows and the responsibilities that come with access to investigative networks.

For private-sector customers who choose to share camera data with a law enforcement agency that has a signed MOU or agreement with Flock, these safeguards provide additional accountability around how authorized law enforcement users access and search shared Flock data.

For private-sector customers, offense-type search filtering isn’t available yet, but it will be later this year. 

Accountability tools help make that use reviewable

Flock's law enforcement safeguards are designed to create clearer records of searches, require documented reasons for searches, identify atypical patterns of activity, and give administrators tools to review and respond.

When a private-sector customer chooses to share camera data with a law enforcement agency that has a signed MOU or agreement with Flock, that decision depends on trust.

Your data. Your decisions.

The recent updates do not change several core principles for private-sector customers. Flock’s license plate reader technology is not facial recognition technology. Flock customers control the data collected by their Flock systems, including decisions about access, sharing, and retention, subject to applicable terms and law.

The recent updates do not change several core principles for private-sector customers. Flock's license plate reader technology is not facial recognition technology. Flock customers control the data collected by their Flock systems, including decisions about access, sharing, and retention, subject to applicable terms and law.

Sharing is your decision. Private-sector customers decide whether to share camera data with law enforcement agencies that have a signed MOU or agreement with Flock. 

Access should be accountable. When authorized law enforcement users search data that private-sector customers have shared with them, built-in accountability tools create records and controls designed to make that activity reviewable.

Flock does not sell customer data. Our business is providing safety technology to our customers, not monetizing their data, and Flock customers control all data sharing.

These principles matter because keeping a business safe is about more than securing a building or a parking lot. It means protecting the employees, residents, customers, visitors, and communities who rely on those spaces every day.

The work continues

The August 13 announcement was one step in ongoing work.

As Flock’s technology, customers, and responsibilities grow, we continue to add safeguards, learn from how they work in practice, and strengthen them over time.

That is what responsible safety technology requires.

We’ll continue to strengthen privacy, security, and accountability safeguards across our technology and explain clearly what those changes mean for the customers who use it.

FAQs

‍Does Flock’s new seven-day retention default apply to private-sector customers?

No. The seven-day default retention period applies to new law enforcement customers. Existing private-sector customers keep the retention terms established for their accounts, and they can contact their Customer Success Manager to review their organization’s settings.

Can private-sector Flock customers control whether they share camera access with law enforcement?

Yes. Private-sector customers decide whether to share access with law enforcement partners. Flock customers control all data sharing. 

What privacy safeguards apply when law enforcement accesses shared private-sector Flock cameras?

When a private-sector customer chooses to share camera access with law enforcement, Flock’s accountability tools help make use reviewable. These safeguards are designed to create records of searches, require context for searches, identify unusual activity, and give administrators tools to review and respond.

What data does Flock collect, and does Flock sell customer data?

Flock LPR systems collect license plate text, date and time, camera location, and basic vehicle attributes such as make, model, and color. Flock does not collect names, addresses, phone numbers, driver identity, biometric identifiers, or other confidential personal information through LPR, and Flock does not sell customer data.

For more information about Flock’s privacy and accountability tools, visit our Compliance Tools resources. If you have questions about your organization’s account, sharing, or retention settings, contact your Customer Success Manager.