§ Claim under review · Release
"Surveillance tech company Flock is rolling out updates—including making Audit Assistance mandatory and requiring case codes for searches—to address reports of police officers across the country abusing its tools to stalk ex-romantic partners and others."
Verdict
Mostly accurate
Confidence
HighSummary
This post is mostly accurate. Flock Safety published an announcement on its own website on August 13, 2026, confirming that it is making its Audit Assistance misuse-detection tool mandatory, requiring case codes for police searches, adding automatic lockouts for suspicious activity, and cutting its default license plate data retention from 30 days to seven with a new Evidence Mode for active cases. The changes came about a week after a Washington Post investigation documenting dozens of officers using the system to track women, and the CEO publicly said the company got it wrong. Two details the post leaves out are worth knowing: the mandatory audit tool and case codes are not required until the end of 2026, and officers can bypass the case-code requirement in emergencies, with those searches flagged for later review. Civil liberties groups including the ACLU and EFF say the changes do not fix the underlying problem, since nothing verifies that a typed case number corresponds to a real investigation. Whether the new rules take effect on schedule or actually reduce misuse has not been independently verified.
The readings
key figures from the evidenceBraselton chief's searches of ex-girlfriend's plate
Why this verdict
Evidence
The vendor's own channel confirms the substance of the claim. Flock's Aug 13 2026 blog post states that the company is cutting default data retention to seven days, making misuse detection mandatory for every customer, and inviting the rest of the industry to meet the same standard , and that new offense filtering, required Audit Assistance, proactive lockouts, and required case codes will give agencies more control while strengthening oversight of system use .
On case codes, the blog states verbatim: "Results from participating agencies have been promising, so we will now require case codes for all law enforcement searches by the end of the year. Agencies may bypass the requirement in emergencies, but every exigent search will be flagged for administrator review."
On retention, the blog states: "When we started Flock 9 years ago, we set the default ALPR retention period to 30 days, unless state or local policy decided on a shorter or longer period. We believed this struck a careful balance between safety and privacy. Today, we are updating our recommendation and default to a 7-day retention, and introducing 'Evidence Mode.'" The blog adds that Evidence Mode, which will roll out in the coming weeks, lets detectives preserve specific ALPR data as evidence for an active investigation in cold storage, consistent with existing laws and policies , and that customers who adopt the 7-day recommendation receive Evidence Mode at no cost, while every community continues to choose the retention period that fits its public safety strategy .
Independent reporting corroborates the mandate and dates it. CNN reports that Flock is now requiring all customers to use its "Audit Assistance" tool by the end of this year, that the tool flags abnormal search behavior by an individual officer, and that around a third of its agency customers had turned it on before it became mandatory . Trade press reports that the feature has been optional since April and Langley said more than one-third of customers had adopted it, with recent reviews associated with the arrests of several officers accused of misusing the system , and that a user whose activity meets Flock's criteria for abnormal behavior will automatically lose access until an administrator reviews the account .
On the causal link to the stalking reporting, Poynter states that the announcement came one week after the Washington Post published an investigation finding dozens of examples of police officers using Flock's cameras to stalk women without their knowledge or consent, that in one case a police chief searched his ex-girlfriend's license plate more than 500 times and repeatedly sent her messages indicating he knew her location, and that by Jan. 1 law enforcement using Flock's database will be required to label every search with a criminal case number . Separate reporting notes that Flock announced the changes the same week Georgia's Bibb County Sheriff's Office arrested three former deputies accused of using Flock cameras to track people they had personal relationships with, with the sheriff crediting Audit Assistance for uncovering the misuse .
The underlying incidents are documented. Braselton Police Chief Michael Steffman, 49, was charged by the Georgia Bureau of Investigation with violating his oath of office, stalking, harassment, and several counts of misusing the department's automated license plate recognition system . In the California case, prosecutors said former deputy Alexander Vanny used Flock as part of a months-long campaign of stalking and humiliating his former fiancée, and Vanny was convicted by a jury on 10 charges including stalking and unauthorized access of electronic data and sentenced in February to six years in prison .
Critics dispute the sufficiency, not the existence, of the changes. The ACLU's senior policy counsel said the update does not change that Flock still compiles "billions and billions of license plate scans every month on people who have done nothing wrong" and facilitates nationwide sharing of that data . Reporting also notes that the ACLU and EFF say the structural warrant gap remains because any of 140,000 officers can still enter a fabricated case number .
Findings
✓ What's accurate 7
- Flock is in fact rolling out the described updates. The announcement is on the vendor's own official channel and is corroborated by CNN, Poynter, Atlanta News First, Police1, and other named outlets.
- Audit Assistance is being made mandatory. It was previously optional, launched in April 2026, and adopted by roughly one third of agency customers.
- Case codes are being required for law enforcement searches, with an emergency bypass that is flagged for administrator review.
- The described proactive lockout exists: abnormal activity can automatically suspend a user pending administrator review.
- The stated motive is supported. The announcement followed by about one week a Washington Post investigation documenting dozens of officers using Flock to track women, and Flock's CEO publicly acknowledged error and apologized in interviews the same day.
- The caption's supporting details check out: default retention moving from 30 days to seven, departments retaining the ability to keep longer periods, Evidence Mode as the preservation mechanism, the Braselton chief's 500-plus searches over seven months, and the Riverside County prosecution.
- The quotation attributed to Langley, including "we got this one wrong," is consistently reported by multiple outlets as coming from his interview with The Verge.
≈ What's misleading 4
- **Omitted qualifier:** the post presents Audit Assistance and case codes as being made mandatory without stating the compliance deadline. Flock's own wording is that these will be required "by the end of the year," which Poynter renders as a Jan. 1 deadline. A reader could conclude the safeguards are in effect now across the network. The post's verb "is rolling out" partly covers this, so the gap is a missing detail rather than a reversal of meaning.
- **Omitted qualifier:** the case-code requirement carries an emergency bypass, and the post does not mention it. Critics quoted in the same news cycle note a further limit that no coverage in the post addresses: the system does not validate that a typed case number corresponds to a real case.
- **Omitted qualifier, minor:** the caption says Flock is "shortening the default period it keeps data." Flock's own framing is that it is updating its recommendation and default, that customers own the data, and that existing customers may retain their current retention policies. The caption does note departments can lengthen the period, which substantially mitigates this.
- **Date context mismatch, minor and confined to a secondary detail:** the caption describes the Riverside County case in allegation terms. That matched the record when the allegations were filed, but Vanny was convicted on 10 counts in December 2025 and sentenced in February 2026 to six years. The case is adjudicated, not merely alleged.
? What's uncertain 4
- I did not load the original Verge article at theverge.com. The Verge's own summary text and the Langley quotes were retrieved verbatim through syndication and through the Verge's own social post, and are consistent across multiple independent outlets, so the attribution is solid, but I am recording that the primary page itself was not opened.
- I did not retrieve the Washington Post investigation directly. The "more than 500 times over seven months" figure comes to me through Poynter and other secondary summaries of that reporting. One tracker-based account puts the total at roughly 600 searches over about a year, with 500-plus of those occurring in the seven months after a specific exchange. The two figures are compatible but the exact framing depends on the Post's own wording, which I did not read.
- Whether the mandates actually take effect on schedule, and whether they reduce misuse, is unresolved. No independent audit of implementation exists yet. Flock's Bishop Fox security review is separate and only a summary is due in September 2026.
- Flock's operational statistics cited in the coverage, such as roughly 1,000 missing people located and more than 20,000 stolen vehicles recovered in July 2026, are vendor self-reports with no published methodology.
Sources
9 of 10 linked to recordsFlock Safety official blog, "Flock Updates Privacy, Accountability, Security, and Transparency Safeguards," posted by CEO Garrett Langley, Aug 13 2026
Garrett Langley post on X announcing the changes and linking the blog
CNN Business, "Flock rolls out new police auditing and accountability controls following surveillance concerns," Aug 13 2026
Poynter commentary summarizing the Washington Post investigation and the resulting Flock changes
Police1, "Flock privacy updates: 7-day default for ALPR data, mandatory misuse safeguards"
Atlanta News First, "Flock Safety overhauls rules following ANF investigations," Aug 13 2026
TechTimes, "Flock Safety Reforms Leave the Warrant Gap Open," Aug 13 2026 (ACLU and EFF criticism)
The Verge article by Lauren Feiner, "Flock CEO: 'We got this one wrong'"
KESQ reporting on the Riverside County case (People v. Alexander Vanny), Dec 2024 through Feb 2026
CBS News Atlanta on the arrest of Braselton Police Chief Michael Steffman