Plate readers,
privacy and misuse.

What the records can do, what official investigations have found, and what we still don’t know about Needles.

The photo is the start of a searchable record.

Flock is one brand of automated license plate reader, or ALPR. It records a vehicle’s plate, the camera location and the time. A car does not need to be on a police alert list to become a stored record. Flock’s data description · State audit

How police use the records

Alerts can help locate stolen vehicles or missing people. Investigators can also search earlier sightings to follow a lead after a crime is reported. How the systems are used

Mountain View, California, reported Flock-assisted stolen-vehicle recovery and a missing-family welfare check. These are agency accounts of particular cases, not a controlled measure of crime prevented. Reported cases · p. 12

Compare effectiveness studies

What makes a travel record sensitive

Repeated sightings can reveal travel patterns. A sighting alone does not identify the driver or the reason for a trip. State audit: privacy concerns

What fixed and mobile cameras can reveal

The State Auditor cites a police-chiefs report warning that mobile readers could record cars at doctors’ offices, counseling meetings and political-protest staging areas. The Needles proposal is for fixed cameras; that example does not establish cameras at those places in Needles. Fixed-camera sightings can still build a travel history. Needles installation plan · Audit discussion

Black Flock Safety camera mounted on a green pole beside a solar panel.
What a Flock camera looks like

Example photo, February 2024. This is not an identified Needles installation.

Bruxton · CC0 1.0 · Original photo

Follow the interactive camera record

What has actually been documented?

Selected official findings and investigations involving Flock. These cases do not establish how common misuse is or that it occurred in Needles.

Savannah, GeorgiaAugust 2026Department finding

Searches involving acquaintances and family

Savannah police reported firing six employees after finding personal searches and an instance of giving outside agency personnel access to Flock. The GBI later announced charges against four former employees.

Charges are not convictions. Criminal outcomes and employment appeals have not been established in the sources reviewed here.

More about the finding

Police said auditing identified the activity and that it added weekly reviews. Employment findings and criminal charges follow separate processes.

Effingham County, GeorgiaJuly 27, 2026Criminal allegation

A stalking charge involving a former employee

The GBI charged a former sheriff’s employee with stalking and plate-reader misuse. It said he retained access to that agency’s Flock account after leaving.

This is a charging announcement, not a conviction. A later court outcome has not been verified here.

More about the allegation

Investigators alleged more than 60 accesses unrelated to police work between June 15 and July 5. He was working as an investigator for a district attorney’s office at the time.

Mountain View, CaliforniaFebruary 24, 2026 reportCity audit finding

Outside searches bypassed the City’s approval process

City staff found that Flock lookup settings had allowed agencies to search without the City’s individual approval. Reviews of local staff searches had not shown misuse.

Flock could not tell whether certain federal searches returned any Mountain View records. Logged searches are not proof that records were obtained.

More about the finding

The report describes national access enabled from August to November 2024 and statewide access from August 2024 to January 2026, contrary to the intended setup. Staff said records could not establish who changed the earlier settings.

Sharing, mistakes and copies kept elsewhere.

A search can be permitted by the software and still fall outside an agency’s rules. An accurate plate read can be misused; an inaccurate one can point to the wrong vehicle.

What does “tri-state access” mean here?

The 2024 Needles packet describes access to a camera network across the tri-state area. California DOJ’s 2023 guidance says California law-enforcement agencies cannot share ALPR information with out-of-state or federal agencies, including through pooled vendor databases. Needles packet · p. 144 · DOJ guidance · p. 3

Searching another agency’s cameras and letting that agency search Needles records are different things. The documents do not establish current sharing permissions or unlawful sharing here. The pending request seeks those permissions and access logs. Track the request.

What have other agencies reported about sharing?

Flock says agencies control sharing and searches must have an investigative purpose. Mountain View, California, found access that did not match Mountain View’s intended setup. A written rule, a software setting and a record of actual searches establish different things. Flock’s stated controls · Mountain View audit

University of Washington researchers also reported immigration-enforcement searches and sharing in records from 31 Washington agencies in 2025. Their audit records show searches, not the results returned. That study does not establish current access to Needles records. University records investigation

What if a plate is read incorrectly?

Flock acknowledges that plate readings can be incomplete or inaccurate. Its policy tells users to check the reading before acting on an alert or search. Flock policy · Accuracy

A mistaken match could lead an officer to investigate the wrong vehicle. This is a potential consequence, not a documented Needles incident or an estimate of the error rate.

Does a deletion deadline cover every copy?

The Needles quote lists 365 days. San Bernardino County Sheriff’s manual specifies two years for server-downloaded data, with exceptions for preservation. A record saved outside the camera service can follow a different schedule. 2024 quote · Sheriff manual · pp. 355–356

The project has not verified the current Needles settings, what was downloaded or when those copies are deleted. A vendor’s default is not proof that every copy disappears on that date.

Read the local retention terms

What safeguards are described?

Flock describes individual accounts, recorded searches, agency-controlled sharing and supervisor review. Savannah says its audit process detected the misuse and it added weekly reviews. These sources describe controls and an instance of detection; they do not show that misuse is always prevented. Flock’s access description · Savannah’s audit account

What changed in Flock’s August 2026 announcement?

Flock announced a seven-day default while preserving existing customers’ retention periods. Some oversight requirements were scheduled for year-end. The announcement does not establish that Needles’ settings changed. Vendor announcement · August 13

What do we know about Needles?

Documented
Needles City Council approved the 2024 proposal. Its quote lists four cameras and 365-day storage. Vote · Quote
Still unverified
Current settings, authorized users, outside-agency access, completed audits and local results. The Needles and San Bernardino County Sheriff records requests are pending.
No local finding here
The records reviewed for this site do not establish misuse in Needles. Findings from other cities cannot establish what happened here.
Sources, selection and review limits

Checked September 9, 2026. This page selects cases with official agency findings or charging notices and includes the vendor’s stated safeguards. It is not a complete incident count, a national misuse rate or a legal opinion. Court dockets and employment appeals were not independently checked. Criminal allegations remain allegations.

Check the evidence

The source, its context and the questions still open for each claim.

365 days in the quote; two years for server downloadsApplication unresolved
1. Source contents
The quote says “Retention Period: 365 Days.” Sheriff section 2.455.30 sets two years for server-downloaded ALPR data, with preservation exceptions.
2. Meaning & context
These may govern different copies. No finding that Needles cloud data is kept for two years, or that the quote is breached. The policy’s statutory citation does not establish a universal ALPR minimum.
3. Freshness & limits
June 4, 2026 manual re-fetched unchanged; ALPR section checked, not all 1,036 pages. Request current settings, export destinations and deletion records.
What could change this account
Deployment-specific settings, replication records or a superseding policy that identifies which copies use which retention rule.

Checked 2026-09-08. Application unresolved. Link to this review

Mountain View reported a termination voteOfficial decision
1. Source contents
City notice reports a unanimous Feb. 24, 2026 termination vote. The staff report distinguishes local-user and network audits, describes unapproved search access, and says the vendor could not determine whether data was obtained through certain federal searches.
2. Meaning & context
The decision is reported by the city; completed removal and deletion are separate questions. A search entry is not proof that data was returned. Mountain View findings do not establish Needles misconduct or identical settings.
3. Freshness & limits
Official agenda and 19-page report re-fetched; report matches retained bytes. The news page blocked repeat retrieval with 403; the official agenda records the passed action. No later implementation record verified.
What could change this account
Later official implementation records, audit corrections or findings that change the account.

Checked 2026-09-08. Official decision. Link to this review

Investigative uses and local effectivenessLocal outcomes not obtained
1. Source contents
The city proposal cites access to a regional network and vendor monitoring/maintenance. Mountain View staff report describes investigative assistance. The State Auditor recognizes uses beyond immediate alerts. Retained report pp. 12–13 re-read September 9: describes stolen-vehicle recovery and a missing family found safe.
2. Meaning & context
An assisted case is not proof of an overall reduction in crime. Privacy failures elsewhere do not establish local misconduct; benefits elsewhere do not establish Needles effectiveness.
3. Freshness & limits
Historical records rechecked; no defined Needles outcome evaluation obtained. The absence of records in this project is not proof of zero benefits.
What could change this account
A local evaluation with defined confirmed leads, false alerts, case outcomes, cost and a defensible comparison method.

Checked 2026-09-09. Local outcomes not obtained. Link to this review

A new default is not a local settingAnnouncement; local application unverified
1. Source contents
Announces a seven-day default while retaining existing customers’ periods; some oversight requirements are scheduled for year-end.
2. Meaning & context
Existing settings and separately saved copies require local records.
3. Freshness & limits
Announcement is not proof of implementation in Needles. Evidence preservation can follow different rules.
What could change this account
Corrected source findings, a fuller methodological review or dated local operating records.

Checked 2026-09-09. Announcement; local application unverified. Link to this review

Who can reach the records?Dated records investigation
1. Source contents
University researchers examined records from 31 Washington agencies and reported direct, apparent indirect and proxy access involving immigration enforcement.
2. Meaning & context
These logs describe searches, not which records were returned. The findings concern Washington in 2025, not Needles today.
3. Freshness & limits
Records investigation, not a peer-reviewed causal study. Dated Washington findings; audit entries show search contents, not returned results. No finding about Needles or current 2026 access.
What could change this account
Corrected source findings, a fuller methodological review or dated local operating records.

Checked 2026-09-09. Dated records investigation. Link to this review

Savannah: department findings and separate criminal chargesOfficial finding; criminal outcome unverified
1. Source contents
The retained department page reports six dismissals and personal or outside-agency uses. GBI’s August 21 notice reports charges against four former employees.
2. Meaning & context
Employment findings and criminal allegations are kept separate; no victims or accused names are needed in the public summary.
3. Freshness & limits
Both official pages freshly read and retained September 9. Month-only event label avoids conflating inconsistent newsroom and article dates. Dockets and appeals not independently checked.
What could change this account
Agency corrections, appeal decisions or a court disposition.

Checked 2026-09-09. Official finding; criminal outcome unverified. Link to this review

Georgia stalking case: an allegation, not a convictionCriminal allegation
1. Source contents
GBI identifies Flock, retained former-employer access, more than 60 alleged non-law-enforcement accesses and stalking charges.
2. Meaning & context
The page establishes an official allegation. Neither a conviction nor a Needles incident is asserted.
3. Freshness & limits
Official July 27 announcement freshly read and retained September 9. Later court outcome not independently checked.
What could change this account
A corrected notice, dismissal, acquittal, plea or judgment.

Checked 2026-09-09. Criminal allegation. Link to this review

Historical sightings and lawful activityCapability and attributed concern
1. Source contents
The 2020 State Auditor introduction explains fixed/mobile readers and searchable records. Its sensitive-location example cites a 2009 IACP warning specifically about mobile readers capturing cars parked at medical, counseling and political-protest locations.
2. Meaning & context
The site identifies that mobile-reader context and separately explains travel histories from repeated fixed-camera sightings. Neither identifies a driver, a trip purpose or such a camera location in Needles.
3. Freshness & limits
Historical 2020 audit freshly inspected September 9. No current Needles inventory or behavioral harm measurement inferred.
What could change this account
Different primary-source context, a correction, or local records establishing actual use.

Checked 2026-09-09. Capability and attributed concern. Link to this review

Vendor-stated accuracy checks and safeguardsVendor statements
1. Source contents
Current pages acknowledge incomplete or inaccurate readings and describe user accounts, purposes, logs, review and sharing permissions.
2. Meaning & context
No marketing error rate, universal compliance claim or legal conclusion is adopted. Historical access failures and future announcements keep their dates.
3. Freshness & limits
Live pages freshly read and hashed September 9. Current Needles deployment and safeguards remain unverified.
What could change this account
Revised vendor wording, independent tests, or deployment-specific configuration and audit evidence.

Checked 2026-09-09. Vendor statements. Link to this review