US law enforcement used ALPR networks to monitor protesters, raising privacy concerns

An investigation by the Electronic Frontier Foundation documented law enforcement use of Flock Safety automated license plate reader (ALPR) data to search for and track protesters and activists. Local governments and advocates responded with policy actions and contract terminations, and the vendor publicly defended its product.

US law enforcement agencies (using Flock Safety ALPR systems) · Incident Nov 20, 2025 · Indexed Jun 10, 2026 · 3 sources

Centralized, searchable ALPR databases plus lax access controls let law enforcement retrospectively track protesters.
What
An investigation by the Electronic Frontier Foundation documented law enforcement use of Flock Safety automated license plate reader (ALPR) data to search for and track protesters and activists.
Incident date
Nov 20, 2025
Who
US law enforcement agencies (using Flock Safety ALPR systems)
Failure mode
Policy Violation
AI surface
Computer Vision
Severity
High

What happened

In November 2025 the Electronic Frontier Foundation published an investigation documenting law enforcement searches of Flock Safety's ALPR database that identified and allowed retrospective location tracking of protesters and activist groups. The reporting showed multiple searches and queries by police departments that, according to the EFF analysis, were used to locate individuals present at demonstrations. In January 2026 the Santa Cruz City Council voted to terminate its contract with Flock Safety, citing privacy concerns. The vendor published responses defending its system and contesting claims of mass surveillance.

What broke inside the model

Failure path · mode profile · Policy Violation
  1. 01 · TriggerA prompt pushes against a deployment boundary.
  2. 02 · Model stepThe model produces the disallowed output.
  3. 03 · Control gapNo enforcement blocks it at generation time.
  4. 04 · FailureThe output crosses the policy line.
  5. 05 · ConsequenceA limit the business set is breached in public.

The output crosses a policy boundary the deployment had defined.

The failure was primarily governance and misuse rather than a technical hallucination: centralized, searchable ALPR databases combined with broad query access and retention policies enabled retrospective location tracking. Access controls, use policies, and oversight were insufficient to prevent queries that targeted protesters or activist groups. The system design and vendor-to-agency integrations thus permitted operational uses that raised documented privacy and civil-liberties concerns.

Public visibilityHigh
Regulatory exposurePossible
Customer impactMany customers
Financial impactUnknown
Time to disclosureMonths
  1. PressHow Cops Are Using Flock Safety's ALPR Network to Surveil Protesters and Activistseff.org
  2. PressSanta Cruz votes to terminate its contract with Flock Safetysantacruzsentinel.com
  3. PressFlock Safety cameras used to monitor protesters, rights groups saytherecord.media
Permalinkhttps://failureindex.ai/failures/law-enforcement-used-alpr-networks-monitor
CitationAI Failure Index. "US law enforcement used ALPR networks to monitor protesters, raising privacy concerns" (FI-0403). Realm Labs. https://failureindex.ai/failures/law-enforcement-used-alpr-networks-monitor (indexed Jun 10, 2026).
Share cardA branded image of this record for posts and slides.

Data fields CC-BY 4.0, prose citation permitted. Incident ID FI-0403. Full dataset at /data.

Note from Realm Labs, the Index steward

How Realm fits

Controls for this failure mode
  • Prism
  • OmniGuard

This entry sits in the index's predictive wing: a system that scores, ranks, perceives, or steers rather than generates. Realm's runtime layer is built for the generative and agentic systems now moving into these same decision seats, where it watches a model's internal state and holds an unsupported claim or an unchecked action before it commits. The control gap on this record, an automated decision that reached people with no runtime check in front of it, is the same gap. The index keeps predictive failures on the record because the pattern carries straight into the systems shipping today.