The Timeline
- 2022 — The ACLU publicly warns that Flock's centralized database creates a national tracking risk for immigration enforcement. CEO Garrett Langley acknowledges the company complies on a state-by-state basis. Confirmed
- Aug–Nov 2024 — A single Mountain View, CA intersection camera is accessed by federal agencies without the city's consent, via a silently enabled "National Lookup" setting. Confirmed
- May 2025 — 404 Media reports more than 4,000 local searches were run on behalf of ICE. Confirmed
- June 2025 — An ATF agent uses a Loveland, CO police department's own account to run searches explicitly listing "ICE" as the reason. Boulder PD deactivates National Lookup in response. Confirmed
- July 2025 — CEO Garrett Langley publicly denies the company holds active federal contracts. Confirmed
- August 2025 — 9NEWS and 404 Media reveal an undisclosed pilot program giving Customs and Border Protection direct database accounts. Illinois orders the access cut off after a state audit. Flock pauses all federal pilots and the CEO admits the company "communicated poorly." Confirmed
- October 2025 — A University of Washington Center for Human Rights report finds "back-door" Border Patrol access across at least 10 Washington municipal police departments that never authorized federal sharing. Confirmed
- January–February 2026 — Santa Cruz terminates its Flock contract over federal tracking concerns. Mountain View halts its system entirely. Confirmed
- April 2026 — Emory University's Senate demands the campus police department withhold ALPR data from ICE after disclosures show queries dating back to 2023. Confirmed
- May 2026 — A congressional committee formally demands immigration data-sharing records from Denver and Boulder. Confirmed
- June 2026 — San Francisco PD disables access for two regional intelligence centers after an audit finds nearly 300 searches run on behalf of out-of-state and federal agencies. Confirmed
Three Ways Federal Agents Got In
1. Front-Door Sharing
At least eight Washington state agencies — including the Benton County Sheriff's Office and police departments in Arlington, Auburn, Lakewood, Richland, Sunnyside, Wenatchee, and Yakima — had configured direct, one-to-one data sharing agreements with Border Patrol. Confirmed
2. Side-Door & Back-Door Access
Federal agents with their own local-agency logins, or working through local officers willing to run searches on their behalf, queried the system directly. In at least ten additional Washington municipalities, Border Patrol accessed data without any explicit authorization at all between May and August 2025. Confirmed
3. The Undisclosed CBP Pilot Program
The most direct contradiction of Flock's public statements: the company was running an active pilot program that gave CBP personnel their own database accounts, letting them bypass local discovery restrictions entirely. This ran for some time before being exposed by reporters, despite the CEO publicly denying active federal contracts one month earlier. Confirmed
The Numbers
A Mountain View audit found that more than 250 federal agencies had accessed a single intersection camera between August and November 2024. ConfirmedIn San Francisco, regional intelligence center analysts ran searches on the city's camera network nearly 300 timeson behalf of out-of-state and federal agencies, bypassing California's state law restrictions. Confirmed
What Changed
Several states have since passed laws specifically closing these gaps. Washington's Driver Privacy Act (signed March 2026) bans ALPR use for immigration enforcement outright and limits retention to 21 days. Connecticut's Public Act 26-14 (May 2026) does the same and creates a private right of action letting citizens sue officers who violate it. Confirmed See the full legal landscape.