When Your Vendor’s Accountability Tools Are Also Their Marketing

A surveillance vendor spent years publishing customer success videos. Several of the departments it featured are now the subject of misuse investigations, and those same videos have become the evidence. If your business buys technology, sells it, or publishes case studies about happy clients, there is a durable lesson here that has nothing to do with policing.

“While these incidents show that police departments have mechanisms to detect and address ALPR misuse, Flock’s promotional materials show that it can occur even at departments that were touted as exemplary.” Flock spokesperson Paris Lewbel responded that “when improper use is detected, agencies can investigate, take action, and hold individuals accountable.”

— Caroline Haskins, WIRED

Our take

First, the careful version of the facts, because precision matters when people’s careers are involved. Per WIRED and public statements: Albany, Georgia announced on July 6 that it fired five officers after an internal investigation into improper use of automated license plate readers, and the Georgia Bureau of Investigation charged officers in connection with misuse of license plate data. In Savannah, four officers and two civilian employees were placed on administrative leave after an internal review found potential misuses; the mayor referred the matter to the GBI, which confirms that investigation remains active. A Sandy Springs officer was terminated last year amid an internal investigation into alleged misuse. A Baytown, Texas officer resigned on July 30 while internal and criminal investigations remained open. These are allegations, terminations, and charges. They are not convictions, and nothing here establishes that any of these departments as institutions acted improperly.

Now the part that should interest anyone who buys or sells technology. Flock did not do anything wrong by making those promotional videos. It found enthusiastic customers, filmed them, and published the results. That is ordinary, competent B2B marketing. And it still turned into a liability, because a case study is a permanent public bet on a customer’s future conduct. Every agency that publishes client success stories — ours included — carries this exposure. Most never think about it until the day a featured client makes the wrong kind of news.

Second, look closely at the audit numbers, because they cut both ways. Flock introduced its Audit Assistance tool in April 2026. Savannah’s police chief told a local outlet the resulting review surfaced 127 inappropriate searches out of roughly 39,000 conducted this year. Lewbel frames that as oversight working. He has a point. But a vendor-supplied tool that flags misuse in the vendor’s own product also defines what counts as misuse and sets the denominator. That is not an independent audit, and treating it as one is how buyers talk themselves into false comfort. The honest reading is that the tool found something real and that nobody outside the vendor can verify what it did not find.

Third, and most useful to you: the documented failure mode in this category is not rogue individuals. It is defaults. In August 2025 the Illinois Secretary of State’s office found Flock in violation of a 2023 state law barring license plate data from being shared for immigration or abortion enforcement. CEO Garrett Langley’s own admission is the tell: “We also didn’t create distinct permissions and protocols in the Flock system to ensure local compliance.” That is a product design gap, not user error. Cities elsewhere have since ended contracts after discovering data-sharing settings they had not knowingly enabled.

There is a local dimension too. Flock cameras operate in and around Las Vegas, and the Metropolitan Police Department uses them. As The Nevada Independent has reported, many were funded by private donation rather than public purchase, which meant they entered service without the budget scrutiny a normal procurement would trigger. Nevada also has no state statute specifically regulating automated license plate readers. For a Southern Nevada business owner, that combination means vehicle data touching your fleet, your employees, and your customers is being collected under rules no elected body voted on.

One last thing to keep in perspective. Roughly 53 municipalities across 20 states have canceled or rejected Flock contracts, while the company added hundreds of new cities in the same period and passed 100,000 cameras nationally. Public backlash is real, but it is not a market correction and it will not protect you. If you want governance over a vendor’s product, you have to write it into the contract yourself.

What this means for your business

1. Decide your case study exit plan before you publish one. Get written permission, keep a record of exactly what the client approved, and agree in advance who can request removal and how fast. Then actually be able to unpublish within a day — including from your YouTube channel, your PDFs, and your sales decks.
2. Put audit rights in the contract, not in the product roadmap. Demand exportable raw access logs, a stated retention period, and the right to a third-party review. A dashboard your vendor controls is a courtesy. A contractual audit right is leverage.
3. Audit the defaults on every tool you already own. Data sharing, sub-processor access, cross-account lookups, regional storage. The Illinois findings and the cancellations that followed were largely about settings customers did not know were on. Schedule this quarterly and assign one named owner.
4. Free and donated technology still creates liability. Privately funded cameras skipped public procurement review. The same shape shows up in your stack as free martech tiers that pay for themselves through data access. Read what the free tool takes.
5. If you operate in Nevada, assume no statutory backstop. With no state ALPR law, your protections are whatever your contracts and internal policies say. Write a short, plain-English policy covering what vehicle, location, and customer data your business collects and who can query it.

---

Caroline Haskins did the original reporting that surfaced these videos and investigations. Read the full story at WIRED.