The Flock surveillance system in San Francisco, designed to capture license plates for criminal investigations, has become a focal point of controversy. On June 17, 2026, Police Chief Derrick Lew revealed that federal and out-of-state agencies had improperly accessed the city’s license-plate data, raising significant privacy concerns.
The system, implemented in 2026, has been a valuable tool for the San Francisco Police Department (SFPD) in tracking and locating vehicles involved in criminal activities. However, the recent audit uncovered 299 illegal inquiries over the course of a year, highlighting potential vulnerabilities in the system’s security protocols.
Federal Agencies and Data Access
The audit revealed that agencies such as the Drug Enforcement Agency (DEA) and the Internal Revenue Service (IRS) accessed the Flock data. While the SFPD stated that Immigration and Customs Enforcement (ICE) and the Department of Homeland Security (DHS) were not directly involved, concerns remain about data sharing among federal agencies.
California law prohibits sharing license plate data with out-of-state or federal agencies. Despite this, the Northern California Regional Intelligence Center (NCRIC) provided access to the Western States Information Network (WSIN)which then queried the SFPD data on behalf of out-of-state agencies. The analysts involved were reportedly unaware of the legal restrictions and have since updated their policies.
Investigations and Legal Implications
The leak is currently under investigation by the city’s Human Rights Commission and the Department of Police Accountability. Chief Lew immediately turned off access to the surveillance system from the NCRIC and initiated an internal review. This incident is part of a broader issue, as federal agencies sought data from hundreds of other law enforcement agencies across the state.
The Flock surveillance system has been a subject of legal challenges. In February, an Oakland-based law firm filed a class-action lawsuit against Flock, alleging violations of privacy laws. The lawsuit claims that Flock allowed out-of-state agencies to search the SFPD’s database more than 1.6 million times over a seven-month period. Some departments, like Mountain View, terminated their Flock contracts upon discovering similar violations.
Privacy Advocates and Public Response
Privacy advocates have long expressed concerns about the use of automated license-plate readers (ALPR). The technology can track drivers’ locations and movements, raising questions about surveillance and civil liberties. The recent incident has amplified these concerns, with advocates calling for stricter regulations and oversight.
Despite the controversy, the SFPD has defended the Flock system, highlighting its effectiveness in reducing crime. Chief Lew described it as a big tool in our tool vault in terms of ongoing crime-fighting efforts. The system has reportedly contributed to a historic drop in both violent and property crime amid critical staffing shortages.
The ongoing investigations and legal challenges will likely shape the future of surveillance technology in San Francisco and beyond. As the city navigates these issues, the balance between public safety and privacy remains a critical consideration.
