Florida banned one surveillance company's cameras from state highways, but 10,000 of them are still watching everywhere else, and the problem isn't rogue cops, it's that the system was built to let anyone with a badge stalk anyone they want.

The Summary

The Signal

Flock Safety's automated license plate readers have been quietly carpeting Florida for years. Law enforcement agencies signed contracts. Cameras appeared on roadsides. Crowdsourced mapping shows nearly 10,000 units concentrated around major metros, likely an undercount since it only captures what citizens have spotted and reported. Nobody voted on this. Most people didn't know it was happening until the abuse stories started breaking.

The abuse is spectacular. Georgia Police Chief Michael Steffman searched his ex-girlfriend Marci Bakely's license plate roughly 600 times. He tracked her daughter too. Wherever Bakely drove, groceries, dates, anywhere, he knew within minutes and texted her. The Georgia Bureau of Investigation arrested him in November 2025 on stalking and harassment charges. He died before trial.

"These abuses required no hacking or stolen credentials. Each user walked through the front door."

Washington Post investigations identified at least 50 officers accused of misusing ALPRs, with 26 using Flock cameras specifically to spy on romantic targets. That number has since climbed to at least 100 police department employees charged with or accused of misuse. Flock's response: these bad actors represent a tiny fraction of their 140,000 monthly users, and permanent audit logs help uncover misconduct.

That defense misses the point entirely. The problem is architectural, not just about bad users. Audit logs are forensic tools. They tell you what happened after someone has already been stalked for months. They don't prevent access. They don't require a warrant. They don't ask why a patrol officer in a small town needs to search the same plate 600 times.

Key architectural failures:

  • 140,000 users with legitimate credentials and unrestricted search access
  • No real-time access controls or query justification requirements
  • Audit logs that only matter if someone thinks to check them
  • A system that functions as a search engine for anyone's movements with zero friction

This technology goes far beyond what automated license plate readers did in the 1990s. Those early systems mounted on patrol cars captured plate information for specific lookups. Modern Flock cameras create persistent location networks. Every vehicle passing a camera gets logged with plate, location, and distinguishing features. The data doesn't disappear. It builds a map of where you've been, when, and with what frequency.

Florida's late August ban removed Flock cameras from state highways. That's it. The thousands of cameras in metro areas, on local roads, in neighborhoods? Still running. Still logging. Still searchable by tens of thousands of users who need no warrant, no supervisor approval, no documented reason to look up where you were last Tuesday.

The Implication

This is the Web4 surveillance question in miniature. We're building automated intelligence infrastructure that watches, logs, and indexes human movement. The question isn't whether the technology works. It clearly does. The question is who has access, under what constraints, with what oversight, and what happens when 140,000 people can search anyone's location history because they have a badge and a login.

Florida's limited ban is policy theater. Real accountability would require: warrant requirements for historical searches, real-time query justification with supervisor approval, automatic alerts when the same user searches the same plate more than a threshold number of times, and public transparency about how many searches happen and why. None of that exists. The cameras keep watching. The database keeps growing. And anyone with credentials keeps searching.

Sources

The Conversation Tech | Fast Company Tech