During a Senate hearing, lawmakers criticized automatic license plate readers amid concerns about Flock; the CEOs of Flock and others declined to attend

Automatic license plate reader searches now require a justification and case number, adding a step for law enforcement.

Members of the Senate Judiciary Subcommittee on Crime and Counterterrorism criticized automatic license plate readers (ALPRs), including those from Flock, citing concerns about warrantless searches, insufficient cybersecurity, and potential misuse for surveillance. Senators expressed worries that ALPRs could be used to target specific groups, support immigration enforcement, or track individuals seeking reproductive care. CEOs from ALPR companies like Flock, Axon, Motorola, and Verkada were invited but declined to attend the hearing. Cybersecurity engineer Benn Jordan testified, challenging Flock's claims of not being hacked and advocating for independent security testing. Witnesses also suggested implementing a federal data privacy law and requiring warrants for accessing historical ALPR data. Flock has reportedly introduced new search guardrails, requiring justifications and case numbers for database queries.

The bipartisan criticism of ALPRs, particularly from companies like Flock, signals a growing legislative focus on regulating surveillance technologies. Senators' concerns about data privacy, constitutional rights, and potential for abuse highlight a widening gap between technological deployment and public trust. The refusal of company CEOs to testify further suggests a reluctance from the industry to engage proactively with lawmakers on these critical issues. The potential for ALPR data to be used for immigration enforcement or to track individuals seeking sensitive health services indicates a broad societal impact beyond initial law enforcement applications.

Moving forward, watch for potential legislative action aimed at establishing clear federal guidelines for ALPR use, data retention, and security. The push for independent security testing and a comprehensive data privacy law, akin to GDPR, could reshape how these systems are developed and deployed. Companies like Flock will likely face increased pressure to demonstrate transparency and robust privacy safeguards to regain public and governmental confidence.