Flock AI Surveillance Senate Hearing - ALPR Cameras, Privacy, Wrongful Accusations & Nationwide Tracking - September 23, 2026

Chairman Josh Hawley22:00Well, let me call to order this hearing of the Senate Judiciary Committee Subcommittee on Crime and Counterterrorism, which I'm delighted to chair and to work on with my colleague, Ranking Member Durbin. Thank you to all of our witnesses for being here Welcome to all of our guests who are here today in the gallery This hearing is about a simple thing It trying to get to the bottom of what is going on with the expanding surveillance network that appears to be going coast to coast in this country.

Chairman Josh Hawley22:37I have in mind the hundreds of thousands of individual cameras all linked to the cloud, all powered by AI, that seem to be spreading all across the country. Practically every state in the union now has them, hundreds of thousands of them, recording billions of images every single month.

Chairman Josh Hawley22:59And the question is, where are all of these images going? Who is using them? What are the privacy protections for them? How do we make sure that this kind of surveillance is consonant with the Constitution of the United States?

Chairman Josh Hawley23:12You know, there's many players in this industry, but there's one name that really stands out above the rest, and that is Flock. If you haven't heard of Flock, all I have to say is Flock's probably heard of you.

Chairman Josh Hawley23:24In fact, the truth is, you have probably been scanned and surveilled and tagged and logged multiple times this week alone. And that's because Flock, by its own admission and its own statistics, maintains a network of 120,000 individual cameras in 49 states all across this country.

Chairman Josh Hawley23:46It estimates that those cameras scan and then generate some 20 billion images. that's with a B, 20 billion images of individuals in their cars or on their motorcycles or other vehicles every single month.

Chairman Josh Hawley23:5820 billion images every single month. Falk is a privately held company based on what we know. It's backed by a venture capital firm. It's worth about 10 billion dollars and it has amassed in a very short time frame a surveillance network unlike any we've ever seen in this country.

Chairman Josh Hawley24:16Really what makes it unique based on what we can tell from the reporting, and the reporting on what these networks can do, I have to tell you, is really kind of wild. What seems to make these networks unique is not just the sheer number of cameras, it's the fact that they're all linked together and powered and searchable by AI.

Chairman Josh Hawley24:29It's unlike anything we've ever seen in this country before. And to give you just a sense of it, I mean, here are some of what these cameras can do. This surveillance network uses thousands of these AI powered cameras to capture and analyze images of passing vehicles.

Chairman Josh Hawley24:45Let's see if we can give you a sense of it. Here's a flock image. They store and catalog details like the vehicles make model color location date time Flock searchable features include details like dents and roof cracks and vehicle damage and racks on the roof or racks on the back or specific bumper stickers even.

Chairman Josh Hawley25:11You think about that. I mean, Flock can tell you if a car has a Trump sticker or a Harris sticker or a Pro-Life America sticker or an NRA sticker. It's really quite extraordinary. Flux cameras can even recognize whether people are in the images.

Chairman Josh Hawley25:28And in fact, Flux admitted in a letter to me ahead of this hearing that you could search their database based on people's images. You could ask to search people, images that had people, images that are scanning the inside of the cars.

Chairman Josh Hawley25:41I mean, this is really quite extraordinary. Flux is not the only player in this field, of course. There are other companies, Motorola, Axon, Verkata, and they've also built these vast surveillance networks that are also supercharged by AI.

Chairman Josh Hawley25:59And the thing is, when you harness all of these things together, you get a capability based on the reporting that is different in kind than anything we've ever seen in this country. And I just want to state right now my principal concern with all of this.

Chairman Josh Hawley26:10Number one, I just want to get the facts as to what these networks are, how they operate, what they're doing. But I also just want to say this and I want to be clear about it.

Chairman Josh Hawley26:20The Constitution of the United States is just as valuable and valid and applicable today as it was almost 250 years ago when it was first penned. And that includes the right to be innocent until proven guilty that is not treated like a criminal and tracked like one.

Chairman Josh Hawley26:39It includes the right to personal privacy, control of your own data and information that is protected in our Bill of Rights. Our Bill of Rights is still good no matter what the technology of the day is.

Chairman Josh Hawley26:52And my bottom line in this hearing is we've got to find a way to protect and enforce the Bill of Rights and the basic personal liberties of every law-abiding citizen in this country, no matter what the technology is.

Chairman Josh Hawley27:05That, I think, is the challenge that is facing us today. And I have to tell you, based on what these reports are, we've got some work ahead of us. You know, to give you another example, a customer in a flock network, for example, just needs to buy a single camera and a subscription that I'm told costs about $3,000 annually and in return for that they get access to a nationwide database of tens of thousands of cameras about 120 in Flock case and billions of images And Flock has admitted that until very recently, there were basically no curbs or restrictions on which of these subscribers, so to speak, could search their databases, what they could do with the images, how long the images were kept, or what other uses they were put to.

Chairman Josh Hawley27:52In fact, customers can search using natural language across this data set, including images that are months and months old. Flock customers are even able to assemble a pattern of life. That's a comment from Flock itself, a pattern of life for the millions of vehicles that are caught up in what is becoming a massive dragnet.

Chairman Josh Hawley28:13You know, the overwhelming majority of drivers or other travelers who are surveilled here have done absolutely nothing wrong. Nothing wrong at all. And I think that's what's so troubling to people as they learn about this technology.

Chairman Josh Hawley28:25It sounds as if, based on the reports we've heard, it's treating every citizen in America. I mean, by now, surely almost all of us have been scanned and logged as if we are criminals, yet without any due process, without any reasonable suspicion, without any articulable suspicion whatsoever.

Chairman Josh Hawley28:41This just seems very, very strange, to put it mildly, and something I think this committee really needs to hear about. You're going to hear in just a moment from someone who has suffered at the hands of this surveillance network, Lindsay Isaacs, who joins us from Palm Coast, Florida.

Chairman Josh Hawley28:57She was falsely accused of being in a car crash, causing one, in fact, and she spent 13 days in jail because of a misidentification from one of these surveillance networks. She's totally innocent. You're going to hear from Alistair Whitney, who's a legal expert for the Institute for Justice, which is an organization that's been documenting the use and sometimes abuse of these cameras.

Chairman Josh Hawley29:18You're going to hear from Sheriff Ross Teeple, who we're so proud is here today from Arizona, who recently decided to terminate his department's use of these cameras in order to protect the privacy of his citizens and to comply with the Constitution of the United States.

Chairman Josh Hawley29:32You're going to hear from Ben Jordan, who's a cybersecurity researcher, who's gonna speak personally to the very real risk that these cameras can be hacked. And all of those images, billions of them, can be accessed by malign actors.

Chairman Josh Hawley29:45And you're gonna hear from Chad Marlow, who's a senior policy counsel at the ACLU where he leads their Get the Flock Out campaign. Sadly, who you're not gonna hear from today are the CEOs of Flock and Axon and Motorola and Vercata, I invited all of them.

Chairman Josh Hawley30:02Senator Durbin and I did, the whole committee. We sent letters to them and asked them to be here. And they're not, and I think that that's unfortunate. I think we need to hear from them about what it is their networks do.

Chairman Josh Hawley30:12I think we need to hear from them about their intentions, about their capabilities, and we need to have an honest conversation about where this is leading us as a country. I'll close with this and let Senator Durbin make his opening remarks.

Chairman Josh Hawley30:23I just want to say this. You know, this is still the United States of America, and it shouldn't be that when you walk out your door in the morning. You just have to agree and assent and accept the fact that you're going to be on camera morning, noon, and night.

Chairman Josh Hawley30:33You'll be tracked by anybody and everybody in the world. You'll have no privacy whatsoever. You'll be tracked when you take your kids to school and tracked when you go to church and tracked when you go to the grocery store.

Chairman Josh Hawley30:41My gosh, that isn't the free society that we've known. That's not what the Constitution guarantees. We've got some work to do, I think, to make sure that the Constitution is real and protected in this area.

30:51And I look forward to doing it today, getting us started at least. Senator Durbin. Senator Hawley, good hearing. Glad to be here and looking forward to the testimony. For the flock CEOs, obviously they're nervous about being on camera, but I sure wish they would have joined us today.

Ranking Member Richard J. Durbin31:07It would have been interesting to hear their explanation of the statistics that have been given us by Senator Hawley. 120,000 flock cameras in 49 states. Which state doesn't have them? Hawaii. Hawaii. I wonder why.

Ranking Member Richard J. Durbin31:29Maybe we'll learn. The collection of information and data is what it's all about these days. Amazon, I'm told, makes more money off the data that they've collected about their customers than they make off the merchandise that they sell.

Ranking Member Richard J. Durbin31:41Hard to imagine, but that information is being sold regularly and collected constantly, and that's what this hearing is all about. I support law enforcement. I'm glad they're here represented by Ross Teeple and others, and we entrust them with keeping us safe in our homes and our neighborhoods and our businesses and as we go about our business.

Ranking Member Richard J. Durbin32:05But we also value privacy. If you're a constitutional scholar, please tell me where the word privacy is in this constitution. You won't find it. And yet the courts have found the inference of privacy and determinations of things as basic as reproductive choices by couples So we know that there is some privacy protection We also know that as we look at the information that gathered it been gathered for many years This is nothing new.

Ranking Member Richard J. Durbin32:37The volume of the undertaking is little. The state of Illinois has had an ALPR, automated license plate reader, as part of their state effort to catch people on the tollway who don't pay their fair share.

Ranking Member Richard J. Durbin32:55This has been around for a long time. It's been used to locate people who have gone missing, cars connected to crimes and stolen vehicles. That all sounds good. And then you hear the story of Ms. Isaacs.

Ranking Member Richard J. Durbin33:06She'll tell you in detail what she's been through when the so-called fail-safe technology fails. And it certainly did in their case, in her case. I just want to say to the chairman, thank you for this hearing.

33:20We have got to find a way to balance in America privacy and security. I think there is a balance. Congress needs to lead the way. Thank you, Mr. Chairman. Thank you very much, Ranking Member Durbin.

Chairman Josh Hawley33:31It's the practice of this subcommittee to administer an oath to our witnesses before they testify. So if you're willing, I'll ask you to stand and answer the following question. Do you swear that the testimony you're about to give will be the truth, the whole truth, and nothing but the truth, so help you God?

Chairman Josh Hawley33:49Very good. The record reflect everyone answered in the affirmative. Let me now give each witness an opportunity to make an opening statement. We're so glad that each of you is here. We'll go right down the dais here, starting with Ms. Isaacs.

Chairman Josh Hawley34:02Lindsay Isaacs is from Palm Coast, Florida. As I said a moment ago, she was falsely accused of causing a fatal car crash in an incident that involved flat cameras. Ms. Isaacs, we're glad you're here.

34:12The floor is yours. Thank you. Good afternoon. My name is Lindsay Isaacs. I'd like to share with you what happened to me beginning on October 4th of 2025 and how it forever changed the trajectory of my life.

Lindsey Isaacs34:24On October 4th, 2025, I spent the day with my mom cooking at my apartment in Palm Coast, Florida. We left my apartment separately at around 6 30 p.m. She drove home to Ocala and I drove to a store in Davenport.

Lindsey Isaacs34:39It was a normal drive. I stopped for gas and then continued to the store. I stayed at the store for about an hour before heading home I arrived home at approximately 1025 p ate some of the food my mother and I cooked earlier that day and called my parents to say goodnight at approximately 1 0 4 a on October 5th an FHP trooper and three deputies from the Marion County Sheriff's Office arrived at my parents home in Ocala looking for me they asked where I was and where my vehicle was and told my parents that I had been involved in a fatal crash.

Lindsey Isaacs35:21My parents were confused and terrified. They told law enforcement I was home asleep in Palm Coast and gave them my address. They could not understand what they were being told and they were now worried about whether I was even alive.

Lindsey Isaacs35:34My parents immediately drove to my apartment. They arrived at approximately 4 45 a.m. and found additional troopers there already. I woke up frantic. My parents were at my door, multiple troopers were outside, and an in-pound truck was taking my Dodge Durango away right in front of me.

Lindsey Isaacs35:59I gave the troopers my receipt and information showing where I had been. I told them that I had not been involved in any crash. The troopers told me that there was damage to my vehicle consistent with the collision, but I could not see the damage they were describing.

Lindsey Isaacs36:10My Durango was in immaculate condition, yet I stood there watching law enforcement take it away while telling me that my vehicle had been involved in a crash where three people died. The same day, October 5th, 2025, I retained criminal defense attorney Patrick McGeehan.

Lindsey Isaacs36:29In February of 2026, my defense team sued the FHP seeking the return of my vehicle. I later learned that a Flock automated license plate recognition camera had captured my Dodge Durango approximately two to three miles west of the crash scene.

Lindsey Isaacs36:50Investigators were looking for a black Dodge Durango. I also later learned that the witnesses had described a maroon Dodge Durango as being involved in this crash and that 911 callers provided information about that vehicle including a partial license plate of 458.

Lindsey Isaacs37:11Despite this information the investigation continued to focus on me and my vehicle. On April 17, 2026 a warrant was issued for my arrest. I was ordered to surrender myself at the Volusia County Jail by 2 p I could not understand what was happening I was placed in solitary confinement for approximately three and a half days Correctional officers told me I had to stay there because of this severity of my charges, and I could not be housed with other inmates until I had been evaluated.

Lindsey Isaacs37:44I was placed in a blue suicide prevention dress with a broken Velcro on the left side that left me exposed. The cell door was shut, and it was not open for approximately 86 hours.

Lindsey Isaacs38:05I'm sorry. I was then moved into a mental health unit for approximately 24 hours before ultimately being transferred to G Block, a maximum security housing unit, where I remained for approximately 10 days. I was terrified.

Lindsey Isaacs38:18I was facing the possibility of spending the rest of my life in prison for a crash I knew that I knew I had not been involved in. I did not know if I would ever get out of jail.

Lindsey Isaacs38:32At my lowest point, I didn't want to be alive. the television was constantly on in the jail my mugshot appeared on the news and I watched as information about me and my case was broadcasted publicly other inmates harassed me about my charges every day I prayed that the truth would come out when another inmate was sent to prison she gave me her bible I read that bible every day I slept with it as my pillow I even took it into the shower because I almost had nothing else and I was afraid someone would take it and steal it I still have that bible today and I cherish it on April 22nd 2026 I was denied bond at my pretrial detention hearing on April 28th my attorney Patrick McGeehan presented the court with multiple photographs of my Durango sitting in the FHP impound lot without the collision damage investigators had claimed was present.

Lindsey Isaacs39:36This prompted the state to reevaluate my vehicle and the case against me. The following day, April 29th, I was finally granted bond. After 13 days in jail, I ran into my mother and father's arms.

Lindsey Isaacs39:51I could not believe I was free. In May, The state ultimately declined to prosecute me and filed no information, and information was never filed against me. The investigation instead resulted in charges against another individual.

Lindsey Isaacs40:12I came here today because I want you to understand that surveillance technology does not exist in a vacuum. Information collected by technology can become part of an investigation that affects a real human being.

40:24in my case a flock hammer captured my vehicle a few miles from the scene of a terrible crash that piece of information became part of an investigation that ultimately led to my arrest on three counts of vehicular homicide and 13 days in jail for a crash i had nothing to do with i'm not here to tell you how to do your jobs i'm here to tell you what happened to me thank you for allowing me to share my story with you today i thank god my family and my attorney Patrick McGeehan for standing beside me and helping me get my life back.

40:51Thank you so much Ms. Isaacs. Thank you for being here for sharing that. Thank you. Mr. Whitney is next Mr. Alistair Whitney who serves as legislative counsel for the Institute for Justice. Mr. Whitney the floor is yours.

41:09Good afternoon good afternoon Chairman Hawley, Ranking Member Durbin, members of the subcommittee. Thank you so much for inviting me to testify today. My name is Alistair Whitney and I'm legislative counsel at the Institute for Justice.

Alasdair Whitney41:20IJ is a nonpartisan public interest law firm that works in both state houses and court houses around the country to defend your constitutional rights. ALPR technology now lets the government do something it could never do before, and that is travel back in time and reconstruct your movements, where you've been, and with whom you've associated, all without a warrant and with the ease of running a Google search.

Alasdair Whitney41:46Governments say they need this kind of frictionless access to fight crime, and the goal is, of course, laudable. But as the Supreme Court has said, the warrant requirement is not an inconvenience to somehow be weighed against the claims of police efficiency.

Alasdair Whitney42:02Technology may make surveillance more convenient, but it does not make the Fourth Amendment's protections any less important. Now, most people picture ALPRs as a camera that reads a plate, but that picture is roughly a decade out of date.

Alasdair Whitney42:15As the chairman mentioned earlier, modern license plate readers photograph every single car that passes. They never blink. They never sleep. They can record make model color bumper stickers dance They can map everywhere a car has been photographed They can flag cars that travel together And they are networked DENSE THEY CAN MAP EVERYWHERE A CAR HAS BEEN PHOTOGRAPHED THEY CAN FLAG CARS THAT TRAVEL TOGETHER AND THEY ARE NETWORKED ONE VENDOR ALONE RUNS A DENSE NETWORK OF MORE THAN 120 CAMERAS IN 49 STATES AND LOGS 20 BILLION PHOTOGRAPHS OF VEHICLES EVERY SINGLE MONTH.

Alasdair Whitney42:45THIS MEANS OF COURSE THAT AN OFFICER IN CALIFORNIA OR FLORIDA CAN ACCESS INFORMATION AND DATA showing where somebody has driven in Missouri or Illinois, with the ease of a couple of keystrokes or clicks.

Alasdair Whitney42:59No federal law governs any of this, and many states don't have any law in the books either. Where rules exist, a vendor often wrote them, and they change with a software update or a publication of a missive on a website.

Alasdair Whitney43:13The result is what you would come to expect and, sadly, what we've come to see. For example, in Kentucky, an officer allegedly searched a Flock database for his child's mother thousands of times over several months, despite the woman having received an order of protection against him.

Alasdair Whitney43:33In North Carolina, an officer was arrested after allegedly accessing Flock's database to look up an undercover investigator's vehicle at the request of a drug suspect. innocent families have been held at gunpoint over a misread letter on a plate images from these cameras have been shipped to gig workers in the philippines to train flocks ai ij's public database now documents hundreds of incidences like these and unfortunately the number of abuses are growing by the day the fourth amendment has something to say about this in jones and carpenter and this June in the court's decisions in Chattree, the Supreme Court made clear that we do not surrender our constitutional rights when we are in public.

Alasdair Whitney44:14In Chattree, two hours of location data was enough to require a warrant. Here, we are talking about weeks or months. That is why IJ is challenging this warrantless surveillance in two federal courts. In Norfolk, Virginia, 175 unblinking eyes captured 41 million vehicle images in less than a month.

Alasdair Whitney44:34In San Jose, California, the city had four cameras at a single intersection in 2021. Today, just under 500 cameras are across the city taking hundreds of millions of photographs a year, which more than a thousand city employees and nearly 300 other agencies in the state search roughly 15 times a day Networks that dense let the government track anyone cheaply for weeks at a time That is exactly why law enforcement likes them Regardless of how these cases turn out, here's the point that matters here the most.

Alasdair Whitney45:14The Fourth Amendment is a floor. It's not a ceiling. Congress did not wait for the courts on wiretaps or bank records. And it should not wait here. Even the judge who ruled against us in Norfolk said that the guardrails should come from legislatures.

Alasdair Whitney45:26This Congress should act now. Congress can require federal agents to get a warrant before they search historical location data, as our model legislation does. It can impose tight limits on how long that data is kept, and it can condition federal dollars on states and localities doing the same.

Alasdair Whitney45:46To be clear, none of these restrictions would stop law enforcement from finding a missing child or a stolen car. We're not asking for you to turn the cameras off with this model legislation. The war requirement is the bare minimum, though.

Alasdair Whitney45:56Without it, there is simply no constitutional way to run these systems because they sweep in the overwhelming majority of drivers who have simply done nothing wrong. And what they capture is not just a day in the life, but a way of life.

Alasdair Whitney46:15This is why Americans' opposition to their unchecked spread crosses every single political line, prompting a growing number of cities and states to slam the brakes on this technology. So we urge the honorable members of this subcommittee to enforce constitutionally grounded restrictions on this technology before these cameras end up on every street corner.

46:28That is not just IJ's concern. That is Flock's stated goal. Is that the America that we want to live in and hand to our children? For IJ and for me personally, the answer is no. Thank you very much for your time and I look forward to your questions.

46:46Thank you, Mr. Whitney. Next is Sheriff Ross Teeple. It's an honor to have you here, Sheriff. Sheriff Teeple is from Pinal County. Did I get that right? Am I saying that right? In Arizona.

46:55Thank you again for your service and thank you for being here. The floor is yours. It's an honor to serve. Good afternoon, Chairman Howe, Ranking Member Derman and distinguished members of the subcommittee. Thank you for the invitation to speak before you today on this critical issue.

Sheriff Ross Teeple47:10Before I begin, I would like to acknowledge the passing of John Kyle last week. Senator Kyle dedicated his life to serving his country and Arizona. I extend my deep condolences to his family and his colleagues that worked alongside him here in the Senate My name is Ross Teeple and I am honored to be elected the 25th Sheriff of Pinal County Arizona and proud to be married to my beautiful bride for the last 33 years.

Sheriff Ross Teeple47:39Protecting public safety and defending constitutional rights are law enforcement's most important jobs. I am here today because I firmly believe we can use technology to keep our community safe while still achieving both of these vital goals.

Sheriff Ross Teeple47:55Let me be entirely clear. Automatic license plate readers or ALPRs are a great tool. Technology that is strictly limited to reading a license plate helps us solve crimes, catch dangerous criminals, and find missing people.

Sheriff Ross Teeple48:09It allows us to cross-reference plates against stolen vehicle database or respond to active AMBER alerts instantly. Under the Supreme Court's landmark 2020 ruling and Kansas v. Glover, running a license plate to check registration status provides the reasonable suspicion needed to make a proactive traffic stop.

Sheriff Ross Teeple48:27Used properly, point-in-time license plate reading is common sense policing. The committee reached out to me because I was one of the first law enforcement leaders in the country to end our contract with Flock.

Sheriff Ross Teeple48:39Make no mistake, that decision was controversial, but it was extremely popular on both sides of the political spectrum. Pinal County represents a unique law enforcement challenges. It's the size of Connecticut, lies between Arizona's two biggest cities, and is about 60 miles from the border.

Sheriff Ross Teeple49:01Interstates 10 and 8, some of the busiest human and drug trafficking corridors in America, run right through the heart of my county. There is a good chance that the fentanyl being sold outside Union Station right across the street or in your hometown came through my county.

Sheriff Ross Teeple49:18Given those challenges, it would be irresponsible not to equip my deputies with the best technology to help them do their jobs. But I will never allow technology to supersede your rights. I believe the latest camera networks, powered by artificial intelligence and machine learning, are capable of violating our citizens' Fourth Amendment rights.

Sheriff Ross Teeple49:38We have entered an area where some camera networks are capable of capturing much more than just a snapshot of a plate on a highway. If my deputies need a search warrant to put a physical tracker on a vehicle, where is the line for camera systems that build an identical AI-driven map of a citizen's life?

Sheriff Ross Teeple49:58Recently, I received a... email from a law enforcement colleague regarding these cameras that I found chilling. He wrote, quote, some courts compare point in time to continuous tracking as the reasoning. Will there someday be a Supreme Court ruling on these?

Sheriff Ross Teeple50:12No doubt. But today, as I type this, there is no violation of the Fourth Amendment, end quote. With all due respect to my colleague, that is the wrong mindset. We shouldn't wait for the Supreme Court to tell us something is a violation before we decide to protect the privacy of our citizens.

Sheriff Ross Teeple50:30History has shown us the cost of law enforcement moving faster than the Supreme Court constitutional rulings. Sixty years ago, in my state of Arizona, a detective arrested a man named Ernesto Miranda. The detective got a confession and secured a conviction, but because procedural safeguards weren't actively protected, the Supreme Court threw that conviction out in Miranda v.

Sheriff Ross Teeple50:54Arizona, fundamentally changing law enforcement forever. Now, everybody in America has heard of their Miranda rights. What people forget or don't know about Miranda rights is that detective should have known better. It was already common practice back then to let suspects know they have a right to remain silent and they have a right to an attorney.

Sheriff Ross Teeple51:17Now, everyone in America has heard the word flock, and in Pinal County, it's become a four-letter word. We rely on private camera networks. If we rely on pirate camera networks to act as a dragnet, continuously logging the habits of innocent Americans without a warrant, we are paving the way to an AI-driven surveillance state.

Sheriff Ross Teeple51:35If we allow government-funded private surveillance companies to push this envelope blindly, we risk a sweeping judicial correction that could strip away the legitimate, life-saving aspects of ALPR technology entirely. We must establish clear statutory boundaries for automatic license plate readers.

52:01We cannot wait for a future Supreme Court ruling to correct AI overreach. We must protect the Fourth Amendment today. Thank you, and I look forward to your questions. Thank you very much, Sheriff. Thank you again for being here.

52:11Next up is Mr. Ben Jordan. Mr. Jordan is a cybersecurity researcher with extensive experience investigating the surveillance networks flock in particular as well as its peer companies. Mr. Jordan, thank you for being here.

52:21The floor is yours. Thank you for having me I a as the senator just mentioned I a independently funded cybersecurity researcher so I don really work for a company or anything to do so I sort of do so as my own hobby that is then funded through a YouTube channel and Patreon and stuff like that.

Benn Jordan52:39And that's a nice way of saying I'm a hacker. Over the summer of 2025, I started learning about some of the weaknesses and the security and the efficacy of the ALPR industry's ecosystem in hardware.

Benn Jordan52:48I found that Flock at the time did not require their clients to use multi-factor authentication. This led me to find FLOC law enforcement accounts for sale by a Russian vendor on a dark web marketplace, which was referenced in Senator Wyden and Representative Krishna Murthy's letter urging the FTC to investigate FLOC as a national security risk in November of 2025.

Benn Jordan53:07I then met and worked with John Gainsett Gains, who had discovered, detailed, and published 55 security vulnerabilities related to FLOC. Some of these vulnerabilities are published through MITRE, who manages security vulnerabilities for the Department of Homeland Security.

Benn Jordan53:25The most alarming of John's reported vulnerabilities was in the most common model of Flock's ALPR camera. I publicly demonstrated that by pushing the button on the camera three times, I was able to access all of the data or reprogram the device however I wanted in under a minute.

Benn Jordan53:40A backdoor, malware, I even played Doom on a Flock camera. In addition to this, John and myself found insufficiently protected sensitive information stored on Flock cameras including photos, license plate data logs, API keys, passwords, and communications.

Benn Jordan53:51Then in December of 2025 through a specialized search engine I found unprotected I found the unprotected administrative interfaces for over 60 newly deployed Flock Condor cameras that had AI enabled pan tilt zoom features.

Benn Jordan54:03This allowed me to remotely view, delete, and modify 30 days of streaming footage from the cameras across the country in potentially sensitive locations like forest trails, people's front porches, and playgrounds. and I could also zoom in on people's mobile phone screens.

Benn Jordan54:23Another security researcher, Joshua Michael, independently found a misconfigured Flock development demo via a Google search that included ArcGIS API keys with virtually unlimited usage limits. ArcGIS stores enormous amounts of data from local governments ranging from the live GPS location of police vehicles to aerial drone feeds.

Benn Jordan54:43flock has over the last year repeatedly repeatedly claimed that their service utilizes end encryption both john and myself have verified the lack of end encryption in a variety of different ways but the most alarming consequence of this was in Dunwoody Georgia where FOIA requests show that Flock employees had viewed cameras on their network over a thousand times including the ones in sensitive areas like the interior of a Jewish community center and a playground.

Benn Jordan55:11Flock's response to my videos over the past year and media stories about our research had primarily been defensive or in denial of the many reported vulnerabilities, but in light of recent events, they have invited myself and other researchers to review their hardware and platform.

Benn Jordan55:26And while there hasn't been enough time for a thorough review before this hearing, I can testify that in my opinion, it does appear that they're taking security a lot more seriously than they were a year ago.

Benn Jordan55:35I have been one of Flock's harshest critics for years, but everything that I just stated about them is a symptom of a much larger problem in my opinion. What I've been asking for around the country is for privatized government surveillance vendors to require independent security testing and inspections.

Benn Jordan55:51I cannot legally open a restaurant or a barbershop without a health inspector and a fire marshal making sure that it's safe for people to enter. Yet there is not a single city or police department in this country that requires this from a third-party company tracking their citizens.

Benn Jordan56:05I want to use my time here to ask our legislators to take this rare bipartisan agreement they're having to view Flock as a canary in the coal mine and understand that this doesn't go away by just removing one company from the equation.

Benn Jordan56:22Both Axon and Motorola are actively rolling out the same reckless features that we're shaming Flock for, and you can expect these same vulnerabilities will continue to happen over and over again when innocent people's data is traded between private companies and police without any safeguard or protection.

Benn Jordan56:38Some members of this community are in support of the Combating Organized Retail Crime Act, which has broad definitions that could lower the security posture of sensitive civilian data to the standards used by retailers.

Benn Jordan56:52After reading that bill, I immediately imagined the scenario where Home Depot or Target, with their data breaches, would all of a sudden, their data breaches affected hundreds of millions of Americans, but now I'm imagining them also including their location data and sensitive information related to ongoing investigations.

Benn Jordan57:10So to be as concise as possible from a security perspective, it would be absurd to be concerned with the scenarios playing out with Flock while supporting bills like CORCA or the extension of FISA 702 that would be the equivalent of feeding a monster in an attempt to defeat it An effective solution to many of the problems that we going to be hearing about today would be using this momentum to make clear effective and unified federal privacy laws on par with the GDPR and literally every other developed country on the planet.

Benn Jordan57:40ALPRs are used all over the world, but viewing license plates as personal data with modern privacy guardrails would have prevented nearly every single problem that we're learning about in this hearing. This is an opportunity for Congress to build the overdue framework to protect the privacy of Americans for generations to come.

57:55Thank you. Thank you very much, Mr. Jordan. Finally, Mr. Chad Marlowe. Mr. Marlowe is Senior Policy Counsel at the ACLU. Mr. Marlowe, thank you for being here. The floor is yours. Chairman Hawley, Ranking Member Durbin, members of the Senate Judiciary Subcommittee on Crime and Counterterrorism, on behalf of the American Civil Liberties Union, I want to thank you for the privilege of testifying before you today.

Chad Marlow58:17My name is Chad Marlowe, and for the past 12 years, I have served as a Senior Policy Counsel at the ACLU, where my work focuses on surveillance, privacy, and technology issues. In that role, I lead the ACLU's policy and advocacy work on automatic license plate readers, or ALPRs, including the ACLU's Get the Flock Out campaign.

Chad Marlow58:33I want to begin my testimony by answering the question I think is on the mind of every person in America. Namely, how did a country founded upon principles of liberty, personal freedom, and inalienable rights, including the right to privacy, find its people's vehicular locations and movements being tracked by governments at the local, state, and federal levels, even though virtually none of us are suspected of committing a crime.

Chad Marlow58:57Put more succinctly, how did we get here? As you know, ALPRs are not new technology. They have been in use in America since the late 1990s. So why then in the last several years have we seen an explosion in ALPR use and its tracking of innocent people?

Chad Marlow59:16The answer is twofold. The first is the entry of venture capitalist funding into the mass surveillance industry. Let me be clear. These massive investments do not reflect a rise in venture capitalist interest in public safety.

Chad Marlow59:33Rather, it reflects a view that ALPR use, if scaled up, could produce the massive profits venture capitalists seek. But to achieve such returns, the ALPR industry needed to go bigger. Much bigger. And that meant pushing far greater ALPR deployment, tracking, data retention, and data sharing to produce far greater profits.

Chad Marlow59:58In short, ALPR... ALPR companies are in the business of trading our privacy for profits, and they are getting rich off of it. Welcome to the surveillance industrial complex, America. The second cause of the spike in ALPR use is the advent of artificial intelligence.

Chad Marlow60:15While the massive deployment of ALPRs allows for the collection of an unimaginable amount of location data, at some point you create a data haystack so big it becomes impossible to find the needle within it.

Chad Marlow60:27But with the advent of AI going through billions of ALPR scans and using them to identify drivers' intimate patterns of life, like what doctor's offices, religious institutions, political meetings, or businesses a person frequents, and even using the AI to generate flimsy criminal suspicion has become light work.

Chad Marlow60:49Because ALPR systems are most commonly sold to local police departments, a nationwide ALPR surveillance network crept up on us slowly and silently until it was too big not to notice. In early 2022, the ACLU became the first organization to sound the alarm about this emerging threat as embodied by Flock Safety's ALPRs on steroids business model.

Chad Marlow61:13The rest of America soon joined us, and here we are. Today, Flock Safety ALPRs collect more than 20 billion license plate scans per month. That's 57 scans per person in America every month. And that's just Flock.

Chad Marlow61:30If you think that sounds like an Orwellian nightmare, you'd be right. Beyond revealing intimate patterns of life and generating questionable suspicion, the most concerning impact of ALPR mass surveillance is that it can chill the exercise of people's rights and freedoms.

Chad Marlow61:46This is why authoritarians love surveillance. In places like Cold War East Germany and modern-day China, the main benefit of mass surveillance isn't catching the few people who break the law, but rather putting all their people in fear of stepping out of line with the government's interests.

Chad Marlow62:03That is the chilling effect, and it's coming to America. In 1755, Benjamin Franklin wrote that those who would give up essential liberty to purchase a little temporary safety deserve neither liberty nor safety. While that is certainly true, today's situation with ALPRs is even worse because the people are being asked to give up their privacy for virtually nothing in return Decades of studies demonstrate that surveillance does not deter crime outside of its use in public parking lots and on public transportation so we get no public safety benefits from ALPRs there.

Chad Marlow62:37Moreover, a recent study of FBI crime data for Atlanta shows that the deployment of more than 5,000 ALPRs in that city had no effect on case closure rates. What that means is that where an ALPR identified a stolen vehicle or a wanted person, that vehicle or person would have been found anyway.

Chad Marlow62:57Yes, perhaps the ALPR would have found the person a few hours or days faster, but that marginal gain does not justify undermining the privacy of 350 million Americans. Because of all this, nonpartisan opposition to flock, ALPRs, and mass surveillance has reunited America in 2026, and our leaders are listening.

Chad Marlow63:17Vermont banned the use of ALPRs effective July 1st, 2027. The governors of Texas and Florida had taken strong executive action to prevent the funding and deployment of ALPRs in their states. Locally, more than 200 municipalities have terminated their relationships with Flock and other ALPR companies.

Chad Marlow63:38The question is, will their Congress join them? The time has come for Congress to prohibit any law enforcement entity who receives federal funding from using ALPRs without exception, because when it comes to protecting civil rights and civil liberties, if you make one exception, you invite others, and that is a slippery slope we must avoid at all costs.

64:00So I implore you senators to be brave and unrelenting in responding to these mass surveillance threats, and please know with absolute confidence that the ACLU and the American people stand behind you. Thank you for the opportunity to testify.

64:18I look forward to answering your questions. Thank you very much, Mr. Marlowe, and to all of the witnesses. Now we'll start some rounds of questioning, and I'll begin, and I want to start with you, Mr. Whitney, if I could, and help me and everybody watching understand what's the difference between this technology that we're talking about today, this AI-powered technology, and a traditional license plate reader technology.

Chairman Josh Hawley64:41And here's why I ask. I'm a former prosecutor. We've got Senator Blumenthal's a former prosecutor. I think Senator Klobuchar's a former prosecutor. Yeah, that's right. I'm sorry. I should have started with you, Senator Klobuchar.

Chairman Josh Hawley64:52My mistake. This is common And when I was Attorney General of Missouri we used license plate readers all the time Sheriff I sure you use them constantly I mean the very familiar technology However my understanding is what we talking about here today with this linked network of private cameras all uploading to the cloud, searchable and powered by AI is something very different.

65:09So explain that to us if you could. What's the difference? Why is this a qualitatively different kind of technology? Well, thank you for the question, Mr. Chairman. You said it. The fact that this technology is now interlinked with cameras across the country in this network that allows a government official or an officer in one side of the country, say California, reconstruct the past movements over weeks or even months of somebody driving in Maryland or Virginia is something that is both qualitatively and quantitatively different than something that, you know, a technology that we've ever seen before.

Alasdair Whitney65:49And that is why we are concerned about this and what makes it different from the ALPRs of yesteryear. Law enforcement can do this right now, as I said, with the ease of typing in a Google search, right?

Alasdair Whitney66:03And then they can get this information showing where you've been, what you've done. In our San Jose litigation, for example, we've seen these cameras placed in front of attorney's offices, medical facilities, churches, mosques, other places of worship.

Alasdair Whitney66:17and to allow government officials all over the country to access that information and potentially track where somebody has been going and what they've been doing is concerning. And of course, this is all supercharged by AI.

66:29A couple of years ago, you couldn't possibly sift through 20 billion images with just a few officers or even 100 or 1000 officers. But AI now makes it much easier to do that with, again, a click of a button or a couple of keystrokes.

66:41If you just to pick up on that point, if you have hundreds of billions of images now that are being collected and collated and available on the cloud, and you've got AI able to search them, you really can reconstruct, the AI can reconstruct the very granular movements of individuals over long periods of time.

66:54Isn't that right? I mean, they could track me driving from Missouri, out here, taking my kids to school, going to church, doing everything that it is that I do. And you could do it for days and weeks at a time using this vast network.

67:13I mean, am I exaggerating? Is that right? No, sir, you are not exaggerating. That is exactly right. I mean, again, we've heard for the proponents of this technology and using it in a way that they been using it right now that they don use it to track people I think that that just simply untrue The value of this technology is tracking people and is determining where they are and what they've been doing.

67:41Including sometimes images of the person, right? Facial images. Let me just put up a poster here, poster number nine. Guys, ALPR does not use facial recognition as a claim we often hear from these companies.

Chairman Josh Hawley67:52And of course, traditional license plate readers don't track individuals at all. I mean, that would have no purpose, right? Sheriff, I mean, you're trying to get the license plate so you can run the chain of custody on the car, see the driver's license.

Chairman Josh Hawley68:00It doesn't track individuals. But we now have, we know this technology is now able to track facial recognition despite what they say. And you can see it on the poster of the motorcycle. Let's take a look at this that I showed earlier.

Chairman Josh Hawley68:15This is from a flock camera, I believe. Look, it's already, the analysis to the Flock camera is already saying, there's the license plates, there's the vehicle, and there's the person. So it's separating out the person, and this image would be totally searchable in this nationwide database.

Chairman Josh Hawley68:32We also know that Flock has applied for a patent that would permit the tracking of individuals. They call it a patent for a dynamic surveillance network that would allow searches of individual persons by image in this huge database.

68:45I mean, this seems to me to be something unlike anything we've seen before. Am I right about that, Mr. Whitney? I mean, we're a long way from a traditional license plate reader here. Yeah, absolutely.

68:58And what we have seen, obviously, with the information that you've shown today, that these surveillance platforms, and that's really how they should be more accurately described, are capable, of course, with a click of a button of being enhanced with software to perhaps do this one day.

69:09And I will note that in the images that we just saw, if there are other motorists, motorcyclists around, pedestrians, the camera is capturing images of those individuals as well. So it's all very concerning.

69:27The Flock CEO wrote me a letter in response to my invitation to testify today. And in that letter, rather, the CEO said some interesting things. And I just want to put these on the record to make sure that we all understand what we're talking about here.

Chairman Josh Hawley69:37Flock acknowledged that it conducts very little oversight of client searches and instead relies on its clients to police themselves and said, and I quote now, the underlying search records are owned and controlled by each customer agency.

Chairman Josh Hawley69:53So in other words, once you subscribe, you've got access to the whole database. Flock clients control the data retention. So these images, billions and billions of images a month have not been set to expire, not been set to be expunged.

Chairman Josh Hawley70:05Until last year, flock customers could enter the reason for a search into a free text field, that's their words, which did not have any meaningful accountability. And we know that various persons entered their reasons for searching into the database to include terms like the reason was just search or the reason was LOL.

Chairman Josh Hawley70:21I mean, no cop would do that, Right. I mean, Sheriff, you can attest to this and we'll come back to this here in a minute. When you when when cops use license plate readers.

Chairman Josh Hawley70:37And I want to say I think that's very valuable technology. But, you know, only a certain number of law enforcement agents have access to that technology. You got a log of reason for using it.

Chairman Josh Hawley70:44You've got a law enforcement purpose. I mean, this is how we do it in Missouri. It doesn't appear to me that that's how these flock cameras and others are being used. I mean, they're just open to just about anybody who subscribes.

Chairman Josh Hawley70:56There are no controls on them put by the companies. And Flock also admitted in their letter that it is possible to search for humans in images. That is a direct quote. Let me say that again.

Chairman Josh Hawley71:07It is possible to search for humans in images taken by Flock cameras. That's currently today that is possible. And again, all powered by AI. This just seems very concerning. Much more on this to come.

71:19Senator Durbin. I'd like to ask Mr. Marlowe. We are concerned in Illinois with Operation Midway Blitz, where ICE and the Homeland Security Department came into our state and started looking for people to deport.

Ranking Member Richard J. Durbin71:35They ended up deporting a substantial number, and it turns out that their promise to limit those deportations to the worst of the worst, as the president characterizes, the rapists, murderers, terrorists, sexual predators, it turned out that the majority of people they were deporting were American citizens not guilty of any crimes.

71:58Our state passed a law which limits law enforcement from using flock data for immigration purposes. Have you heard of such laws in other states? Yes, thank you for your question, Senator. So I have heard of laws like that in other states, and I believe that they constitute a good faith effort to protect vulnerable populations.

Chad Marlow72:21But unfortunately the news I have to share is the value of those laws is limited If the federal government you give an example of ICE were to show up with a judicial warrant or an administrative subpoena for that data it would not matter much what Illinois law said about it.

Chad Marlow72:36It would have to be turned over. If they participate in a data-sharing database where just one officer in the state of Illinois is sympathetic to whoever it is is trying to access that data, be it ICE or anyone else, they have the ability to run a search on someone else's behalf.

Chad Marlow72:56And again, looking at it in the immigration context is horrifying, but they've done the same to people who go to gun ranges. This really is nonpartisan. It is come up with the group you want to target, and with this level of technology, targeting them is fairly easy.

73:08So that is the challenge here. Mr. Whitney, I heard your testimony saying the answer is a warrant, and a warrant is certainly recognized under our constitution as a valid use of government power authority if used properly.

73:24Is that the problem here? The bottom line is they collect the information before there's any specific allegation that wrongdoing has taken place? The problem, thank you for the question Senator. I think the problem is collection one but also the just frankly in most places limitless access to that information without a warrant.

73:46IJ didn't write the rules. We didn't write the rules. The framers of the Constitution did, and they said that whenever you want to search a person in the context of modern technology, this is what a search looks like.

73:54You must obtain a warrant. Sheriff Tepel, what was the breaking point for you? You used this information and then decided that there was just too much of a violation of the Fourth Amendment. Where did you break with the precedent that it had been set before you?

74:11Senator, thank you for the question. I'm old. This is the second time I've heard the word Patreon here, and I don't even know what that is. But that being said, I was the lieutenant over aviation and search and rescue until I was elected to be the 25th sheriff.

Sheriff Ross Teeple74:23I took office January of 2025. My knowledge of ALPRs were 20 years old when I worked Stone Garden, where they would be mounted on my vehicle, and I would see them passing. And then I started getting questions from my constituents and they were asking very specific questions and I started asking Flock the company questions and they were not getting answers to me.

Sheriff Ross Teeple74:44I think it's remarkable that Chairman Hallway got them to admit that they now can track a person because what I received from a Flock representative was I was told our cameras don take a high enough resolution picture to be able to recognize a person And when they told me that I looking at flock camera pictures where I could recognize the person on the camera They're taking a picture, but that was their claim was their cameras didn't take enough.

Sheriff Ross Teeple75:13And there was just too much disinformation from them and dishonesty. I was trying to get answers from them, and they would not give me the answers to them. And there were too many concerns, so we just decided not to continue our contract.

75:24Thank you for raising that point, because it's not a matter of just reading license plates. It seems so routine. But it comes to the point where you can identify and recognize the people in the car.

Ranking Member Richard J. Durbin75:35You can imagine, in a state like Illinois, and your state as well, the Hispanic population views this as a threat to their existence, where they can be pulled over from driving while looking Hispanic.

Ranking Member Richard J. Durbin75:47And unfortunately, we've seen too many instances where people with no criminal records, American citizens removed from their homes and arrested and deported. It's just the kind of thing that's hard, if not impossible, to explain.

Ranking Member Richard J. Durbin76:02I want to give a minute to Ms. Isaacs here. When I listened to your description of your experience, the thing that struck me was whatever the law enforcement agency involved there had tangible evidence in your car that could be viewed.

76:20I mean, did you take a look at it later and see the damage that they were referring to? Thank you for your question, Senator. There was no damage on my car at all. That car was a brand new vehicle.

76:33I got it with zero miles on it, and when they took the car, it didn't even have 10,000 miles on it. It was in perfect condition, and they still said there was damage consistent with the collision on the vehicle.

76:47I don't understand that. If the notion here is to gather accurate information so we don't make the mistake that led up to your incarceration, there was a failure here, a complete failure. So a misuse of the information.

77:02Sorry for what you went through, and thanks for your courage in testifying. Thank you so much. Senator Britt. Thank you so much, Mr. Chairman, for putting together this hearing and for everyone taking time to be here today.

Senator Britt77:15Obviously, this is an important topic, and it's received a great deal of public attention in the last couple of weeks in debate and very much warranted. I think two things can be true at the same time One we want to keep and make sure that our law enforcement officers have what they need to keep Americans safe to help make sure that you know children who have been abducted get home.

Senator Britt77:35But we must protect people's Fourth Amendment rights. And when we're looking at this, I want to make sure that we're kind of looking at the total picture. Senator Warnock and I came together and wrote a letter.

Senator Britt77:50And Mr. Chairman, I'd like to ask unanimous consent that this be submitted for the record. Thank you. We talked about our great concern over the widespread reports that there was misuse regarding these automatic license plate readers.

Senator Britt78:03In here, we talk about many of the good things that we think have resulted, but ultimately believe that appropriate safeguards are necessary to protect against the unauthorized access and abuse that has come to light.

Senator Britt78:23Sheriff, I'd like to start with you. When we're looking at cases in Alabama, we kind of dug in and took a look at what we were seeing there. We saw that there were missing children, endangered persons, runaway kidnappings, that this has helped locate that person and bring them home.

Senator Britt78:35Also, more recently someone, an older adult with dementia, and ultimately getting them home. However, you know, we've seen misuse and abuse in Alabama as well. When we're looking at this emerging technology, you know, we want to make sure that we get this right.

78:53Can you first talk about some of, you've obviously had access to this, have used it prior to recently. Can you highlight what you believe would be some legitimate uses of this technology and maybe something anecdotally that you've seen it help actually solve with regards to safety and security of the people that you serve?

79:19Senator, thank you for the question. One thing I'd like to respond is the National Sheriff's Association and the Major County Sheriff's Association recently published guidelines September 15th of 2026, and I've read through them guidelines, and I think that they're an amazing step in establishing those.

Sheriff Ross Teeple79:35I'd like to be clear on the fact that I have absolutely no indication or belief that my deputies did anything wrong. My deputies were using the technology correctly. What our concern was is we knew what access we could get from it.

Sheriff Ross Teeple79:52We could put a license plate in there, a license plate number, or a partial license plate, and then find matches. The best one that I can give you, my Most recently, unfortunately, was in my county.

80:03There was an aggressive driver that rammed a young lady's vehicle and pushed her into oncoming traffic, and she died, unfortunately, and we found him because of an automatic license plate reader. When you talked about some of those safeguards that you saw in this letter with the National Sheriff's Association, can you talk about what some of those may be that you feel like can help make sure that this is being used the right way?

80:26Yes, ma'am. One of the biggest ones you can read right in there is taking still images of license plates, not live streaming, not taking video, taking still images of license plates for use of that data alone.

80:39Another one is that there should be, if I access a CJIS information incorrectly, in Arizona it's a class 6 felony. I don't know a law enforcement official that doesn't think that the same penalty should apply if you access this data incorrectly.

80:54I think when you're looking to some of the reports that we've heard about people, whether it's domestic violence victims, whether it's gun owners, everything in between this technology being utilized to harass and or track someone is absolutely completely unacceptable.

Senator Britt81:13we've got to figure out how we can do this the right way and based on your experience from what you're telling me is there are some guidelines there are some things that we could be doing that we're not doing now that we could demand that would ensure that one of the things that we've talked about in this letter and that I hope Mr. Chair I hope you get an opportunity to look at it is making sure that DOJ does its part in all of this we've asked for the proper oversight the proper guidance and we hope that state and local law enforcement officers will get that because something has to be done here.

Senator Britt81:44Ms. Isaacs, I just want to say thank you so much for telling your story. Elevating your voice in any arena is challenging when you do it on a national stage like this. It comes with a great deal of both courage and conviction.

81:55So I appreciate you doing that and telling your story so that others don't have to go through what you did and I'm so sorry for all that you endured. Thank you so much that means a lot to me.

82:10Thank you. Thank you Senator Britt. Senator Padilla. Thank you Mr. Chairman and I as well Ms Isaacs want to say my heart goes out to you and appreciate you being here today and your willingness to share your story hoping something good comes out of this going forward My first question is for Mr Marlow Part of the conversation we've had here today is not just what does the federal law say or not say, state law, what does the state law say or not say, even local laws that can address some of the concerns here, but the use of this technology is also different.

82:51federal government use, state government use, local government use, let alone private sector use of the technology? Can you just, at a high level, kind of break down maybe some distinct concerns between federal government use, state government use, local government use, and private sector use?

83:10Yeah, thank you for your question, Senator. I mean, I have concerns about all of the potential uses of this. And as an introduction to answering your question, and I appreciate what the committee he's doing today, you know, a lot of times we frame these questions as, you know, a balance between public safety and privacy.

Chad Marlow83:25I would like to suggest that this technology is the threat to public safety. It is not a solution to it. How it is used really depends on different levels. I think the largest use of this technology occurs on the local level.

Chad Marlow83:37That makes a lot of sense, right? Tens of thousands of local police departments using it. And how they use it and how they choose to use it really varies from department to department, which is why the inconsistency in and of itself is a problem.

Chad Marlow83:55You can adopt rules on the local level, but again, as you drive through a particular state, you could experience 50 different sets of rules governing you. So states have stepped up recently. What's very interesting to me is a year ago, a lot of the states, and I work in practically all of them, were talking about guardrails as being the best thing you could possibly do to rein in this technology.

Chad Marlow84:18The problem with those guardrails, whether they apply to state actors, federal actors, local actors, there's a couple of problems with them. One, when I look at them, I try to write the best guardrails I can, and I can never close the holes.

Chad Marlow84:28And if I can see the holes, other people can see them as well. I think that's a major problem. The other thing with the guardrails is, actually, there's two other things. One, we know that people don't always follow guardrails.

Chad Marlow84:40So you create an attractive nuisance and people are going to be drawn to that nuisance like a moth to a flame. And I think that that's something we also just have to be attentive to, that they're not always followed I also think the final problem is even if you pass guardrails that attempt to strike a balance when the public sees a flat camera they drive by their third flat camera in a day they may not have a copy of the applicable statutory law in their pocket and go oh shrew data retention and data sharing limitations are better Even if they have it, they may not have the confidence they're being followed.

Chad Marlow85:19Now we have the chilling effect. on the federal level, because the last question you asked, we see it for immigration enforcement. But the idea that we need to have in our mind, because this is bipartisan, thank you, and let it stay that way, is the threat presented by the federal government today could be different tomorrow, could be different next year, the next year.

Chad Marlow85:36And I think everyone on this panel understands that, which is why you have joined together. It's not about the current threat. It's about the ever existing threat, right? Orwell wrote about 1984, but lo and behold, it also applies in 2026.

85:51I appreciate that in a good high-level framework of concerns that I think on a bipartisan basis we are trying to tackle. I do want to follow up on one specific use at the federal level, and in some ways it's to follow up to a question from Senator Durbin earlier in the hearing.

Senator Padilla86:09The broad data sharing with ICE, is it happening or is it not happening? Flock claims that it does not partner with ICE and that ICE does not have direct access to flock cameras or their systems or their data but we know that ICE is still able to access flock data through state and local law enforcement agencies that have entered into agreements cooperative agreements with ICE known as 287G agreements.

86:34So can you explain in more detail how these agreements can function as a loophole for ICE or other immigration enforcement agencies to access data that they otherwise couldn't? Yeah, thank you, Senator. It's a great question.

86:47So you actually quoted from Flock themselves, which I think shows the problem. First of all, I would point out Flock seems to change its story from week to week. It's hard to even run.

Chad Marlow86:57But they did say for a long period of time that ICE does not have direct access to Flock data. And that was true. But the key word there is direct. Exactly. And so it doesn't even take a 287G agreement, although that's obviously a major problem.

Chad Marlow87:15All it takes is one officer in one department who is a customer of FLAC and participates in their nationwide data sharing program And you get a call from be it ICE or any other federal agency that says hey can you run a search for me And either because they believe in the cause that that federal agency is pursuing or they just, they want to be on good terms with them because they may need something from them tomorrow.

87:40They say, happy to help. And Flock never acknowledges that no security procedures that's put in place do anything to protect against the misuse of its system. The question becomes, how do we close that loophole?

87:53You ban them, sir. You ban them. Thank you. Senator Blumenthal. Thank you, Mr. Chairman, and thank you for having this hearing, which I think responds to a strongly felt need all across the country.

Senator Blumenthal88:10In Connecticut, literally, this issue is on the front pages of newspapers almost every day with different communities reaching different conclusions and therefore individual rights potentially varying in 169 different towns. And so there is a need for some uniformity in protecting rights and liberties, most especially against surveillance.

Senator Blumenthal88:35Connecticut adopt a law, Senate Bill 397, which was signed in the statute in May of 2026, just this year, which establishes some restrictions on the use data. For example, it can't be shared with other states unless there are guarantees of protecting privacy.

89:01It can't be shared with a national database, any multi-state or national data sharing system, unless there's written authorization and possibly a warrant. So I am wondering whether states really maybe will offer more protection than Congress and whether we can rely on states to fill the gap that exists right now.

Senator Blumenthal89:42Of course, Connecticut's law requires that there be no retention beyond 21 days, which is way beyond the two hours that your organization, Ms. Whitton, would recommend. And the model statute you provided requires a warrant.

90:00Would you advocate that there be a federal law that requires a warrant in every instance? Seems to me that there might be objections in some states to that requirement. Would you preempt state statutes?

90:21Thank you for the question, Senator. I think ideally the warrant requirement would be first in line with making sure that federal agents are obtaining a warrant before accessing this information. I want to be very clear, too.

Alasdair Whitney90:35There are numerous exceptions to the warrant requirement in emergencies to prevent the destruction of evidence, to find kidnapped children, stolen cars, when the person consents to their information being searched, things like that. So we're not recommending a complete horse blinder view.

Alasdair Whitney90:52you must get a warrant in all situations. The Fourth Amendment has never required that, and the Supreme Court's interpretation of the Fourth Amendment has never required that, too. But I think the federal government has some unique levers that it can pull to get states and encourage compliance with federal grant money, things of that nature.

Alasdair Whitney91:03And ideally, I mean, we do see a patchwork right now, as Mr. Marlowe noted, in some of these states. I work in many of these states as well. But as we all know, you travel very frequently, at least I do.

91:13I'm In Chicago, I travel into Indiana, Michigan very frequently. I would hope that my rights are respected in those places just like they would be respected in my home state. And that's where the federal government can come in and encourage these best practices and require it for federal officials.

91:37To what extent is the, I guess it's kind of a side door issue, federal authorities using state law or vice versa, or to what extent is that a problem? It's a big problem. Senator, in our San Jose litigation, we have discovered that federal agencies on 20 different instances have obtained access to San Jose's ALPR data, and state law expressly forbids that.

Alasdair Whitney92:11So we've seen that also, I believe, in Virginia, where despite a law that looks actually in some respects pretty similar to Connecticut law that law enforcement agents agencies in that state are simply not complying with it and so all of this just funnels back to this front gatekeeping protection with the warrant requirement because without that, it is a self-executing enforcement mechanism.

92:39Without that, it's hard, or it's easy, rather, to abuse the system to get that side door or back door access. And on the retention issue, I can see circumstances or reasons that the retention period should be longer than just two hours.

93:00Connecticut, again, is 21 days. Is there real harm done by that kind of more lengthy retention period? Yeah, absolutely. And just to clarify, first thing, Senator, is that our recommended retention period, as reflected in our PEAPS Act, is seven days, right?

Alasdair Whitney93:16We want to make sure that law enforcement ideally has the time to get a warrant and to keep that data and do it the right way, particularly in places where distances or lack of reception and Internet, whatever, access can make that difficult.

93:30but I think that is the problem with anything longer than a seven-day retention or a short retention period really frankly for that matter is that in most places 30 days worth of data on 99 percent of people who are probably indisputably innocent and not suspected of any wrongdoing we think that it is a problem that the government just houses this information on all those people just in case.

93:58Thank you. Thanks. Senator Booker. Thank you very much, Chairman. Mr. Temple, I just really enjoyed and appreciate your testimony. I didn't expect to feel such a kinship with you in the sense that I was a mayor 20 years ago.

Senator Booker94:14This technology was not in distant then, but I remember going to community meetings where people would ask me who had problems with crime and drug traffic on their communities, please, can you put up a camera here to make us safer?

Senator Booker94:23And it was, we invested in shot spotters. I'm sure you know that technology to be able to respond quickly. And it helped us to get people to hospitals who were gunshot victims and more.

94:36But what has happened over the last 20 years is stunning. And I just want to ask you really quickly one more time that you went from an understanding that this was a law enforcement to help keep people safer, to now you seem to be very concerned about fundamental civil rights because of the massive advancement of this technology Correct Senator Cory Booker it actually good to see you again sir We used to own a condo at 111 Market Street in New Jersey, and I met you very many years ago, sir.

95:09Forgive me for not remembering. No, you would not remember me at all, sir, but when you walked in, I remembered you. I'm blown away by that, sir. I'm blown away. I hope I was nice back then.

95:20Yes, sir, you were extremely nice. Okay, good. And we've since sold the condo. I hope you made a profit. My beautiful wife works for United Airlines, and she's transferring out to the San Francisco base, so that's why we sold her.

95:34Yeah, we have a lot of flight attendants that are in Newark, yes. Yes, sir. Thank you, sir. To my question, yeah, please tell me about your evolution. So one of the points I wanted to make was, as I forgot about earlier, is I know my IT director always gives me a hard time about this when I say that AI is recent.

Sheriff Ross Teeple95:53He said that AI was started to create it in 1956 with a protocol. But artificial intelligence, the way we know it, didn't happen until Grok ChatGBT and Grok AI and those sort of things.

Sheriff Ross Teeple96:06The contracts that the Pinal County Sheriff's Office had with Flock were actually signed before AI became a thing. So that was one of my questions I explained to this gentleman earlier before the hearing started was, I asked Flock, what type of AI do you have on your cameras?

Sheriff Ross Teeple96:22their initial response to me was, oh, we don't use artificial intelligence on our cameras. Then, I think it was about two months later, they put out a press release talking about how they use artificial intelligence to create a digital fingerprint of your vehicle.

Sheriff Ross Teeple96:37And so I reached back out to them and I said, wait a minute, you told me there was no AI in your cameras. And the response was chilling to me. They said, there wasn't the AI that you were asking about.

96:47I didn't ask about a specific AI. I asked about what was in your cameras. So that was a concern for me. You see this advances in technology, obviously, as an infringement on potential fundamental civil rights.

96:58It can definitely be an infringement on fundamental civil rights. And so, Chad, Mr. Marlowe, may I switch to you if I can, despite the fact that you have an obnoxious amount of hair on your head, sir?

97:08I deeply apologize. I feel very inadequate, sir. from the freedom of the press to Second Amendment rights, we see how authoritarian countries like China arguably use this technology to repress human rights And I want to just throw out for you to give me some example of this If a state has a law that prevents a woman from getting reproductive rights, and we're seeing this now where they pass laws about people leaving their state to access reproductive care, a state could be using this technology to track, and ultimately when they return home, prosecute women who are accessing reproductive care.

97:53Is that correct? Unfortunately, that is completely correct, Senator. And the thing that is even more disturbing about it, we've talked a lot about AI here today. In George Orwell's book, even though George Orwell didn't know it, Big Brother was never a person.

98:12It was AI. and so you can literally prompt ai to say i want to find people who are leaving my state and seeking abortion care somewhere else where it remains legal and the ai will look and they will find the plant parenthood clinics and they will find the major highways they will identify the bridges they will look for patterns who went to a doctor and then to a drugstore in the state and then return to the state where it was illegal so just my time has expired but i just want to put it this way.

Senator Booker98:44We have, when it comes to fundamental rights in the United States of America, civil always had balances. You have freedom of speech, but you cannot yell fire in a crowded movie theater. Understanding the balances here.

Senator Booker98:55And here we have, as the Honorable Mr. Temple has said, we have safety concerns. But to me, we have gone way out of balance now when it comes to certain societal interests in public safety and concerns there with violating the average American's sense of fundamental rights to privacy, to speech, to be moving without government surveillance, and so much more.

99:25We are way out of balance right now. In fact, we are out of control for any government, state, local, or federal, to easily abuse the fundamental rights that we all assume we have a right to that these cameras seem to be so seriously violating, correct?

99:43Yes, that is correct. Although I would say that just because you are out of balance does not mean that there is a balance to be found. Sometimes things are simply too dangerous to use.

99:54Understood. Thank you, Mr. Chairman. Thank you, Senator Booker. Just let me follow up on that, Mr. Marlowe, because it seems to me a suggestive line of questioning. When you have this amount of data available, the temptations to use it are going to be absolutely incredible, if not irresistible.

100:10And I'm just thinking, for those of us who are supporters of the Second Amendment, we've long feared national databases of any kind. You can easily put these cameras up in front of a gun show or near a gun store or a range.

Chairman Josh Hawley100:22You can put them up in front of pregnancy care centers, and you can do all the same things that Senator Booker was talking about. You can query all the same, show me who's going here, show me who's doing this, show me what time they leave, show me what vendors are supplying these various places, right?

100:37And you can create those same patterns using this unbelievable data that basically at this point has no meaningful curbs on it. I mean, isn't that correct? The only thing incorrect about what you said, Senator, was you said could, you should say are.

Chad Marlow100:50They're doing all those things right now. And again, you know, it reminds me of the movie Field of Dreams. A lot of people say minority report. I'm thinking Field of Dreams today. If you build it, they will come.

Chad Marlow101:02And if you create those temptations, if you create the tools that government need to go after whatever population is, I so much appreciate that you're bringing abortion care seekers and gun owners because they are part of the same community when it comes to the threat of mass surveillance.

101:16So, yes, absolutely, this is something we need to be worried about because when you create the temptation, when you create the option for population control, at some point, someone's going to use it. Mr. Chairman, can I ask you, I'll make a point to you, if possible, just as a follow-up.

Senator Booker101:31Sure. Even though you have the same hair issues as our witness. Sure. What's even more frightening than your government, I imagine, is that there's no data security here. and at a time that we're seeing more and more hacks, more and more sophisticated hacks, people using AI to supercharge their ability, the fact that this information could be made available, and you and I both know this because we spend a lot of time in SCIFs, for foreign nationals to hack this and access this information and be able to use it against us.

102:01It presents a serious present risk. And you read my mind. I wanted to ask you, Mr. Jordan, the CEO of Flock has said, and let me just make sure that I get this right, because I think he said this in a letter to a sheriff in Stoughton, Virginia.

102:15He said, in response to a specific query from the sheriff, that flock has never been hacked. I think we've got it right here. He says, hi, Virginia Stoughton PD team. I writing you directly because I want there to be zero confusion about what happening Flock has never been hacked period ever period Now based on what you know is that accurate I would say that inaccurate.

102:36The company has, at various times, changed the definitions of the word hacked, tracked data, breached. But in the general definition of accessing unauthorized data, Yes, I would say that they've been hacked. How vulnerable, you've studied this, you are, as you said earlier in your own introduction, a hacker yourself.

Chairman Josh Hawley103:00I mean, how vulnerable, in your professional opinion, are Flock systems that contain all of these images, billions with a B, billions of images of probably everybody in this room, anybody who's driven a vehicle of any kind, I'm sure we're all on the database.

103:14So how vulnerable are their systems to hacking and then manipulation in the sort of ways that Senator Booker was just talking about? um in general one sort of analogy that i really like is if you were in a tiny little box and you wanted to make sure that no ants could get in the box and you were equipped with raid and a shoe to smash the ants or whatever you know you could maybe caulk up the holes um you could pretty much make sure that no ants are going to get in your box and that's great but if you lived in a 30,000 square foot warehouse whether ants get in or not is up to the ants not you and that's a lot of the way, that's kind of how I look at this in terms of why create this much data when we can't secure it.

Benn Jordan103:51But to answer your question a little bit more technically, the Flock devices that we tested were running on an old version of Android that has been out of service for years, and newer devices of Flock's run on a modified kernel of Android, which is far from government-grade security, but it is better than the older ones.

104:06But to be fair, and to be completely frank, nobody required them to have government-grade security. Law enforcement infrastructure has been using Flock for nine years without any form of cybersecurity regulation or requirements. So expecting a tech startup to adhere to those standards is a little lofty to me.

104:30So are you telling me that they're basically using like 10-year-old Android phones as the camera? Not phones. They're running hardware that was running the Android operating system. And since then, they've had their own build of Android that they could secure a little bit better than they had.

104:48But a decade old, you said, in some cases. The technology is a decade old. Yeah Android Things 8 I believe was the core operating system which was initially made for stuff like refrigerators and stuff But it a way where you could run Android without a screen essentially That's why that operating system exists.

105:07So how easy would it be for a bad actor to download, modify, and or upload false ALPR data into this system? I mean, could that be done? Yeah, so right up with those older cameras, the ones that we had tested.

105:24I would say that the hardware requires a light to moderate knowledge of Android debugging. But I did find an administrative interface, as I mentioned earlier, online of live cameras, which is as easy as clicking a link and then hitting a delete button to get rid of footage or something like that.

105:41Could you just say that again? As easy as clicking a link and then hitting a delete button? Yeah, I found them on a commercial search engine that searches for things like Internet of Things devices.

Benn Jordan105:50And we found over 60 cameras that gave, it was the administrative interfaces, and it gave us access to 30 days of the past footage of those cameras. And these weren't ALPRs in the sense of what we're usually talking about.

Benn Jordan106:05Flock makes a lot of different cameras. They make the Condor camera. They make the older Falcon ones, which are ALPRs. And I think we'll be talking about that a little bit more today because that also kind of defines what AI is, like how it's being used and stuff.

Benn Jordan106:16But in this case, they were pan-tilt zoom cameras, so they would actually follow people. And in some cases, I was able to go back a week and read what was on someone's phone screen as they were texting somebody walking under the camera.

106:31You could read what someone had on their phone while they were just walking by the camera? Yes. And you were able to just do this by just your own knowledge? You said clicking a link and getting in?

106:43Yeah, I could actually send. Like, I would have been able to send the link to you, and you would have just clicked it and browsed this interface from your phone. That's extraordinary. I mean, that's just extraordinary.

Chairman Josh Hawley106:53Let me bring this back to the very real personal cost. Ms. Isaacs, I just want to come back to you and your extraordinary story because I think it illustrates the dangers here in this technology if it's not properly cabined and accounted for.

107:09I think we have a picture of you with your beautiful new Durango. Here it is, I think. This is you, and that Durango does look like it's in pristine shape. Yeah, that was the day I got it.

Chairman Josh Hawley107:20This is the day you got it. All right. You kept it very nice. Now as I understand it the Durango that was involved in the vehicular crash that indeed caused three other people to die was a vehicular homicide That Durango was maroon red Is that correct Correct This Durango doesn't look red to me.

Chairman Josh Hawley107:37What color is this? It's a black Durango. This is a black Durango. So here you are returned as a false positive out of an AI search in a flock system. We know it wasn't a traditional license plate search because your car was never there, correct?

Chairman Josh Hawley107:52There are no images of your car at the scene. Is that correct? Correct. And there was no assertion by anybody ever that you were there. Is that correct? Correct. It was just that the flock cameras, based on some general description entered into them, the AI pulled out your car and said, this is a match.

108:07That's right. And that led to 13 days in jail for you, including solitary confinement, and you very nearly lost your entire livelihood. Isn't that right? I was facing life in prison. I can't even believe it to this day.

108:21all because the AI falsely tagged you. Yes. And that brings me to what may be, I guess, my final point, which is a comment that the Flux CEO said recently about the trade-offs that we just have to make in this new technological age.

Chairman Josh Hawley108:38He said that, you know, in this age of Instagram and Facebook, et cetera, I think maybe we have the quote here for you, we've all just agreed to surrender our privacy. He says, I think it's important to take a perspective of we've already given up the traditional sense of privacy.

Chairman Josh Hawley108:51because we have Instagram and Facebook and the internet, and we live in a pretty safe world given those trade-offs. I just want to ask everybody in this room, do you want to make that trade-off?

Chairman Josh Hawley109:03I mean, are we going to live in a world where we may all have to suffer the deprivations that Ms. Isaacs did because some robot decides that we were at the scene of a crime.

Chairman Josh Hawley109:13In fact, we were never there at all, and there's just nothing we can do about it. I just suggest to you that this viewpoint is the problem. I want to end where I started.

Chairman Josh Hawley109:22The Constitution is as valuable and as valid today as it was when it was first written. If anything, the Bill of Rights protections are probably more important today than they were all those years ago because the threats to our liberties are actually much greater.

Chairman Josh Hawley109:36And the technology that both bad foreign actors, private actors, corporations, and government have at their disposal are much more powerful. We need the Bill of Rights more than we ever did. And we've got to find a way to enforce it.

Chairman Josh Hawley109:49I want to thank all of the witnesses for being here. Thank you for your testimonies. Thank you for your work. Thank you, Senator Booker. Thanks to our audience. Let me see here. I think I'm supposed to read something about how long the record is.

Chairman Josh Hawley110:00The record for this hearing will remain open for one week until Wednesday, September 30th at 5 p.m. for the submission of statements and questions for the record. And with that, the hearing is adjourned.

110:30Thank you. Thank you. Thank you.