Start Here
A short evidence-safe briefing: what Flockwatch measured, what it did not, the fault chain, the three-denominator problem, where documented cases fit, and what governance breakpoints mean.
1. What this study measured
Flockwatch is a public-data study of fault amplification in networked automated license-plate-reader (ALPR) systems—how uncertain camera reads, hot lists, national sharing, and human verification failures can combine into coercive police action.
Four evidence streams, all public:
| Stream | What it counts | Primary route |
|---|---|---|
| Deployment inventories | Agency/technology records and publicly mapped cameras | Footprint, Findings |
| Administrative activity | Detections and recorded hot-list hits (not arrests) | Findings § Capture |
| Documented cases | Evidence-graded public incidents | Incident registry |
| Local mechanism lab | Synthetic identifier collision + open OCR model | Error lab |
Full design and source hierarchy: Methods.
2. What this study did not measure
Preserve these boundaries; they define the valid claim space:
- No private Flock access and no live plate queries
- No UCR proxy for ALPR harm or effectiveness
- No national false-positive rate and no Flock proprietary accuracy estimate
- No causal crime-reduction claim from the public files used here
- OpenStreetMap / Atlas figures are lower bounds or adoption inventories, not complete installed inventories or market share
Details: Limitations.
3. The fault chain (not a single bad camera)
The motivating public case and the lab treat harm as a chain, not a solitary sensor glitch:
- Source record loses information (incomplete hot-list entry)
- Camera / OCR loses different information
- Matching treats lossy strings as equivalent
- Network distributes the alert
- Interface compresses uncertainty into a hit
- Officers treat the alert as self-authenticating suspicion
The laboratory reproduces a mechanism—100 synthetic identifiers collapsing to one key after middle-token loss, plus open-model OCR under controlled degradation. That is not a vendor accuracy score. See Error lab.
4. The three-denominator problem
Numbers on this site answer different questions. Do not add them or collapse them.
| Denominator | Example figure | Means | Does not mean |
|---|---|---|---|
| Atlas record | 4,084 ALPR rows; 2,629 name Flock | Documented agency/technology adoption | Camera count or market share |
| Mapped camera | 113,963 public map points | Lower-bound census of documented devices | Complete installed inventory |
| Detection / hit | 3.224B CA detections; 0.110% hit share | Capture volume vs contemporaneous hot-list flags | Unique drivers, correct matches, or crime outcomes |
Interpretation rule and figures: Measured findings.
5. Where the 29 documented cases fit
The incident registry holds 29 evidence-graded public cases (grades A–B). They illustrate failure classes—OCR/sensor error, stale records, sharing failures, insider misuse, profiling queries, security exposure—not how common those failures are.
- Documented incident ≠ prevalence
- Ascertainment is biased toward video, litigation, audits, and journalism
- Pending charges remain allegations until adjudicated
Use cases to understand pathways; use inventories and activity files for scale.
6. What governance breakpoints mean
Perfect sensors are impossible. High-stakes systems need checks that break the chain before uncertain data becomes force: full-identifier matching, independent officer verification, short retention, restricted sharing, warrants for historical search, purpose limits, auditable access, and independent evaluation.
The study maps twelve breakpoints across capture, matching, access, and remedy. A control that only shortens retention does not stop a dangerous real-time stop; a verification rule that officers never apply does not contain automation bias.
Framework: Twelve breakpoints.
7. How to read the rest of the site
Suggested paths by role—each link stays inside existing routes:
| If you are… | Start with | Then |
|---|---|---|
| Journalist or council staff | This page → FAQ | Incidents, Law, Regulation |
| Researcher or student | Methods → Findings | Error lab, Data, Paper |
| Policy / oversight | Controls → Pushback | Limitations, Vendor context |
Compact contract (from the validity page): Atlas record ≠ camera · mapped camera ≠ complete inventory · detection ≠ unique person · hit ≠ correct match · non-hit ≠ innocence · documented incident ≠ prevalence · synthetic OCR ≠ Flock accuracy.
Read limitations in full → · Reproduce the analysis → · Full paper →