EFF lawyers warn most Flock contracts don't require data deletion after termination, so the cameras may keep feeding the network even when a city walks away.
Flock Safety, the operator behind one of the country's largest known networks of AI-powered license plate readers, has been pushed out of city halls from Florida to Washington state. The votes have been bipartisan, sometimes unanimous, and the local headlines read like clean wins. The data those cameras collected, and in many cases the cameras themselves, stay behind.
Canceling a municipal Flock contract does not automatically remove the cameras from a neighborhood, and most contracts reviewed by the Electronic Frontier Foundation do not force Flock to delete the license plate data it has already collected. "The data fate after termination is unresolved," Saira Hussain, a senior staff attorney at the EFF who has reviewed dozens of municipal Flock contracts, told The Verge. The cameras and the database they feed are two separate problems, and cities are solving only one of them.
The contracts rarely bridge the gap between the cancellation vote and the camera on the pole. Sheboygan, Wisconsin lawmakers voted unanimously in 2026 to end the city's Flock contract after residents learned the company had reportedly tried to sell anonymized plate data to outside buyers. Edmonds, Washington canceled its contract the same way in June, after a procedural error, but the cameras stayed in the discussion. WHRO and the Virginia Center for Investigative Journalism reported on September 10, 2026 that a small Virginia town has de-Flocked, becoming the latest in a string of local wins that VCIJ's "State of Surveillance" series has been tracking for months.
The contracts themselves are where the EFF's review cuts deepest. Flock's own LPR Policy and Evidence Policy describe retention windows and search permissions in language the company frames as a public-safety feature. The Trust Center page explains how the data moves between agencies and jurisdictions. The municipal contracts that buy into that network rarely mirror those policies clause for clause, and Hussain told The Verge that termination language, deletion language, and search-logging language are the three sections most often missing or weak in the agreements she has read.
A canceled contract that lacks a matching data-deletion clause leaves the prior data in Flock's possession, searchable through the same network tool the city just walked away from. The Verge has documented more than 120,000 Flock cameras installed across the United States, a footprint that makes the unresolved data question a national, not a local, problem. If a single plate scanned in Edmonds is later requested by a police department in another state, the chain of custody flows through Flock's servers under whatever terms the original contract allowed.
Some cities are now reaching for a structural fix. Edmonds voted unanimously on June 10, 2026 to cancel the contract after a procedural error, according to the HeraldNet report, and council members there have begun asking what a replacement surveillance tool would have to put in writing before it goes in. That question is the one most termination debates skip.
The next-vendor problem is also unresolved. Cities walking away from Flock have sometimes replaced it with another networked plate reader, a gunshot-detection system, or a private-camera registry. The footprint of the underlying network may shrink, or it may simply change hands. VCIJ's "State of Surveillance" investigation documented a single Virginia town logging nearly 7 million hits on its surveillance network in a year, a reminder that the network's value to a buyer or to law enforcement is the data it accumulates, not the brand on the camera.
For residents who want their town to actually end the surveillance, the EFF contract-review checklist is short and concrete: a written clause that requires deletion of all plate data on a defined schedule after termination, an audit log of every search and share, a ban on selling or licensing the data, and a hard limit on cross-jurisdictional search access. Most of the contracts Hussain has read include at least one of those provisions. Few include all four.
Sheboygan and Edmonds show the political will exists. The data question is the part the votes have not yet settled.