On October 5, 2026, Senate Minority Leader Chuck Schumer (D-NY) sent a letter to Flock Safety CEO Garrett Langley demanding answers no later than October 16 about Flock’s “National Lookup Tool.”[1] This tool allows participating agencies to search camera records collected outside their own jurisdiction.[2]

The Schumer letter cites verbatim: “Flock has essentially built a private, nationwide surveillance tool.” [2] Schumer demanded that “personal data not tied to a crime should be deleted from Flock’s servers.” [1] [2] The letter also names a documented hacking vulnerability. A hacker group extracted an encryption key from a Flock device, unlocking 1.6 million images and 27,000 video clips after Flock had previously claimed its devices were encrypted and secure.[1]

( Flock’s National Lookup Tool — what the US Senate Minority Leader called a private mass-surveillance tool — and the encryption-key vulnerability that exposed 1.6M images and 27k clips in a single sentence [unverified] )

This converts October 16, 2026 into the first day in US political history in which three US federal senators simultaneously have pending letters with deadlines expiring on the ALPR cluster.

(a) Hawley → 4 vendors on September 3 (Flock + Motorola Vigilant + Verkada + Axon, with the Oct 16 deadline for formal responses to the Senate Judiciary Subcommittee on Crime and Counterterrorism investigation).[5]

(b) Wyden → ONDCP Director Sara Carter on October 8 demanded publication of the MITRE 2024 HIDTA privacy review + analysis of ALPR practices.[3] [6]

(c) Schumer → Flock CEO Langley on October 5 about the National Lookup Tool + data deletion + federal-access disclosure.[1] [2]

The quantitative context is 120,000 cameras across 49 states per Hawley, citing Flock’s own data, 20 billion vehicle scans every month, and Flock’s written admission to Hawley that “it is possible to search for humans in images” — not just plates.[7] Flock released “new safeguards” in August — required case codes, mandatory automated audit assistance to identify abnormal activity, and a recommended reduction in default data retention from 30 to 7 days — but the structural question is whether vendor-announced safeguards are sufficient when Hawley already said Flock “conducts very little oversight of client searches” and relies largely on agencies to police themselves.[7]

The question for a Mexican, Brazilian, or Argentine procurement office entering an enterprise CCTV/ALPR contract in Q4 2026: if the US Senate Minority Leader has just characterized the National Lookup Tool as a “private, nationwide surveillance tool” and demanded deletion of data not tied to a crime, and Hawley has sent letters to 4 vendors, and Wyden has sent a letter to ONDCP about HIDTA aggregation — the question is no longer whether ALPR vendors are under federal pressure. The question is what clauses LATAM RFPs demand to anticipate the possibility that the US Senate, House of Representatives, or any US state publishes an order or law that restricts or prohibits the vendor’s product [unverified]:

Clause 1 — federal-bill-disclosure clause. Customer demands written warranty that the vendor will publish within 14 days any federal letter received by the vendor or its competitors that could affect the customer’s product. The equivalent of what Schumer’s office should have published proactively instead of being obtained by a journalist via FOIA.[1] [unverified]

Clause 2 — federal-aggregation-data-deletion clause. Customer demands written warranty that the vendor will not aggregate customer data into any database shared with federal agencies (HIDTA aggregation, National Lookup Tool, or any analogous vehicle) without explicit consent and 12-month renewal. The equivalent of what Flock should have implemented by default given that “personal data not tied to a crime” is precisely the category the US Senate has demanded be deleted.[2] [4] [unverified]

Clause 3 — federal-restriction-deprecation clause. Customer has the right to terminate without penalty if any federal law or regulatory restriction restricts the use of the vendor’s product in US territory and that materially affects the customer’s architecture. The equivalent of a regulatory force-majeure clause that protects the customer when the vendor becomes incompatible with the customer’s required jurisdiction.[5] [unverified]

The architectural difference between an RFP signed with a vendor that has published its response to Hawley (Flock did respond in writing, although Hawley said the “conducts very little oversight” response was inadequate) and an RFP signed with a vendor that has not responded to any of the three federal letters, is no longer a theoretical question.[5] [7] [unverified]

P.D. How many of your current contractual clauses cover the scenario where the US Senate publishes a letter to the vendor with a 30-day deadline and the vendor doesn’t notify you until the story breaks in 404 Media? If the answer is “none,” today’s a good day to revisit the stack [unverified].

📰 Source: Schumer Oct 5 verbatim letter PDF + Wyden Oct 8 letter PDF + Hawley Sep 3 letter via The Hill + 404 Media Oct 9 + Biometric Update trade press + Senate Democrats press releases.

Sources

[1] Senate Democrats press release — Leader Schumer Demands Answers From Flock Safety (Oct 4, 2026) — https://www.democrats.senate.gov/newsroom/press-releases/leader-schumer-demands-answers-from-flock-safety-on-nationwide-license-plate-surveillance-network-that-is-tracking-americans-warns-private-camera-giant-has-built-a-mass-surveillance-tool-with-no-rules-no-oversight-and-no-consent [2] Schumer verbatim letter to Flock CEO Garrett Langley (Oct 5, 2026, PDF) — https://www.democrats.senate.gov/imo/media/doc/20261005lettertoflockrepersonalinformation.pdf [3] Wyden letter to ONDCP Director Sara Carter requesting release of HIDTA privacy review (Oct 8, 2026, PDF) — https://www.wyden.senate.gov/imo/media/doc/10082026wydenlettertoondcprequestingreleaseofhidtaprivacyreview.pdf [4] Wyden press release — Wyden Calls for Public Release of Report on White House-Funded Surveillance Programs — https://www.wyden.senate.gov/news/press-releases/wyden-calls-for-public-release-of-report-on-white-house-funded-surveillance-programs-including-national-database-of-flock-and-other-alpr-images [5] The Hill — Hawley expands AI camera probe to three firms beyond Flock (Sep 3, 2026) — https://thehill.com/homenews/senate/6071467-hawley-flock-camera-probe-ai-surveillance/amp [6] 404 Media — Following 404 Media Investigation, Senator Demands Info About White House’s License Plate Surveillance Program (Oct 9, 2026) — https://www.404media.co/following-404-media-investigation-senator-demands-info-about-white-houses-license-plate-surveillance-program/ [7] Biometric Update — Flock’s nationwide surveillance network faces mounting scrutiny — https://biometricupdate.com/202609/flocks-nationwide-surveillance-network-faces-mounting-scrutiny