[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fF6LEZXfejRJnU7Geh_KZktQpDpJ4iEI7lhFrqPu4SAw":3},{"article":4,"iocs":41,"watch_terms":42,"solutions":43,"lesson":104},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"1da8f5c7-2df3-4cb3-a093-48a246d58c61","How an Atlanta Suburb Ended Up Sharing Flock Data With More Than 2,000 Organizations","how-an-atlanta-suburb-ended-up-sharing-flock-data-with-more-than-2-000-organizat-78add9","Alpharetta, Georgia, cops share data with thousands of Flock users, ranging from federal agencies to a fish and wildlife commission. The reasons why show how vast—and invasive—the network has become.","Alpharetta, Georgia, police are sharing license plate data captured by Flock Safety cameras with over 2,000 organizations, including federal agencies and colleges. This expansive data-sharing network, which also receives data from over 1,300 entities, highlights the pervasive nature of Flock's surveillance system and the potential for misuse, as evidenced by past incidents involving officers misusing the technology.","Alpharetta, GA police share Flock license plate data with over 2,000 organizations.","https:\u002F\u002Fwww.wired.com\u002Fstory\u002Fhow-an-atlanta-suburb-ended-up-sharing-flock-data-with-more-than-2000-organizations\u002F","https:\u002F\u002Fmedia.wired.com\u002Fphotos\u002F6a7f8e790de212bebbf00f21\u002Fmaster\u002Fpass\u002FMid-Size-Town-Sharing-Flock-Data-Business.jpg","2026-08-28T09:00:00+00:00","2026-08-28T10:00:12.473956+00:00",7,[17,20],{"name":18,"type":19},"Flock Safety","vendor",{"name":21,"type":22},"automatic license plate readers (ALPRs)","product","614132b8-5837-4952-b8b5-c6c9a32a1d85",{"id":23,"icon":25,"name":26,"slug":27},null,"Privacy","privacy",[29,31,36],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21],{"controls":44,"vendors":103},[45,74],{"slug":46,"name":47,"problem":48,"products":49},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[50,58,66],{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-dlp","Netskope DLP","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention for web, cloud apps, AI tools and endpoints.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"slug":75,"name":76,"problem":77,"products":78},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[79,87,95],{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"bitsight","Bitsight","\u002Fvendor-logos\u002Fbitsight.png","bitsight-tprm","Bitsight Third-Party Risk Management","https:\u002F\u002Fwww.bitsight.com\u002Fproducts\u002Fthird-party-risk-management","Supplier assessments and continuous monitoring based on security ratings.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"securityscorecard","SecurityScorecard","\u002Fvendor-logos\u002Fsecurityscorecard.png","security-ratings","SecurityScorecard Ratings","https:\u002F\u002Fsecurityscorecard.com\u002Fsolutions\u002Fuse-cases\u002Fsecurity-ratings\u002F","Outside-in security ratings and monitoring of suppliers.",[],{"slug":105,"title":106,"body":107,"framework_refs":108,"framework_notes":122},"unchecked-license-plate-data-sharing-exposes-surveillance-overreach","Unchecked License Plate Data Sharing Exposes Surveillance Overreach","Alpharetta's police department enrolled in Flock Safety's license plate reader network without fully accounting for the scale of automatic data-sharing agreements the platform enables, ultimately exposing citizen movement data to over 2,000 organizations. The root problem is a failure of data governance: third-party vendor agreements were accepted without rigorous review of downstream sharing permissions, data retention policies, or recipient vetting. This matters because license plate data constitutes sensitive location information that can reveal personal patterns of life, and its exposure to federal agencies, colleges, and other entities creates serious civil liberties and misuse risks. Past incidents of officers abusing the technology demonstrate that without strict access controls and auditing, surveillance tools become vectors for harm.",[109,110,111,112,113,114,115,116,117,118,119,120,121],"CIS Control 3 – Data Protection","CIS Control 6 – Access Control Management","CIS Control 14 – Security Awareness and Skills Training","NIST SP 800-53 AC-2 (Account Management)","NIST SP 800-53 AC-21 (Information Sharing)","NIST SP 800-53 AU-6 (Audit Record Review, Analysis, and Reporting)","NIST SP 800-53 PT-1 (Policy and Procedures – Personally Identifiable Information)","NIST Privacy Framework – Govern-P \u002F Control-P","GDPR Article 5 (Principles of Data Processing)","GDPR Article 28 (Processor Obligations)","GDPR Article 44 (Transfers to Third Countries)","ITIL – Supplier Management Practice","CJIS Security Policy Section 5.4 (Access Control)",{}]