[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFdvx7KVOZp92_nNkXN-akCHJZg6xmQjUWZWNNV1a9Qs":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":22,"status":23,"created_at":24,"published_at":25,"article":26,"tags":30,"podcasts":49,"controls":50},"41f29f1a-cd56-48e8-af83-8eb47788522b","flock-safetys-ai-cop-search-tool-logs-abuse-but-doesnt-stop-it","36cec7d5-9ced-417e-a0c8-15ec653f834e","Flock Safety's AI Cop Search Tool Logs Abuse But Doesn't Stop It","Flock Safety's AI-powered surveillance tool allows law enforcement to search for individuals using natural language descriptions across a wide camera network, but code analysis reveals that policy violations are logged rather than actively blocked. This represents a critical gap between perceived safeguards and actual technical enforcement — a system that records misuse after the fact provides no real protection for individuals whose data is improperly queried. The tool's handling of sensitive attributes like race and religion raises significant civil liberties and bias concerns, as AI accuracy issues in these categories can lead to wrongful targeting. When powerful surveillance technology is deployed without hard technical controls, organizational policy alone is insufficient to prevent abuse.","**Immediate actions:**\n- Audit all AI-powered surveillance tools to verify that stated safeguards are technically enforced, not merely logged after the fact.\n- Implement hard access controls (e.g., role-based query restrictions) that actively block prohibited search categories such as race or religion.\n\n**Policy & Governance improvements:**\n- Require independent third-party code audits of any AI tool used in law enforcement before deployment.\n- Establish a transparent public-facing use policy with mandatory review boards to oversee AI surveillance system queries.\n- Define and enforce strict data retention limits and permissible use categories through binding legal agreements with vendors.\n\n**Detection & Accountability measures:**\n- Deploy real-time alerting on anomalous or high-risk query patterns to a dedicated oversight team, not just passive logging.\n- Require mandatory documentation and supervisor approval for any search involving sensitive demographic attributes.\n- Conduct regular bias audits of AI model outputs to assess accuracy disparities across demographic groups.",[12,13,14,15,16,17,18,19,20,21],"CIS Control 3: Data Protection","CIS Control 6: Access Control Management","CIS Control 8: Audit Log Management","NIST SP 800-53 AC-2: Account Management","NIST SP 800-53 AU-6: Audit Record Review and Analysis","NIST AI RMF: Govern 1.1, Map 2.3 (AI Risk Management Framework)","GDPR Article 9: Processing of Special Categories of Personal Data","GDPR Article 22: Automated Individual Decision-Making","EU AI Act: High-Risk AI Systems Classification (Law Enforcement)","ITIL: Service Level Management & Compliance Reporting",{},"published","2026-09-03T13:20:38.313688+00:00","2026-09-03T13:20:38.197+00:00",{"id":7,"url":27,"slug":28,"title":29},"https:\u002F\u002Fwww.wired.com\u002Fstory\u002Fflock-ai-search-user-interface\u002F","this-is-flock-s-ai-search-tool-for-cops-29b956","This Is Flock’s AI Search Tool for Cops",[31,37,43],{"id":32,"name":33,"slug":34,"description":35,"color":36},"1732a005-556e-411c-a9db-5edec3058571","Logging & Monitoring","logging-monitoring","Missing logs, no alerting, blind spots","#a855f7",{"id":38,"name":39,"slug":40,"description":41,"color":42},"1ec88fde-2d0f-4ed8-932a-33f5ccc0fdc7","Access Control","access-control","Excessive privileges, missing MFA, weak auth","#f97316",{"id":44,"name":45,"slug":46,"description":47,"color":48},"c0dcc566-3654-4d70-8ede-262a198e732f","Regulatory Compliance","regulatory-compliance","GDPR, NIS2, DORA, sector-specific violations","#ec4899",[],[51,55,59],{"slug":52,"name":53,"problem":54},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",{"slug":56,"name":57,"problem":58},"breach-attack-simulation","Breach and attack simulation","You only find out whether your security tools stop an attack when a real attacker tries.",{"slug":60,"name":61,"problem":62},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught."]