05-27-25-WS - Laserfiche WebLink

Home Browse Search

Page 2 of 3 expectation of privacy. While many privacy laws regulate the use of Personal Information (i.e., access, deletion, etc.), it is important to distinguish those rights from non-personal information. Since Flock devices do not capture any Personal Information and rather capture the license plate data itself, Flock cannot verify any information captured in order to process any data subject request. • End-to-end understanding of data flow? o Flock’s Security Practices Regarding Customer Data - Flock’s security posture for Customer Data starts before the devices are even installed. Flock has a dedicated team, which maps out the best location for installation - all of which require that installations are in accordance with constitutional rights. This means that Flock’s devices are never placed in a location where there is an expectation of privacy. Once captured, Customer Data is securely transmitted to the cloud with encryption in transit, stored for thirty (30) days with a customer only S3 bucket, and then permanently deleted. It is encrypted throughout its entire lifecycle and securely stored with AES256 encryption with our cloud provider, Amazon Web Services. On the device itself, Customer Data is only stored temporarily for a period no longer than thirty (30) days until it is uploaded to the cloud, at which point it is removed automatically from the local device. This means that Customer Data is secure from when it is on the Flock device to when it is transferred to the cloud, using a secure connection to Flock servers. While stored in the cloud, all data (both footage and metadata) is fully encrypted at rest. Flock defaults to permanently deleting all Customer Data after thirty (30) days on a rolling basis. • Who owns data? o Flock’s customers own 100% of their data and determine who is an Authorized End User on the account. Flock does not share the footage/data with any third- party entity, including any repossession companies, towing companies, companies related to traffic enforcement, revenue collection and unpaid fines, or any other third party entity for any commercial use. Any license plate data that may be searched by authorized law enforcement requires justification to verify the legitimacy of the search and create an audit trail. Lastly, Authorized End Users from law enforcement undergo training to properly use our system and communicate with their dispatch teams. Such users must learn how to enter legitimate reasons for search and how to audit searches as necessary. As a result, Customer Data is captured in a location with no expectation of privacy, Customer Data does not collect Personal Information, Customer Data is securely stored, transmitted, and deleted, and any law enforcement access is contingent on training to ensure proper use. For more information on how Flock prioritizes your privacy, please visit our Trust page at Flock Safety Trust Center. • Data collected with LPR cameras, what is it being combined with? Is the collection of license plate/vehicle data being combined with individuals or other personal data? o LPR only collects license plates. That info is then ran against the BCA hotlist which will provide hits. • Is data collected subject to or compliant with Statute 13 or Statute 169? o All data collected is Subject to Statute 13 - ALPR Audits / Data Practices Office