American drivers can have their vehicles photographed by roadside cameras without being suspected of a crime.
On 21 October 2026, Swiss privacy company Proton began hosting a searchable map of more than 300,000 Flock-associated surveillance devices across the United States. The inventory includes more than 170,000 cameras and 130,000 other devices, rather than 300,000 active number plate readers.
The Flock Camera Map, hosted on Swiss servers, allows users to search by ZIP code and examine reported surveillance locations. Proton's decision follows legal threats against cybersecurity researcher Joshua Michael, who compiled the original inventory.
The move has renewed concerns about vehicle surveillance, public transparency and safeguards against unauthorised access to drivers' information.
How Flock Cameras Can Track Ordinary Drivers
Flock Safety supplies automated number plate recognition cameras to police departments, businesses and other customers across the United States.
The cameras photograph passing vehicles and record their number plates, locations and timestamps. Flock's Vehicle Fingerprint technology also captures identifying details, including a vehicle's make, model, colour, dents and bumper stickers. These features help investigators identify vehicles even when number plates are unreadable.
Records are stored in Flock's cloud-based system, where authorised users can search vehicle sightings. Police departments may also access records collected by other agencies, depending on data-sharing arrangements and applicable policies.
According to Proton, Flock reports that its network processes more than 20 billion vehicle detections monthly across 49 US states. These are recorded sightings, not individual drivers or unique vehicles.
Privacy advocates warn that repeated sightings could allow authorised users to reconstruct someone's movements, even without suspicion of wrongdoing.
Proton Publishes Map Despite Legal Threats
In November 2025, cybersecurity researcher Joshua Michael discovered what Proton described as a publicly exposed access token associated with Flock's systems.
According to Proton, the token could be obtained without logging in and allowed Michael to retrieve surveillance equipment locations. He reported the issue to Flock and collected the data underlying the map, which reflects December 2025.
The Foundation for Individual Rights and Expression reported that Michael publicly released his map on 23 September 2026. His inventory identified more than 170,000 cameras and over 130,000 other Flock-associated devices, including supporting equipment. The figures do not establish whether every listed device was operational.
On 24 September, Flock's brand-protection representative filed a trademark complaint seeking the map's removal. The following day, a lawyer representing Flock sent Michael a cease-and-desist demand alleging unauthorised access to computer systems. The allegations do not establish criminal wrongdoing.
Proton subsequently hosted a version of the map on its Swiss infrastructure, making it accessible internationally. The company says it does not host or distribute the underlying dataset.
Police Misuse Raises Questions About Surveillance Safeguards
Concerns about Flock extend beyond the scale of its surveillance network.
An August investigation by The Washington Post identified at least 50 law enforcement officers accused or charged with misusing number plate recognition systems. Flock's technology was involved in 46 cases. Some involved allegations that officers used surveillance records to monitor romantic partners, former partners and others for personal reasons.
On 13 August 2026, Flock Chief Executive Garrett Langley announced additional privacy and security measures. These included mandatory misuse-detection tools, case codes for law enforcement searches and stronger access controls.
Flock also announced plans to reduce its recommended and default data retention period from 30 days to seven days. Customers may retain other approved retention periods, while specific records can be preserved for investigations. Several safeguards are scheduled to become mandatory by the end of 2026.
A further Washington Post investigation published on 21 October documented 11 incidents involving unauthorised access to Flock databases. Four involved officers retaining access after leaving their positions or while suspended. Other cases involved shared credentials or accounts accessed without permission.
Flock maintains that its technology supports criminal investigations and public safety. The company says its safeguards are intended to strengthen accountability and prevent misuse.
How Drivers Can Check Cameras Near Them
Americans can visit Proton's Flock Camera Map and enter their ZIP code to explore reported surveillance devices in their area. Users can zoom in to examine equipment locations and identify where cameras may photograph passing vehicles.
However, the inventory is not updated in real time. Proton says the information reflects December 2025, meaning devices installed or removed since then may not be accurately represented.
The map also cannot confirm whether every listed camera remains operational, whether a particular vehicle has been recorded or who may have accessed those records.
For residents, the map offers a clearer picture of surveillance equipment in their communities. Yet the broader concern goes beyond where cameras are installed. It raises questions about who can access drivers' information and whether existing safeguards are sufficient to prevent misuse.
