Legal and Technical Challenges to Surveillance and Data Collection Technologies
A range of legal and technical measures are being taken to counter the use and abuse of surveillance and data collection technologies by both government agencies and private corporations. In the United States, privacy advocates and hackers are developing counter-surveillance tools to disrupt automated license plate readers (ALPRs) operated by companies like Flock, which supply footage to law enforcement agencies including ICE. These efforts include adversarial license plate overlays that confuse AI recognition systems and open source mapping of ALPR networks. Additionally, a significant security lapse was discovered in Flock's infrastructure, exposing live camera feeds and logs due to misconfigured, publicly accessible admin interfaces. Legal action is also underway, with organizations like the EFF and ACLU suing municipalities over alleged abuses of surveillance technology.
In Texas, a court has issued a temporary restraining order against Samsung, prohibiting the company from collecting smart TV viewing data from consumers without proper consent. The court found Samsung's Automated Content Recognition (ACR) practices deceptive, highlighting concerns about undisclosed data collection and potential access by foreign entities such as the Chinese government. The ruling underscores growing legal scrutiny of pervasive data collection by technology vendors and the opaque enrollment processes that mislead consumers about the extent and use of their personal information. These developments reflect increasing resistance—both technical and legal—to the expansion of surveillance and data harvesting technologies in the US.
Related Entities
Sources
Related Stories
Detection and Risks of Modern Surveillance Technologies
Hidden surveillance devices, such as covert cameras and microphones, are increasingly embedded in everyday objects like smoke detectors, clocks, and USB chargers. Detecting these devices requires careful observation of physical anomalies, such as misaligned fixtures or unusual reflections, and the use of tools like smartphone cameras to spot infrared emissions invisible to the naked eye. Awareness of subtle environmental cues and the physics of light and sound can help individuals identify hidden surveillance threats in both private and public spaces. Automated License Plate Readers (ALPRs) represent another form of pervasive surveillance, capturing and storing detailed information about vehicles and their movements across the United States. These AI-powered cameras, often used by law enforcement, can track a car's route and daily routine, raising significant privacy and data security concerns. Vulnerabilities in ALPR systems have led to data leaks, and the ease of access to these databases by police—sometimes without warrants—highlights the broader risks associated with the proliferation of surveillance technologies in modern society.
2 months agoLawmakers Demand Investigation into Flock Safety's Cybersecurity Practices
Senator Ron Wyden and Representative Raja Krishnamoorthi have called for a federal investigation into Flock Safety, a company operating the largest network of automated license plate readers (ALPRs) in the United States, citing concerns over negligent handling of Americans’ personal data and inadequate cybersecurity measures. The lawmakers allege that Flock Safety fails to enforce cybersecurity best practices, such as mandatory multi-factor authentication (MFA), leaving customer accounts vulnerable to compromise. Reports indicate that at least 35 Flock customer accounts have been stolen by hackers, and the company’s voluntary authentication does not natively support phishing-resistant MFA. These security lapses have raised fears that hackers or foreign actors could gain access to sensitive location data on millions of Americans, and that law enforcement agencies can improperly share access to Flock’s systems. The controversy surrounding Flock Safety extends beyond cybersecurity, as privacy advocates and local communities have raised alarms about the potential for abuse and invasive tracking through the company’s ALPR network. Some communities have already succeeded in removing Flock cameras, motivated by concerns over wrongful detentions, privacy violations, and the use of Flock data in sensitive investigations, such as those involving abortion patients and undocumented immigrants. Lawmakers argue that Flock’s practices expose Americans to significant risks and have urged the Federal Trade Commission (FTC) to investigate, referencing previous FTC enforcement actions against companies that failed to implement adequate authentication controls.
4 months agoFlock Safety License Plate Readers Used for Protest Surveillance
Police departments across the United States have used Flock Safety's automated license plate reader (ALPR) cameras to monitor protest activity, according to research by the Electronic Frontier Foundation (EFF). Over a ten-month period, more than 50 federal, state, and local agencies conducted protest-related searches using Flock Safety's national network, targeting events such as the "No Kings" demonstrations, the 50501 movement, and "Hands Off!" protests. The EFF's findings highlight that law enforcement agencies sometimes focused on specific activist groups, raising significant privacy and civil liberties concerns. The report also notes that Flock Safety has lost police department customers following revelations of its technology being used to track undocumented immigrants and individuals seeking abortions. Flock Safety's ALPR systems are designed to scan and photograph every license plate that passes by, storing the data for later searches. While these systems have been credited with aiding criminal investigations, their widespread deployment has sparked debate over the balance between public safety and individual privacy. The growing use of ALPRs, especially by law enforcement to track protestors and other groups, has intensified scrutiny from privacy advocates and the public regarding the potential for mass surveillance and misuse of collected data.
3 months ago