{"resourceId":"shelton-flock-audit-immigration-searches-safeguards-20261015","versions":[{"version":"external-296bb03a86ee1ab785af25ea554f36c47959986b41601237bb5f3e6554c67329","resource":{"id":"shelton-flock-audit-immigration-searches-safeguards-20261015","title":"Shelton, Wash., police audit of 2.67 million Flock network entries finds 943 outside-agency immigration-linked searches under former sharing settings and none after restrictions","organization":"Shelton Police Department (Washington)","sector":"Policing / ALPR network-sharing audit and access controls","geography":"Shelton, Washington, United States","publishedAt":"Oct 15, 2026","publicationDate":"2026-10-15","eventDate":null,"sourceName":"Shelton-Mason County Journal","sourceLabel":"Shelton Flock audit identifies concerns, affirms safeguards","sourceUrl":"https://www.masoncounty.com/story/2026/10/15/news/shelton-flock-audit-identifies-concerns-affirms-safeguards/7975.html","evidenceClass":"independent-reporting","outcomeClass":"mixed","topics":["data-security","governance-procurement","operating-model"],"finding":"Shelton police reviewed about 2.67 million Flock network-audit entries from April 2025 to July 28, 2026 and identified 943 outside-agency searches with a strong immigration-related connection plus 1,952 entries referencing HSI or an immigration agency without establishing purpose; all immigration-linked searches occurred in 2025 under former nationwide-sharing settings and none were attributed to Shelton personnel. The audit stresses an entry means Shelton’s network was in the searched pool, not that its cameras returned data. After restricting access to authorized Washington agencies, requiring command approval and two-year audit-record retention, 2026 entries showed no immigration-related searches and a 96 percent drop in network activity between October and November 2025.","sledRelevance":"Unlike outright bans covered elsewhere tonight, Shelton models a measurable control path: self-audit, restrict sharing, require stated purpose and approval, and publish results. It also shows what network-audit logs can and cannot prove, which matters for every agency answering council questions about federal access to plate data.","evidence":"Opened the local newspaper article quoting the SPD audit report The audit report itself was not opened; earlier broadcast coverage of the same audit was seen in discovery but is not relied on here.","architectureImplications":"Interpretation: network-sharing settings are the main exposure surface; audit design must distinguish search inclusion from data returned or images viewed, which requires vendor logs beyond search-pool membership.","governanceImplications":"Controls adopted: out-of-state access eliminated, Washington-only sharing for lawful purposes, ban on immigration enforcement use (also required by the state Driver Privacy Act since March 30), command-officer approval with requester and purpose, audit log retained two years.","securityPrivacyImplications":"Searches with vague justifications and some protest, political or abortion-related language were found among outside users; retention of ordinary plate data is not stated in this article.","caveats":"Department self-audit reported by local press; audit report not opened; cannot show whether Shelton data was actually returned; small 12-camera network.","streamIds":["public-safety"],"roles":{"sales":"Sales framing: councils deciding between banning and keeping ALPR need evidence that controls work, and Shelton produced it. Its self-audit of 2.67 million entries found 943 immigration-linked outside searches under old sharing settings and none after restrictions. Chiefs and city attorneys can use a similar audit as the basis for a renewal decision. A bounded offer is an ALPR sharing audit and controls review. This evidence does not show that ALPR improves case outcomes.","engineering":"Engineering framing: the audit’s key caveat is technical. A network-audit entry shows Shelton was in the searched pool, not that data or images were returned. Pre-sales should confirm which logs the vendor exposes, whether they record results returned and images viewed, and whether sharing settings are versioned. Proof should reproduce a sample audit and show restrictions enforced at the configuration level.","delivery":"Delivery framing: the work is a repeatable audit cycle with configuration controls and public reporting. Dependencies include vendor log exports, analyst time and state-law review, here Washington’s Driver Privacy Act. A command officer should own approvals and the records unit should own audits. Acceptance should be measured by audit cadence, unexplained-search rates and zero out-of-state access, rather than by the absence of complaints."},"roleDetails":{"sales":{"customerProblem":"Agencies cannot answer whether outside or federal users searched their ALPR network and whether current safeguards prevent it.","stakeholders":["Police chief","City council","City attorney","Records or audit unit","Community advocates"],"discoveryQuestions":["When did you last audit outside-agency searches of your ALPR network?","What sharing settings were active historically?","Do your logs show data returned or only search inclusion?","What approvals are required for outside requests?"],"valueHypothesis":"A documented audit and control review gives councils evidence to keep, restrict or end ALPR with a defensible record.","potentialEngagement":"4-week ALPR network-sharing audit and safeguards report ahead of contract renewal.","unsupportedClaims":["That Shelton data was given to immigration authorities","That restrictions eliminate all misuse","That ALPR improves clearance rates"]},"engineering":{"fit":"Agencies with Flock or similar networks that previously enabled broad sharing.","architectureIntegration":"Export vendor network-audit logs, classify search reasons, correlate with sharing-setting history, and report by period.","prerequisites":["Vendor audit log export","Sharing-setting change history","Classification rules for search reasons"],"constraints":["Logs may not show results returned","State law limits (e.g., Washington Driver Privacy Act)","Vendor-controlled network configuration"],"security":"Restrict sharing to vetted in-state agencies, require purpose and approval per request, and retain audit records two years.","proofOfValue":["Proposed: reproduce classification on a sample month and compare with manual review","Proposed: demonstrate that out-of-state queries are blocked","Proposed: request vendor evidence of result-returned logging"]},"delivery":{"work":"Run historical and ongoing audits, configure sharing restrictions, set approval workflow and publish findings.","dependencies":["Vendor cooperation","Analyst capacity","Legal review"],"ownership":"Command officer for approvals; records/audit unit for periodic audits","skillsAdoption":"Train staff on required justification fields and review of vague entries.","governanceCheckpoints":["Pre-renewal council review","Quarterly audit report","Annual sharing-list recertification"],"acceptanceCriteria":["Proposed: quarterly audits published within 30 days of quarter end","Proposed: blank or vague justifications under 1% of entries","Proposed: zero out-of-state access in each audit"],"risks":["Audit misread as proof of data disclosure","Vendor setting changes outside agency control","Audit fatigue in small departments"]}},"retrievedAt":"2026-10-19T02:52:45Z","enrichedAt":"2026-10-19T03:00:30Z","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"Running a 2.67-million-entry review requires analyst capacity smaller agencies may lack.","procurementImplications":"The council will review the Flock contract before March renewal; interpretation: renewal terms should require exportable logs showing data returned and images viewed.","operatingModelImplications":"Police command approves outside requests; department frames transparency as proactive self-examination.","sourceVerification":{"openedUrl":"https://www.masoncounty.com/story/2026/10/15/news/shelton-flock-audit-identifies-concerns-affirms-safeguards/7975.html","referenceExcerpt":"The audit reviewed approximately 2.67 million network-audit entries covering April 2025 through July 28, 2026.","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}