🟡 Medium  |  Source: Schneier on Security


Flock Safety’s CCTV camera network, widely deployed by US law enforcement, can identify and track vehicles without requiring a readable number plate by building a ‘Vehicle Fingerprint’ from visual characteristics such as decals, bumper stickers, and roof racks. This capability enables police to search for and correlate vehicle movements across multiple locations using minimal identifying information. The system raises significant privacy concerns around mass surveillance of individuals who have taken steps to avoid plate-based identification.

Security Architect’s Take: If your organisation operates in sectors handling law enforcement data, smart city infrastructure, or physical security integrations, review data governance policies around third-party camera and analytics platforms — particularly regarding what non-plate vehicle attributes are collected, retained, and queryable. Ensure any vendor contracts explicitly define data minimisation obligations and audit rights.

Original advisory: Flock Cameras Can Surveil Cars Without License Plates