Haines City, Florida, Police Officer Allegedly Used Flock License-Plate Reader System to Track Estranged Wife

Police officer Christopher Goodson of Haines City, Florida, allegedly used Flock's automated license plate reader records to track his estranged wife's vehicle through 717 searches. Investigators said the searches had no legitimate law-enforcement purpose. He reportedly said he wanted to locate his children while they were with her. He was arrested, and the department announced audits, case-number requirements, and annual training.

Risk classification

• Primary risk domain: 2 Privacy & Security
• Primary risk subdomain: 2.1 Compromise of privacy by obtaining, leaking or correctly inferring sensitive information

The primary harm of the incident is the unauthorized tracking and compromise of personal location history of individuals by police officers misusing the ALPR database.

Additional risk subdomains

• 6.5 Governance failure: Police departments deployed powerful surveillance technology without establishing basic auditing procedures, formal training, or written usage policies, allowing widespread misuse to go undetected.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The privacy violations and misuse of the system were caused by the intentional decisions and actions of human police officers exploiting the deployed Flock database for personal tracking.

EU AI Act risk tier

• Risk tier: 2 High Risk

High Risk: The system is a law enforcement application used for public surveillance and tracking, which has significant implications for fundamental rights and public interest.

AI system and alleged parties

• AI system: Flock camera databases (Flock Safety)
• AI purpose: License Plate Recognition; Camera Tracking
• Behaviour type: Tool
• Alleged developer: Surveillance technology developers, Flock Safety, Automated license plate reader (ALPR) developers
• Alleged deployer: Stalkers, Police officers, Police departments in the United States, Police departments, Law enforcement, Christopher Goodson
• Alleged harmed parties: Women and girls, Women, Victims of stalking, Privacy, Individuals whose license plate data were accessed for non-law-enforcement purposes

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Minor, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Minor, indirect Negligible
• Psychological: direct Minor, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Civil rights

Reported: The report explicitly describes concerns from community members and activists regarding unauthorized surveillance of citizens not suspected of any crime.

Directly caused: Police officers violated the civil rights of their wives, ex-partners, and acquaintances by conducting unauthorized surveillance and tracking of their vehicles without warrants or legitimate law enforcement purposes.

Inferred additional harm: The widespread lack of auditing across thousands of departments suggests that the civil rights and privacy of numerous other citizens may have been violated without detection.

Privacy

Reported: The report explicitly describes extensive privacy violations where officers used the Flock database to track the locations of personal acquaintances.

Directly caused: Officer Goodson tracked his estranged wife's vehicle 717 times, an Indianapolis officer searched personal vehicles 3,759 times, and a Highland Heights dispatcher searched five plates over 1,000 times each.

Inferred additional harm: With at least 69 police officials accused of misusing the system nationwide, it is highly likely that hundreds of individuals had their private location history accessed and monitored without authorization.

Psychological

Reported: The report describes incidents of obsessive tracking and stalking of estranged wives and ex-partners, which led to a restraining order in one case.

Directly caused: An officer in Massachusetts used the tool to search for her ex-girlfriend's vehicle, resulting in a judge extending a restraining order against the officer.

Inferred additional harm: Victims who were tracked hundreds or thousands of times by police officers likely experienced severe distress, anxiety, and fear for their safety upon discovering they were being stalked using official police databases.

People affected

• Occurrences reported: 69
• People reportedly harmed: 15
• People reportedly exposed: 69

Potential causes

Management

• Inadequate Oversight: Management failed to monitor search logs or assign auditing responsibility.
• Lack of System Accountability: Departments did not tie searches to active, validated case numbers.

Technology

• Lack of Automated Auditing: The Flock system did not automatically scan for or flag suspicious searches.
• Flawed Access Controls: Officers could search any plate without role-based access restrictions.

Data Inputs

• Unverified Search Justifications: Officers entered false case reasons like 'drugs' to bypass search prompts.

Human Factors

• Personal Motivation and Abuse: Officers used the system to stalk estranged wives and ex-partners.
• Lack of Officer Integrity: Individual officers violated public trust by conducting unauthorized searches.

Process and Methods

• Absence of Routine Auditing: Departments had no regular practice of reviewing officers' search logs.
• Lack of Formal Training: Some departments deployed the technology without providing formal training.
• No Policy Guidelines: Agencies lacked written policies governing the appropriate use of Flock.

Regulatory Environment

• Lack of Statewide Regulations: Many states have no laws regulating police use of license-plate readers.
• No Uniform Auditing Standards: There is no national standard for auditing license-plate database usage.

Information quality

• Classification confidence: High
• Reason for confidence: The reports provide highly detailed, consistent, and corroborated accounts of the misuse of Flock cameras across multiple jurisdictions, citing official police affidavits, statements from police chiefs, and investigative journalism from The Washington Post.
• Ambiguities identified: None of significance that affect the classification of the primary privacy and governance risks.
• Alternative interpretations: None.

Multiple US police officers misused the Flock Safety license plate reader database to conduct unauthorized personal surveillance and stalking. While this represents a serious violation of privacy, civil rights, and local governance norms, the national security impact is minor, with no foreign involvement or threats to federal stability.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: Individual police officers

Threat characteristics

• Imminence: Long-term. Represents an ongoing systemic governance and privacy concern rather than an active national security crisis.
• Autonomy: Human-controlled. The Flock system operates as a tool where human officers must actively initiate queries to track vehicles.
• Novelty: Established threat. Unauthorized database queries and stalking by law enforcement officers using tracking technology is an established threat pattern.

Impact by dimension

• Physical security: Negligible. No physical security threats or critical infrastructure compromises were reported in connection with this incident.
• Information security: Negligible. The incident involves domestic law enforcement database misuse and does not impact national intelligence collections or foreign information operations.
• Sovereignty: Minor. Misuse of police databases undermines local government integrity, but impacts are limited to municipal police departments and managed through standard disciplinary and legal procedures.
• Economic security: Negligible. No strategic economic impacts or technological theft occurred; the incident is confined to unauthorized database queries by local officers.
• Societal stability: Minor. Unauthorized tracking violated civil rights and privacy of specific individuals, eroding local public trust, but did not cause large-scale civil unrest or systemic population-level oppression.