San Diego, California, Police Reportedly Relied on a Flock License Plate Reader Image in Mistaken Arrests

San Diego police relied on a false positive from a Flock Safety automated license plate reader to arrest two men for an attempted carjacking. Despite the men being five miles away from the crime scene at the time the license plate was captured, police proceeded with the arrest based on the 'hit' and a witness identification. One of the men, Hugo Parra, spent nearly a month in jail before charges were dropped, leading to a lawsuit against the city for civil rights violations.

Police in San Diego, California, reportedly mistook a red Alfa Romeo photographed by a Flock Safety automated license plate reader for a car linked to an attempted carjacking. Officers also relied on a witness identification. They arrested driver Ariel Beltran, passenger Hugo Parra, and a third man. Parra spent nearly a month in jail before his charges were dropped. Parra and Beltran later sued the city and officers.

Source: AI Incident Database

Risk classification

  • Primary risk domain: 7 AI system safety, failures, & limitations
  • Primary risk subdomain: 7.3 Lack of capability or robustness

The Flock ALPR system failed to perform reliably, generating a false positive hit that misidentified a vehicle and led directly to a wrongful arrest.

Additional risk subdomains

  • 5.1 Overreliance and unsafe use: Police officers blindly relied on the automated license plate reader hit without verifying the physical feasibility of the timeline, ignoring clear logical contradictions.

Causal factors

  • Entity: AI
  • Intent: Unintentional
  • Timing: Post-deployment

The incident was initiated by a false positive hit from the deployed Flock ALPR system, which led to the wrongful arrest of innocent individuals.

EU AI Act risk tier

  • Risk tier: 2 High Risk

High Risk: The system is an automated license plate reader used in law enforcement, which is explicitly classified as high risk due to its significant implications for fundamental rights.

AI system and alleged parties

  • AI system: None named
  • AI purpose: License Plate Recognition; Smart Surveillance
  • Behaviour type: Tool
  • Alleged developer: Surveillance technology developers, Flock Safety, Automated license plate reader (ALPR) developers
  • Alleged deployer: San Diego Police Department (California), Police departments in the United States, Police departments, Law enforcement, City of San Diego
  • Alleged harmed parties: Road users, Motorists, Individuals mistakenly detained by law enforcement, Hugo Parra, Epistemic integrity, Drivers, Christian Lopez, Ariel Alonso Beltran

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

  • Physical: direct Negligible, indirect Negligible
  • Infrastructure: direct Negligible, indirect Negligible
  • Property: direct Negligible, indirect Negligible
  • Financial: direct Negligible, indirect Negligible
  • Environmental: direct Negligible, indirect Negligible
  • Malicious content: direct Negligible, indirect Negligible
  • Differential treatment: direct Negligible, indirect Minor
  • Civil rights: direct Minor, indirect Minor
  • Democracy: direct Negligible, indirect Negligible
  • Privacy: direct Negligible, indirect Negligible
  • Psychological: direct Minor, indirect Minor
  • Epistemic: direct Negligible, indirect Negligible
  • Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Differential treatment

Reported: The report describes concerns that mass surveillance systems disproportionately impact individuals with prior criminal records.

Indirectly caused: The victims' prior criminal records colored their interaction with law enforcement and the court, making them more vulnerable to prolonged detention.

Civil rights

Reported: The report explicitly describes severe violations of civil rights and wrongful imprisonment resulting from the incident.

Directly caused: Hugo Parra was wrongfully imprisoned for nearly a month, and Ariel Beltran was wrongfully detained overnight, violating their fundamental right to liberty.

Indirectly caused: The victims' civil rights were further violated when police ignored exculpatory evidence and rushed to judgment based on the automated hit.

Psychological

Reported: The report explicitly describes psychological harm, including fear, anxiety, and ongoing paranoia experienced by the victims.

Directly caused: Hugo Parra experienced severe fear, adrenaline, and anxiety while being detained in a high-security jail with dangerous criminals for nearly a month.

Indirectly caused: Parra continues to suffer from paranoia and anxiety whenever he sees police officers or patrol vehicles.

Inferred additional harm: Ariel Beltran likely experienced significant distress and anxiety while fighting to clear his name and protesting his innocence to unresponsive detectives.

People affected

  • Occurrences reported: 1
  • People reportedly harmed: 3
  • People reportedly exposed: 3

Potential causes

Management

  • Inadequate Officer Training: Management failed to train officers on ALPR limitations and false positives.
  • Rush to Judgment Culture: Department prioritized rapid arrests over rigorous validation of tech data.

Technology

  • System Misidentification: The ALPR flagged a different car of the same color and model nearby.
  • Lack of Path Reconstruction: System failed to prove the vehicle could not be in two places at once.

Data Inputs

  • Missing Suspect Plate Number: Officers could not input the actual fleeing license plate into the system.
  • Coarse Image Resolution: System output lacked detailed features to differentiate similar vehicles.

Human Factors

  • Automation Bias: Officers treated the automated alert as absolute proof of suspect presence.
  • Lack of System Skepticism: Police failed to question how the car traversed five miles in 23 seconds.

Process and Methods

  • Ignoring Exculpatory Data: Police did not check other cameras or phone GPS to corroborate the alibi.
  • Flawed Verification Protocol: No standard process existed to verify ALPR hits before making arrests.

Regulatory Environment

  • Lack of ALPR Usage Standards: No regulatory constraints on using automated hits for probable cause.

Information quality

  • Classification confidence: High
  • Reason for confidence: The report provides a highly detailed, chronological account of the incident, including specific dates, locations, and the roles of both the AI system and human operators. The consequences for the affected individuals are clearly documented.
  • Ambiguities identified: It is slightly ambiguous whether the Flock system misread the license plate or if the police simply misidentified the vehicle based on a generic match of a red car, though the text refers to it as a 'false Flock hit'.
  • Alternative interpretations: The incident could be interpreted primarily as human police negligence rather than an AI failure, though the AI's false positive was the critical trigger.

A false positive from a Flock Safety ALPR led to the wrongful arrest and month-long detention of an innocent man in San Diego. While representing a minor domestic civil rights and societal stability concern regarding law enforcement's overreliance on automated surveillance tools, the incident has negligible direct national security implications.

  • Overall national security impact: Minor
  • Scope: Single nation
  • Primary target: United States
  • Alleged perpetrator: Unknown

Threat characteristics

  • Imminence: Long-term. Represents an ongoing domestic policy and civil liberties concern rather than an active national security crisis.
  • Autonomy: Human-supervised. The ALPR system automatically scans and flags license plates, but human law enforcement officers make the final decision to act and arrest.
  • Novelty: Established threat. Errors and false positives in automated license plate readers and facial recognition databases are well-documented issues.

Impact by dimension

  • Physical security: Negligible. No kinetic attacks, critical infrastructure manipulation, or threats to physical systems occurred.
  • Information security: Negligible. No espionage, disinformation campaigns, or intelligence capabilities were compromised.
  • Sovereignty: Negligible. The incident involves local law enforcement and does not threaten state authority or national-level governance.
  • Economic security: Negligible. No threat to national economic stability, strategic industries, or technological competitive advantage.
  • Societal stability: Minor. The wrongful arrest and month-long detention of an innocent citizen represents a minor but notable violation of civil liberties and human rights stemming from automated surveillance tools.
Explore in the interactive Incident Tracker