San Jose Police Chief Paul Joseph fired one of his own officers this month after an internal investigation found the officer used the department’s Flock Safety automated license plate reader (ALPR) network to track a woman who had accused his cousin of domestic violence. The officer pulled the woman’s vehicle location data on a personal phone and passed it to his cousin, the man she had accused, giving him a way to find her. Neither the officer nor the cousin has been criminally charged, but the case has been referred to the Santa Clara County District Attorney’s office and to the California Commission on Peace Officer Standards and Training (P.O.S.T.) for a decertification review, according to ABC7 San Francisco and NBC Bay Area.
“This is a betrayal of the public trust — plain and simple,” Chief Joseph told NBC Bay Area, adding that he was “furious that an officer would betray the public trust in that manner.” In a separate statement carried by ABC7, Joseph said: “When an officer violates the public’s trust this severely, my responsibility is clear: that person cannot remain in a position of police authority, and they cannot wear the San Jose badge.” The case lands in the middle of a bigger fight over San Jose’s roughly 500-camera Flock network, which is already the subject of a federal class-action lawsuit filed in April 2026 by three residents represented by the Institute for Justice.
Don't miss new tech stories on Google
Add Tech Insider once in the Google app and our stories appear in your news suggestions.
What happened inside the San Jose Police Department
According to the reporting from ABC7 and NBC Bay Area, the officer accessed San Jose’s Flock Safety camera feed on a personal device to help a family member involved in a domestic violence dispute. Flock’s ALPR cameras photograph every passing vehicle’s license plate, cross-reference it against law enforcement databases, and log where and when that plate was seen. The officer used that lookup capability to locate the accuser’s vehicle and shared the resulting location data with his cousin, the man she had accused of abuse, who then used it to find her.
The department placed the officer on administrative leave once the misuse surfaced, then moved to termination after the internal investigation concluded. Chief Joseph confirmed the case has been submitted to the state P.O.S.T. commission, the body that certifies and can strip California police officers of their ability to work in law enforcement statewide. San Jose police also referred the matter to the Santa Clara County DA’s office, though as of this reporting neither the officer nor his cousin faces criminal charges.
Local legal analyst Steven Clark, cited by ABC7, noted that the officer had authorized access to the Flock system as part of his job, which is part of why the misuse “slipped through the cracks” of normal criminal referral processes — he wasn’t hacking a system he wasn’t allowed to touch, he was misusing one he touched every day. That distinction is at the center of a debate now playing out in police departments nationwide: audit logs can show that an officer looked something up, but they rarely explain why, and departments are discovering that “why” often only surfaces after a victim complains.
Flock Safety’s footprint in San Jose, by the numbers
San Jose’s ALPR program did not start with this incident, and it won’t end with it either. The city’s camera network has grown steadily since it was first deployed in 2022, and the numbers explain why privacy advocates keep circling back to it.
| Metric | Figure | Source |
|---|---|---|
| Flock cameras deployed citywide | ~500 (474 cited in the IJ lawsuit) | ABC7 San Francisco / Institute for Justice |
| Program launch year | 2022 | Institute for Justice case filing |
| Standard data retention window | 30 days | Institute for Justice case filing |
| Plaintiffs’ requested retention window | 24 hours, absent a warrant | Institute for Justice case filing |
| Lawsuit filed | April 15, 2026 | Institute for Justice / San José Spotlight |
| Named plaintiffs | Tony Tan, Scott West, Colin Wolfson | Institute for Justice case filing |
| Officer’s device used for lookup | Personal phone | NBC Bay Area / ABC7 |
The retention gap in that table — 30 days versus the 24 hours plaintiffs want — is the crux of the Institute for Justice lawsuit, which argues San Jose’s network amounts to warrantless mass surveillance under the Fourth Amendment. The officer misuse case doesn’t appear in that lawsuit’s original complaint, since it broke afterward, but it hands the plaintiffs a real-world example of the exact failure mode they warned about: data collected for traffic enforcement ending up in the hands of someone with a personal motive to misuse it.
How Flock Safety’s system is supposed to work
Flock Safety, the Atlanta-based company that supplies San Jose’s cameras, sells ALPR hardware and a cloud dashboard to thousands of U.S. police agencies and neighborhood associations. The pitch is straightforward: fixed cameras photograph plates at intersections and neighborhood entry points, software matches them against hot lists (stolen vehicles, Amber Alerts, wanted plates), and officers get a searchable map of where a given plate has been seen recently.
Access controls are supposed to be the safeguard. Departments set policies on who can query the system, for what stated purpose, and from what device. San Jose’s stated policy prior to this incident allowed officers some flexibility in how they accessed department databases, which is exactly what let a personal phone become the entry point for misuse. That loophole is now closed: the department issued a directive the week of September 7, 2026, barring officers from accessing law enforcement databases, including Flock, from personal electronic devices, and it is testing new automated auditing tools designed to flag lookups that don’t match a documented case number or lawful purpose.
Those two fixes — device restrictions and automated auditing — track closely with recommendations security researchers have made for years about insider misuse of law enforcement databases: NCIC, DMV records, and now ALPR networks. The common thread is that the technical access control (a valid login) and the policy control (a legitimate reason to look someone up) are two different things, and only the second one actually stops this kind of abuse. A valid officer credential will always be able to pull a plate; the only real defense is logging that ties every query to a case file and flags the ones that don’t have one.
Not an isolated case: the personal-device pattern in law enforcement data misuse
San Jose’s case fits a pattern Tech Insider has tracked through 2026: government employees using personal devices to pull sensitive records outside of official channels, with the misuse only surfacing after a victim or auditor flags it. Florida’s DMV disclosed a similar episode earlier this year in which an officer’s personal device leaked roughly 200,000 driver IDs, and a follow-up review found the same personal-device access gap showing up in multiple state agencies, not just one department. The common denominator in nearly every one of these cases is the same: the system worked exactly as designed for the person who had legitimate access, and nobody built a control that asks whether a given lookup matches an open case.
What makes the San Jose case land differently is the domestic violence context. Location tracking is a well-documented tool of abuse, and giving an accused abuser a law enforcement-grade way to find his accuser inverts the entire purpose of a public safety camera network. Advocacy groups that have opposed ALPR expansion on privacy grounds, including local organizers who spoke to NBC Bay Area, argue this is precisely the scenario they warned city council about when the network was approved in 2022: that data collected for one purpose (recovering stolen cars, finding wanted suspects) creates a standing capability that can be redirected toward stalking with almost no additional technical effort.
Competitive and market impact: Flock Safety’s exposure
Flock Safety has built a business on being the least controversial ALPR vendor, positioning itself against older players and government-run camera networks by emphasizing audit trails, retention limits, and public transparency portals that let residents see where cameras are installed. A misuse case inside a flagship customer city undercuts that pitch directly, even though the failure here was a department access-control gap rather than a flaw in Flock’s own software.
The company is not named as a defendant in the Institute for Justice suit, which targets the city of San Jose and its police department rather than the vendor. But Flock’s contracts with thousands of U.S. municipalities mean every high-profile misuse story becomes leverage for city councils weighing whether to renew or expand their own deployments. San Jose is currently facing multiple legal challenges to its camera network, including the April 2026 Institute for Justice suit. A misuse case involving an officer enabling stalking gives council members opposed to the program a concrete incident to point to in future budget and renewal hearings.
Historical context: ALPR misuse cases are not new
License plate reader misuse by individual officers has surfaced periodically since ALPR networks scaled up in the early 2010s, generally in one of three patterns: an officer looking up an ex-partner or love interest, an officer selling lookups to a private investigator, or, as in San Jose, an officer helping a friend or relative track someone. The Electronic Frontier Foundation has documented ALPR privacy risks for more than a decade, arguing that the technology’s core function, building a searchable history of where a vehicle has been, creates a surveillance capability that outlives its original justification the moment access controls fail.
What’s different in 2026 is scale. San Jose’s network alone logs data on nearly 500 cameras, and Flock’s national footprint covers thousands of jurisdictions. Every additional camera and every additional officer with a login is one more chance for the same misuse pattern to repeat, which is exactly the argument the Institute for Justice is making in court: that the aggregate surveillance capability, not any single camera, is the constitutional problem.
What San Jose Police changed after the firing
Chief Joseph’s department has made three concrete changes since the case came to light, based on his public statements to ABC7 and NBC Bay Area:
- Officers can no longer access Flock or other law enforcement databases from personal electronic devices; a directive to that effect went out the week of September 7, 2026.
- The department is testing automated auditing tools intended to flag ALPR queries that lack a documented, lawful case purpose.
- Officers were formally reminded of the disciplinary and legal consequences of improper database access, reinforcing existing policy rather than introducing a new one.
None of these changes address the retention-period dispute at the heart of the Institute for Justice lawsuit, which is a separate, ongoing legal fight over how long the city can hold onto plate data in the first place, regardless of who’s allowed to query it.
How San Jose’s response compares with other departments
| Jurisdiction | Issue | Response |
|---|---|---|
| San Jose, CA (2026) | Officer misused Flock ALPR data to help a relative track a domestic violence accuser | Officer fired, referred to DA and state P.O.S.T.; personal-device access banned; auditing tools in testing |
| Florida DMV (2026) | Officer’s personal device linked to a leak of roughly 200,000 driver IDs | State review found the same personal-device gap across multiple agencies |
| San Jose ALPR network (ongoing) | 30-day retention challenged as unconstitutional mass surveillance | Institute for Justice lawsuit seeks 24-hour deletion absent a warrant |
The pattern across these cases is consistent: technical fixes (device bans, audit flags) arrive quickly after a misuse case becomes public, while the harder structural questions, like how long data should be retained and who should be allowed to query it without a warrant, get litigated for years rather than fixed by policy memo.
Why the domestic violence context raises the stakes
Domestic violence advocates have long flagged location-tracking technology, from AirTag-style trackers to family-sharing apps, as tools abusers repurpose for stalking. A police-grade camera network adds a layer those advocates hadn’t had to plan around: a tracking capability with law enforcement’s own credibility and reach behind it, operated by someone with an insider’s understanding of how to query it without immediately triggering a review. That an officer, rather than a hacker, was the point of failure is arguably the more troubling detail. No external breach, malware, or credential theft was involved. The system performed exactly as built for a user who already had a valid login and a bad reason to use it.
Predictions: what happens next
- Expect San Jose’s P.O.S.T. decertification review to become a reference case cited by other California departments updating their own ALPR access policies before the end of 2026.
- The Institute for Justice lawsuit will likely cite this incident in briefing, even though it postdates the original complaint, as evidence supporting shorter retention windows.
- More police departments running Flock or comparable ALPR systems will roll out personal-device bans and automated query auditing over the next two to three quarters, following San Jose’s lead rather than waiting for their own incident.
- Flock Safety will likely publish guidance or a policy template for customer agencies on device restrictions and audit logging to get ahead of further reputational risk tied to customer misuse rather than product flaws.
- Watch for California lawmakers to reintroduce ALPR retention and audit legislation, an area where prior bills have stalled, using this case as a fresh example of what happens when audit logging alone isn’t paired with proactive review.
The bigger picture for surveillance technology accountability
This case sits at the intersection of two trends Tech Insider has covered repeatedly in 2026: the rapid expansion of always-on surveillance infrastructure in American cities, and a string of insider-misuse incidents where the failure point wasn’t the technology itself but who was allowed to touch it and under what conditions. Flock’s cameras did exactly what they were built to do: log a plate and make its location searchable. The failure was organizational, a policy that let an officer reach that searchable database from a personal phone with no case number attached to the query.
For city councils weighing new or renewed ALPR contracts, San Jose’s experience offers a cautionary checklist: device restrictions, mandatory case-linked query logging, and independent audit review need to be contract terms and department policy from day one, not fixes bolted on after a victim reports being tracked by her own alleged abuser’s cousin, a police officer with a badge and a login.
Frequently Asked Questions
What is Flock Safety and why does San Jose use it?
Flock Safety is a private company that supplies automated license plate reader cameras and cloud-based search tools to thousands of U.S. police departments, including San Jose, which has deployed close to 500 of the cameras citywide since 2022 to help recover stolen vehicles and locate wanted suspects.
Was the San Jose police officer criminally charged?
No. As of this reporting, neither the officer nor his cousin has been criminally charged. The case was referred to the Santa Clara County District Attorney’s office and to the California P.O.S.T. commission for a decertification review, which could end the officer’s ability to work in law enforcement anywhere in California.
How did the officer access the Flock database improperly?
According to ABC7 and NBC Bay Area, the officer used a personal phone to query the department’s Flock ALPR system and locate the vehicle of a woman who had accused his cousin of domestic violence, then shared that location information with his cousin.
What changes has San Jose Police made since the firing?
The department banned personal-device access to law enforcement databases starting the week of September 7, 2026, is testing automated auditing tools to flag lookups without a documented lawful purpose, and reminded officers of the disciplinary consequences for improper access.
Is San Jose’s ALPR program facing legal challenges?
Yes. The Institute for Justice filed a federal class-action lawsuit on April 15, 2026, on behalf of three San Jose residents, arguing the city’s roughly 500-camera network amounts to unconstitutional mass surveillance and asking a court to require deletion of captured plate data within 24 hours instead of the current 30-day retention period.
Is Flock Safety a defendant in the lawsuit against San Jose?
No. The Institute for Justice suit names the city of San Jose and its police department, not Flock Safety, since the legal challenge targets the city’s retention policy and use of the data rather than the camera vendor’s software.
Are other police departments having similar personal-device data misuse problems?
Yes. Florida’s DMV disclosed a comparable incident in 2026 involving an officer’s personal device and a leak affecting roughly 200,000 driver records, and reviews found similar device-access gaps at multiple state agencies, suggesting this is a broader policy failure rather than a one-off case.
What should other cities running ALPR networks learn from this case?
Security and privacy researchers point to three fixes: ban personal-device access to law enforcement databases, require every query to link to a documented case number, and route queries through automated auditing rather than relying solely on after-the-fact reviews triggered by victim complaints.
