Flock Cameras in Georgia: Privacy Laws, Access, and Your Rights

Flock cameras in Georgia are automated license plate readers that photograph every vehicle passing them, record the plate number along with the date, time, GPS location, and details about the car itself, and hold that information for up to 30 months. Georgia law lets police collect and store this data, keeps it out of public records requests, and restricts access to law enforcement investigations, with criminal penalties for anyone who looks at it for other reasons. Whether the cameras belong to a city police department or a homeowners association at your subdivision entrance changes which of those rules actually apply.

What the Cameras Record About You

Every vehicle that passes a Flock camera is captured, whether or not it has anything to do with an investigation. The system is passive and indiscriminate by design: it records everything and lets investigators search later.

Georgia’s statute defines the captured data broadly, covering the GPS coordinates, date and time, photograph, license plate number, and any other information derived from the system.¹ That last piece matters, because Flock’s cameras do more than read plates. The software uses machine learning to identify a vehicle’s make, model, color, and distinguishing features like roof racks, trailer hitches, or bumper stickers, which the company markets as a “Vehicle Fingerprint.” An investigator searching for a dark blue pickup with a specific bed cover can query by those traits alone, without any plate number.

The cameras themselves are easy to miss. They’re small, solar-powered units on poles at neighborhood entrances, near schools, or along major roads. They don’t flash. Georgia has no legal requirement that drivers be notified they’re being scanned, and there’s no opt-out.

How Long the Data Is Kept

Captured plate data must be destroyed no later than 30 months after it was collected.¹ Two and a half years is a long window. A plate read from a Tuesday morning commute can sit in the database until roughly two and a half years later before anyone is required to purge it.

Two exceptions extend that timeline. Data tied to a toll violation can be kept longer, and data connected to an active law enforcement investigation is exempt from destruction until the investigation closes.¹

Agencies are permitted to contract with private companies to hold the data on their behalf. The contractor is bound by the agency’s policies and is subject to the same criminal penalties for misuse.¹ In practice, Flock stores everything in its cloud infrastructure, so the retention clock and access controls run through a private company’s servers rather than the police department’s.

Who Can Access the Data

Access is limited to a “law enforcement purpose,” which O.C.G.A. § 35-1-22 defines as the investigation of an offense or activity initiated by a law enforcement agency.¹ That definition is broad. It covers investigations into stolen vehicles, active warrants, and missing-person alerts, but the statute doesn’t list uses individually. Any investigation qualifies as long as a law enforcement agency initiates it.

The definition of “law enforcement agency” is equally wide, reaching state, federal, local, public transit, school, college, and university agencies responsible for crime prevention, code enforcement, or enforcing traffic, toll, regulatory, or controlled substance laws.¹ Agencies are also explicitly allowed to exchange or share data with one another for law enforcement purposes. Flock’s system makes this seamless: a local officer can run a networked search that queries data from thousands of agencies and tens of thousands of cameras nationwide.

That networked access has generated controversy. Reporting from 2025 documented that police departments in Doraville, Cartersville, Cobb County, Sandy Springs, Banks County, and other Georgia jurisdictions ran Flock searches with reasons noted as “ICE,” “HSI,” or “immigration.” Banks County alone conducted over 100 such searches in the months after January 2025.² Whether immigration enforcement fits Georgia’s “law enforcement purpose” is a question the statute doesn’t directly answer. Illinois enacted legislation in 2023 prohibiting ALPR data sharing for immigration enforcement, and Denver’s city council voted against expanding its Flock contract over similar concerns. Georgia has no comparable restriction.

You Cannot Look Up Your Own Records

Georgia’s Open Records Act normally lets residents inspect government records, but the ALPR statute creates an explicit exemption. Captured plate data collected by a law enforcement agency is not subject to public disclosure under the Open Records Act.¹ You cannot file a records request to find out whether your plate was scanned, how often, or where.

The exemption protects individuals from someone pulling their movements through a records request, but it also blocks residents, journalists, and civil liberties groups from checking how the system is being used or whether access policies are being followed.

Cameras at Your HOA Entrance Are a Different Matter

Many of the Flock cameras in Georgia sit on private property, particularly at neighborhood entrances managed by homeowners associations. HOA boards typically fund them through dues or special assessments at roughly $2,500 per camera per year, plus a one-time installation fee.

Here’s what most residents don’t realize: O.C.G.A. § 35-1-22 governs law enforcement agencies, not private entities. Its retention limits, access restrictions, and criminal penalties bind police departments and the contractors holding data on their behalf. When an HOA runs cameras independently, without a formal law enforcement partnership, the statute’s protections don’t clearly extend to that data, and no separate Georgia statute specifically regulates private ALPR use.

In practice, many HOAs close the gap by entering partnerships with local police, in which the HOA pays for the hardware and subscription while the police department gets access to footage and search tools. Flock has actively promoted this model as a way for law enforcement to reach into gated areas patrol cars rarely enter.³ Data accessed through a formal partnership falls under the statute. Data the HOA views on its own occupies a gray area.

If You’re Stopped Because of a Misread

Flock’s own policy acknowledges that plate translations “may be incomplete or inaccurate,” though the company describes these errors as “infrequent.” The system filters out low-confidence reads and flags false positives to refine its algorithms. Flock formally recommends that users “confirm the computer translation prior to taking any action based on an LPR alert or search.”⁴

That recommendation matters because officers in the field don’t always follow it. A 2020 incident in Aurora, Colorado, in which police detained a family at gunpoint after an ALPR incorrectly flagged their vehicle as stolen, ended in a civil rights settlement in 2024.⁵ The same technology is in use across Georgia.

If you’re stopped based on an ALPR hit you believe was wrong, comply with the officer’s instructions in the moment and document everything afterward: the time, the location, what the officers said, and whether they confirmed the plate manually before or after the stop. A wrongful detention based on an unverified hit can support a civil rights claim, especially where the department’s own written policy required manual confirmation the officer skipped. Every agency using ALPRs in Georgia is required to maintain written policies for use and operation, including training for officers who access the data.¹

Penalties When the Rules Are Broken

Anyone who knowingly obtains or attempts to obtain ALPR data under false pretenses, or for any purpose other than a law enforcement purpose, commits a misdemeanor of a high and aggravated nature for each offense.¹ That classification carries a maximum fine of $5,000 and up to 12 months in jail, or both.⁶

The “each offense” language means a person running multiple unauthorized searches could face stacked charges, one for every query. The penalty reaches anyone who accesses the data outside a legitimate investigation, whether a sworn officer, a civilian employee, a contractor, or an outsider.

Constitutional Questions Still Unsettled

No federal appellate court has definitively decided whether querying an ALPR database is a Fourth Amendment search.⁷ Federal trial courts and some state courts have generally allowed ALPR use while acknowledging that warrantless surveillance could cross the line in certain circumstances.

The U.S. Supreme Court’s 2018 decision in Carpenter v. United States held that acquiring 127 days of cell-site location records was a search requiring a warrant, because long-term location tracking provides an intimate window into a person’s life. ALPR data creates a similar kind of record: timestamped location points that, aggregated over 30 months, can reveal patterns of movement, associations, and habits. Recent lower court decisions have gone both ways on whether that reasoning applies to plate readers, and Georgia’s 30-month retention window is long enough that a challenge grounded in Carpenter remains plausible.

1
Justia. Georgia Code 35-1-22 – Prohibition on Law Enforcement Retaining License Plate Data Obtained From Automated License Plate Recognition Systems; Limited Use of Data; Public Disclosure Prohibited
2
Atlanta Press Collective. Metro Atlanta Police Agencies Searching National Database for ICE
3
The Intercept. License Plate Surveillance, Courtesy of Your Homeowners Association
4
Flock Safety. License Plate Reader Policy
5
Electronic Frontier Foundation. The Human Toll of ALPR Errors
6
Justia. Georgia Code 17-10-4 – Punishment for Misdemeanors of a High and Aggravated Nature
7
Congressional Research Service. Automated License Plate Readers: Background and Legal Issues