Sunnyvale tightens license-plate surveillance rules

Sunnyvale’s fight over license-plate cameras is really a fight over who gets trusted with surveillance tools. The city already has the cameras. The argument now is about how tightly it boxes them in. On April 21, Sunnyvale’s Department of Public Safety brought new guardrails to the City Council, and the council unanimously signed off after weeks of resident pushback over Flock Safety, the vendor behind the system. ### What did the council actually do? It did not shut the system down. It kept Sunnyvale’s 20 automatic license plate reader cameras in place, but paired that with a more explicit set of operating limits. The approved safeguards include 30-day data retention, a cap on who can use the system, a requirement that officers document an investigative reason before searching, audit logs of access, and limits on sharing data with approved law-enforcement partners. The current Flock Safety contract runs through June 2027. ### Why are people upset about Flock? Because this is bigger than one city’s camera poles. Residents and civil-liberties critics argued that Flock’s broader network can turn local crime tools into something closer to regional tracking infrastructure. At the April meeting, public commenters said the company’s practices were too intrusive and too hard to trust. Several Sunnyvale councilmembers basically agreed on the trust problem — but drew a line between distrusting the vendor and trusting city staff to follow local rules. ### Why didn’t Sunnyvale just switch vendors? Turns out that was part of the trap. Public Safety Chief Daniel Pistor told the council the system’s value comes partly from the fact that neighboring jurisdictions use the same network. In plain English, these tools work better when cities are plugged into the same map. Pistor also said Flock is effectively the go-to provider here, which left Sunnyvale with no obvious like-for-like alternative if it wanted the same cross-jurisdiction benefit. ### What extra limits got added? Vice Mayor Richard Mehlinger pushed for a stricter compromise, and that matters because it shows where the council’s discomfort landed. He proposed avoiding any expansion in the number of cameras, folding IT auditing into the city’s military-equipment review process, giving the council access to monthly internal-use audits, requiring staff to disable the system and return to council if there is any sign federal agencies are accessing the data, coordinating with the county on an ALPR initiative, and having IT actively watch for security vulnerabilities. ### What’s the case for keeping the cameras? City officials and some local business owners say the system is already helping. Sunnyvale kept the cameras after a recent audit found no evidence that the 20-camera network had shared data with federal immigration authorities. Officials also tied the tool to responses to violent robberies and organized retail theft, especially attacks on jewelry stores. One store owner said police warned him that multiple suspect vehicles were headed his way — a heads-up he said would not have happened without the ALPR system. ### Why does the 30-day rule matter? Because retention is where a crime tool can start turning into a movement database. A short deletion window does not erase the privacy issue, but it does limit how far back anyone can go to reconstruct where a car has been. Sunnyvale’s policy keeps data for 30 days unless there is an active investigation, which is the council’s main answer to fears of open-ended tracking. ### Is this fight over now? Probably not. Mehlinger said he was “not entirely happy” and called the package the most reasonable compromise available. That sounds like a city trying to contain a technology it still feels uneasy about. The cameras stay. The rules get tighter. But the underlying question — whether local safeguards are enough when the vendor sits inside a much larger surveillance network — is still very much alive.