This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
A Stow police officer used the Flock camera system and other law enforcement databases to illegally track and stalk a woman he had previously dated, leading to his suspension and a restraining order.
A Stow, Massachusetts, police officer allegedly used Flock Safety’s automated license plate reader system and other law-enforcement databases to obtain information about a former romantic partner and track her movements. The woman said she had fled an abusive relationship and later obtained a restraining order. An internal investigation found repeated searches without legitimate law-enforcement reasons, and the department ended its Flock contract.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
AI systems that memorize and leak sensitive personal data or infer private information about individuals without their consent. Unexpected or unauthorized sharing of data and information can compromise user expectation of privacy, assist identity theft, or cause loss of confidential intellectual property.
Also classified as
The victim was subjected to targeted harassment, stalking, and physical intimidation by the officer driving by her home.
The officer used the Flock camera system and other databases to obtain non-public sensitive location and personal data about a private individual without her consent.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The risk and subsequent harm were caused by the intentional decision of a human police officer to misuse a deployed AI database system for personal stalking.
Added categories peak at 2: Minor (Psychological Harm, Direct)
A local police officer in Stow, Massachusetts, abused his authority by using the Flock AI camera system and state law enforcement databases to stalk an ex-partner. While the incident represents a serious breach of privacy, civil rights, and public trust, its national security impact is minor, localized, and manageable under standard domestic legal and administrative procedures.
The Flock camera system and police databases were used as deterministic tools by the officer to query and retrieve location and personal data based on direct inputs like license plate numbers.
High Risk: The system involved is a law enforcement application (Flock camera tracking system), which is explicitly classified as high risk under the EU AI Act.
The Flock system was used to track the victim's location and movements by capturing and searching her license plate across the camera network.
The report provides clear, factual details regarding the officer's actions, the specific systems used (Flock, CJIS, CORI), the timeline of the investigation, and the direct impact on the victim. There is little to no ambiguity regarding the misuse of the technology.
None
Technology
Flock Camera Query System
The automated license plate reader database allowed targeted location searches.
Database Interoperability
Integration across Flock, CJIS, and CORI systems facilitated broad tracking.
Data Inputs
Automated License Plate Data
Real-time location data of citizens was captured and stored in the database.
Personal Identification Records
CJIS and CORI systems stored sensitive personal records accessible by queries.
Human Factors
Abuse of Police Authority
The officer intentionally used his database access to stalk a former partner.
Unauthorized Query Intention
Officer bypasses ethical boundaries to track victim's movements.
Process and Methods
Lack of Real-Time Query Validation
System did not require active case numbers or validation before running searches.
Inadequate Proactive Monitoring
The department did not proactively flag repeated searches of a specific civilian.
Management
Inadequate Access Control Oversight
Management failed to restrict access permissions based on active duty needs.
Delayed Detection of System Misuse
The abuse was only discovered after the victim checked her license plate history.
Regulatory Environment
Insufficient Privacy Safeguards
State and local regulations failed to restrict database access to active cases.
AI system involved
Identified by automated extraction; can differ from the alleged developers above.
