Understanding the Risks

The Risk

Federal agencies can gain access to locally collected surveillance data, including license plate reader records, through multiple channels, both direct vendor partnerships and indirect requests through local police partners, without the knowledge or consent of other participating departments.

What Happened

• In August 2025, Flock CEO Garrett Langley confirmed that Flock had run "limited pilots" directly with CBP and Homeland Security Investigations (HSI), giving federal agents direct access to its ALPR network.
• Separately, federal agencies accessed data through "side-door" requests — asking local police partners to run searches on their behalf. In Washington state alone, the University of Washington Center for Human Rights found 17–18 police departments had their Flock data searched by federal agencies.
• In Virginia, nearly 3,000 immigration-related searches were conducted on the statewide Flock network over a 12-month period.
• Flock paused the federal pilots in August 2025 and announced new "Federal" user category designations.
• The Illinois Secretary of State found Flock violated state law by allowing CBP this access.

Overland Park Relevance

OPPD uses Flock Safety LPRs and has stated it will "not share data absent a criminal nexus" with federal immigration authorities. However, Flock's national network architecture means OP data could be accessed federally without OPPD's direct knowledge or consent. This is especially relevant during the 2026 FIFA World Cup, when federal agency presence in the KC metro will be at its highest.

The Risk

Flock Safety's default contract language grants the company a license to share data for "investigative purposes" even when a local department restricts sharing.

What Happened

• The ACLU of Massachusetts discovered that Flock's standard contract contains language permitting data sharing that overrides local department preferences.
• 75% of Flock's law enforcement customers have reportedly enrolled in the national lookup system (a widely cited figure that has not been independently verified), making data accessible nationwide.

Overland Park Relevance

Without explicit contractual protections that override vendor defaults, OPPD's stated sharing limitations may not be legally enforceable against Flock's own data practices.

The Risk

Cloud-native surveillance vendors may use municipal data, including "anonymized" data, to train proprietary AI models, develop new products, or market to other agencies.

What Happened

This is a documented pattern across the tech industry with cloud-hosted municipal data. Axon's contract with OP includes "unlimited cloud storage," but the specific data rights and usage terms in the contract are not publicly documented. Multiple surveillance vendors have been found using municipal data for product development without explicit consent.

Overland Park Relevance

The $22.4M, 10-year Axon contract stores OP data on Axon's cloud infrastructure. Without explicit contractual prohibitions, the default in many vendor agreements permits use of "anonymized" data for improvement and development purposes.

The Risk

Long-term contracts with proprietary data formats make it prohibitively expensive or technically impossible to switch vendors, giving the vendor disproportionate leverage in contract negotiations.

What Happened

At least 23 jurisdictions have canceled or rejected Flock contracts (Austin, Denver, Santa Cruz, Cambridge, Flagstaff, and others as of January 2026). Cities that lacked data portability provisions faced significant complications extracting their data.

Overland Park Relevance

The Axon contract is a 10-year, $22.4M commitment consolidating body cameras, LPRs, drones, Fusus, and cloud storage into a single ecosystem. This creates substantial switching costs if data portability isn't contractually guaranteed.

The Risk

When a city directs a vendor to delete data, there is typically no mechanism to verify the vendor actually did it. Cloud infrastructure commonly retains "shadow backups," disaster recovery copies, and analytics archives that may persist for years after data is "deleted" from the user-facing interface.

What Happened

This is a structural gap in cloud-based surveillance contracts nationwide. A 2023 Georgetown Law Center on Privacy & Technology report found that most municipal surveillance contracts lack deletion verification provisions. In standard cloud architecture, "deletion" often means removal from an active index while underlying storage blocks remain until overwritten, which may never happen.

Overland Park Relevance

The RTIC operates on Axon's cloud infrastructure. The city's 10-year, $22.4 million contract includes "unlimited cloud storage." Without a proof-of-deletion protocol, the city has no way to verify that data reaching its retention limit is actually destroyed rather than simply hidden from the search interface.

The Risk

Officers use surveillance tools for personal purposes: stalking partners, tracking personal enemies, surveilling people outside any investigation.

What Happened

• Kechi, KS: Documented cases of officers using surveillance systems to stalk partners and harass personal enemies.
• Nationwide pattern: Internal affairs investigations across departments consistently find officers misusing database access for personal lookups.

Overland Park Relevance

This is a Kansas-specific documented risk. Without immutable audit logs and independent review, misuse goes undetected until someone complains.

The Risk

Officers can create local "hot lists" of license plates that trigger real-time alerts. Without oversight, plates of political rivals, estranged partners, protestors, or other non-criminal targets can be added.

What Happened

Flock systems allow NCIC integration for stolen vehicles and wanted persons, but also permit custom local lists with no standardized criteria for inclusion. No publicly available oversight mechanism governs who gets added to OP's local hot lists or for what reason.

Overland Park Relevance

OPPD's Flock LPRs include hot list functionality. No policy governing hot list criteria is publicly available.

The Risk

When a surveillance governance framework focuses only on system-level penalties (evidentiary exclusion, audit logging) without personal consequences for individual officers, it creates a risk calculus where the cost of violation is borne by the institution rather than the person who violated the rules.

What Happened

Documented cases of law enforcement officers using surveillance systems to track domestic partners, ex-spouses, and personal acquaintances have been reported across multiple departments. An Associated Press investigation found over 300 officers were fired or resigned over misuse of law enforcement databases from 2013–2023, but many more cases resulted in minimal consequences such as paid leave or reassignment.

Overland Park Relevance

The RTIC gives authorized users access to detailed movement data, video footage, and private camera feeds across the city. Without mandatory discipline provisions, an officer who uses the system to track a domestic partner, monitor a personal acquaintance, or conduct unauthorized searches faces only whatever consequence the department chooses to impose, which may be minimal.

The Risk

When businesses or homeowners integrate private cameras into the police network, everyone captured on those cameras is subject to police monitoring without consent. Tenants, neighbors, customers, and passersby have no opt-out.

What Happened

• Fusus Community Connect recruits private cameras into police networks. Camera owners consent; people recorded do not.
• If a landlord integrates apartment cameras via FususCORE, tenants are subject to police monitoring without consent, notification, or opt-out.
• FususCORE hardware costs $350–$7,300 plus $150/year. Business owners set permissions (24/7, panic-button only, etc.), but the people being recorded have no say.

Overland Park Relevance

OPPD's RTIC will integrate private business and residential camera feeds through Fusus Community Connect. The network's scope is currently unknown to the public.

The Risk

When uniformed officers request footage from businesses or residents, many feel compelled to comply, effectively bypassing warrant requirements through social pressure rather than legal process.

What Happened

This is a documented pattern across jurisdictions. The power dynamic between uniformed officers and private citizens creates de facto compulsion even when requests are technically voluntary. Some departments participate in programs (like Amazon's Ring partnerships) that automate area-wide footage requests to every camera owner in a radius.

Overland Park Relevance

Without logging and case-based requirements, the line between a voluntary request and a de facto demand is invisible.

The Risk

Even without facial recognition, AI-powered analytics can track individuals across camera networks using physical attributes (clothing, body type, accessories), creating person-level surveillance without identifying a face.

What Happened

• Fusus includes "Attribute Search" capability: analysts can search "red truck," "person wearing blue hoodie," or "male with backpack" across all connected cameras, tracking movements without knowing identity.
• SmartCORE converts ordinary cameras into license plate readers.
• Object detection identifies unattended items and weapons.

Overland Park Relevance

These are capabilities built into the Fusus platform that OPPD is deploying. The RTIC presentation does not address governance of these analytical features.

The Risk

If the training data used to build AI analytics contains bias, "objective" automated alerts can disproportionately target minority populations, laundering bias through the appearance of neutrality.

What Happened

• OPPD's SOP 1170 (Non-Biased Policing) prohibits racial profiling but does not address algorithmic bias.
• Elizabeth, NJ uses Fusus with Geolitica (formerly PredPol) for AI-powered "virtual patrols" in algorithmically-predicted crime areas, a pattern criticized for reinforcing existing enforcement disparities.

Overland Park Relevance

Fusus integrates with predictive policing tools. If OPPD activates these features or similar analytics, there is no current policy governing algorithmic bias.

The Risk

Modern surveillance platforms don't just store video; they generate searchable text descriptions, attribute tags, and movement indexes from that video. If the video is deleted on schedule but this "derived data" is retained, the system can still reconstruct a person's movements indefinitely from the AI-generated index alone.

What Happened

This is an architectural pattern common to AI-enabled surveillance platforms. Fusus and similar systems convert video into searchable metadata (e.g., "Male, blue shirt, backpack, 12:04 PM at intersection of 95th and Metcalf"). Industry-standard data retention policies typically address raw footage but are silent on derived analytics. The EFF and Surveillance Technology Oversight Project have documented this gap across multiple platforms.

Overland Park Relevance

The Axon Fusus platform powering the RTIC generates exactly this kind of derived data. Without an explicit requirement that derived data follows the same deletion schedule as source data, the 30-day LPR and 90-day video retention limits are effectively meaningless; the searchable index of your movements would persist indefinitely.

The Risk

Vendors may include facial recognition capability in their platforms while publicly denying it, or the capability may be available through software updates or third-party integrations.

What Happened

• Fusus officially claims no facial recognition capability. However, a Fusus reseller advertised "advanced analytics, such as facial recognition."
• Columbia, MO's police chief stated the software has the capability but "wouldn't be used."
• Third-party facial recognition can integrate through video export from any camera system.
• Columbia, MO's City Council rejected Fusus 4-3 in 2022 after community opposition centered partly on this issue.

Overland Park Relevance

OPPD has stated it does not use facial recognition. But the Fusus platform may include or enable the capability. Without a binding prohibition, "we don't use it" can change with a software update.

The Risk

The surveillance network's scope expands through procurement decisions, vendor updates, and partnership agreements that never come before the public or elected officials.

What Happened

• Flock defaults to 30-day data retention, but agencies can negotiate longer periods. San Jose retains Flock data for one full year.
• The Axon contract includes "unlimited cloud storage" with no stated retention limits.
• Data broker integrations (LexisNexis, Babel Street) can expand the RTIC's reach well beyond camera footage without any new authorization.
• Officers can download images from Flock with "self-certifying affidavits," with no independent verification.

Overland Park Relevance

The $22.4M Axon contract consolidates body cameras, LPRs, drones, Fusus, and cloud storage. New capabilities can be activated through software updates without Council awareness.

The Risk

Private corporate funding for surveillance infrastructure can create implicit obligations to prioritize the funder's locations or interests.

What Happened

• QuikTrip provided a $500,000 grant specifically earmarked for RTIC construction.
• Detroit's "Project Green Light" is a documented model where paying businesses receive prioritized surveillance and response.

Overland Park Relevance

The QuikTrip grant raises questions about whether acceptance creates implicit or explicit obligation to prioritize QT locations in RTIC monitoring. The full grant agreement terms are not publicly available.

The Risk

Courts are actively grappling with whether comprehensive LPR networks constitute a "search" under the Fourth Amendment. The legal landscape is unsettled and evolving, which itself creates exposure to litigation, potential liability, and risk that evidence could be challenged or ruled inadmissible.

What Happened

• Carpenter v. United States (2018): Supreme Court held that accessing seven days of historical cell-site location data constitutes a Fourth Amendment search requiring a warrant, though it left open whether shorter periods might also qualify. The ruling was deliberately narrow, but its reasoning about the "whole of a person's movements" has broad implications for surveillance technologies.
• Norfolk, Virginia: In February 2025, a federal judge denied the City of Norfolk's motion to dismiss a Fourth Amendment challenge to its 176 Flock cameras, finding the system "notably similar" to surveillance addressed in Carpenter. However, on January 27, 2026, U.S. District Judge Mark S. Davis granted summary judgment in favor of the city, ruling that the cameras, averaging 2.5 to 3.5 miles apart with 45–50 minutes between captures, produced only scattered data points and did not capture the "whole of a person's movements." Judge Davis explicitly warned that "the constitutional balancing could conceivably tip the other way" as camera networks expand. The Institute for Justice, representing the plaintiffs, has announced it will appeal, making this the first federal ALPR case to reach appellate review after summary judgment.
• Commonwealth v. McCarthy (Massachusetts, 2020): First appellate court to address ALPRs directly; adopted "mosaic theory" holding widespread ALPR use can constitute a search.
• San Jose, California: ACLU and EFF sued over 500 Flock cameras and 261,711 warrantless searches.

Overland Park Relevance

OPPD's integrated system (Flock LPRs, Fusus aggregation, drone feeds, private cameras) creates exactly the kind of comprehensive surveillance mosaic that courts are finding constitutionally suspect. Proactive governance reduces litigation risk.

The Risk

Drones flying lower and more frequently than helicopters can intrude on "curtilage" (the private area immediately surrounding a home) and thermal-equipped drones can reveal interior activities.

What Happened

• Long Lake Township v. Maxon (Michigan, 2021): Court held municipal drone surveillance at under 400 feet violated the Fourth Amendment, finding drones "intrinsically more targeted" than aircraft and capable of navigating "into intimate spaces."
• 18 states require warrants for drone surveillance. Kansas does not.
• DFR (Drone as First Responder) programs create near-constant aerial presence.

Overland Park Relevance

OP is joining a regional DFR initiative with Lenexa, Olathe, and Prairie Village. Drones will launch remotely from rooftop "nests" and fly autonomously to scenes. No drone deployment policy is publicly available.

The Risk

An evidentiary exclusion that only applies to municipal court proceedings has limited practical impact. Most serious crimes, such as felonies including murder, assault, drug trafficking, are prosecuted in state district court, where a city ordinance has no authority to exclude evidence.

What Happened

This is a structural limitation of municipal governance, not a failure of any specific city's policy. Oakland, CA addressed this gap by including a private right of action in their surveillance oversight ordinance, giving residents an enforcement mechanism that operates independently of any criminal proceeding.

Overland Park Relevance

Overland Park Municipal Court handles misdemeanors and traffic offenses. Felony cases are prosecuted in Johnson County District Court. If RTIC data is collected in violation of the governance framework but used to prosecute a felony, the evidentiary exclusion in Section 22 would not apply. Without an additional enforcement mechanism, the framework lacks teeth for the most serious potential violations.

The Risk

Vendors and departments may overstate the technology's effectiveness to justify continued investment, without independent verification.

What Happened

• Flock Safety claimed an 80% burglary reduction in San Marino. Forbes journalist Cyrus Farivar challenged this, reporting that burglaries actually slightly increased.
• Miami RTCC (2025): Evaluation found higher case clearance but "no significant improvement in the odds of conviction."
• RAND Chicago Study: Found 3–17% crime reductions depending on type; 5% improvement solving violent crimes, 12% for property crimes. Meaningful but modest.

Overland Park Relevance

The $22.4M investment deserves rigorous, independent measurement of outcomes, not vendor-supplied marketing metrics.

The Risk

If investigation data is retained for "the duration of the case plus one year" with no maximum, data can be kept indefinitely by flagging it to open or cold cases. A generic "suspicious activity" report could preserve thousands of hours of footage with no expiration.

What Happened

This is a documented pattern in jurisdictions with case-based retention policies but no retention ceiling. The Brennan Center for Justice has noted that "case duration" retention without a cap effectively creates indefinite storage for any data a department wants to keep, since cases can remain technically "open" for decades.

Overland Park Relevance

The RTIC will generate large volumes of data daily. Without a retention ceiling, the volume of "flagged" data could grow indefinitely, creating an ever-expanding archive of resident movements and activities attached to investigations that may never be resolved.