Council keeps ALPR program but orders stronger audits, immediate disablement if unauthorized federal access suspected

The Sunnyvale City Council voted April 21 to keep the city’s fixed automated license‑plate reader (ALPR) program in place, but added tightened oversight after a contentious public hearing that drew both support and sharp criticism for the vendor Flock Safety.

Chief of Public Safety Dan Pistor and IT Director Kathleen Budet Foster reviewed program operation and security. Staff described the system — 20 fixed roadside readers linked to a cloud service — and said it records license plates, date/time and vehicle characteristics (make/model/body type) but not driver faces or personally identifying DMV data. Staff emphasized safeguards baked into Sunnyvale’s implementation: a 30‑day automatic data retention limit (except for evidence holds), logged and auditable search activity, case‑justification requirements for searches, limited user permissions, and written interagency data‑sharing procedures. The chief presented operational results: more than 20,000 system alerts since October 2024, dozens of investigative leads and arrests, and use in cases that included a homicide and a string of violent jewelry‑store robberies.

Public testimony split sharply. Business owners, community members and Sheriff’s‑area police testified that ALPRs produced timely leads and prevented or solved violent incidents; multiple Sunnyvale public safety officers described cases where ALPR alerts materially shortened searches and supported arrests. Privacy advocates, civil‑liberties groups and cybersecurity researchers urged termination of the contract. Opponents cited reported incidents elsewhere — including out‑of‑state searches, federal agency access to ALPR data in other jurisdictions, and security vulnerabilities noted in national vulnerability databases — and said the vendor’s prior conduct had undermined trust.

After deliberation the council adopted staff’s recommendation with additions: conduct an annual technical audit by IT and publish an annual report to council; require monthly DPS internal usage audits; require staff to immediately disable sharing and bring system status to council if there is suspected unauthorized external (including federal) access; require no new camera installations without a separate budget appropriation; and ask staff to coordinate regionally with the county and chiefs on future ALPR strategy. The motion passed unanimously. Staff said the Flock contract runs through July 19, 2027 and that the city will continue to monitor state legislation and vendor developments.