Flock Safety's Refusal of a Personal Data Deletion Request and the Company's Response

A California resident asked Flock Safety to delete data related to themselves, their vehicle, and their family members, and to stop future collection.

The company's response was clear. Flock Safety described itself as a service provider and processor, stating that ownership and control of the data rests with the customer agency. Therefore, it advised that such requests should be directed not to Flock but to the agency customer operating the equipment.

The reply also included the following explanations.

• No data sales: Data is not sold or shared without customer instruction
• Scope of collection: Focused on vehicle images and exterior appearance information visible in public places, not names or addresses
• Retention period: Automatically deleted after 30 days by default
• Purpose of use: Security purposes such as public safety, incident response, and crime solving

The requester believes this interpretation does not align with the intent of the CCPA. Their argument is that since Flock Safety is in fact collecting and processing personally identifiable information (PII), it should comply with the deletion request.

Whether to pursue legal action has not yet been decided, and the possibility of retaining an attorney remains open.