Plate Readers Are Becoming School Residency Tools

EFF’s ALPR audit-log analysis shows police using Flock Safety data for school residency checks and other low-level matters, not only serious crime.

2026-05-27 GIGATAP Team #privacy
#privacy#surveillance#ALPR

Source: EFF Deeplinks — https://www.eff.org/deeplinks/2026/05/more-license-plate-reader-mission-creep-school-residency-verification-background

Automated license plate readers were sold as tools for serious crime. EFF’s new analysis points to a broader use pattern: police are searching Flock Safety ALPR data for school residency checks, background checks, noise complaints, and other low-level purposes that sit far from the public sales pitch.

That distinction matters. A plate reader does not only identify a car. It creates a time-stamped location record tied to a vehicle, then places that record inside a searchable network. Without a warrant requirement, the database becomes a practical map of where people have been — not just suspects, but parents, students, workers, worshippers, patients, and anyone else who drives past a camera.

What EFF says it found#

EFF analyzed millions of searches of Flock Safety automated license plate reader data by police agencies. Its core finding is not a single sensational abuse. It is a usage pattern: agencies appear to be treating ALPR search access as a general investigative convenience, not as a narrowly controlled tool for specific criminal cases.

Flock Safety systems are typically mounted near roads and intersections. They capture passing vehicles, including license plate, make, model, color, distinguishing characteristics, and the date, time, and location of the sighting. Police agencies lease or buy these systems, then can search captured records.

The company and law enforcement agencies often emphasize high-stakes cases: stolen cars, violent crime, fugitives, missing persons. EFF’s point is that the audit logs show another layer. ALPR searches are also being used for ordinary administrative or low-level matters, including school residency verification and complaints about loud music. EFF also notes a case where a motorcyclist was targeted for holding a cell phone while riding.

The policy problem is simple. If agencies can search large location databases without a warrant or firm use limits, the practical boundary becomes whatever an officer or department considers useful.

School residency checks are a sharp example#

The clearest example in EFF’s article is school residency verification.

Some U.S. school systems investigate whether a child’s parent or guardian actually lives inside the district. Districts have an incentive to police enrollment, especially in places where school access is tied to address. The privacy question is whether that administrative goal justifies querying a police location database.

EFF highlights Buford City Schools in Georgia, a district serving about 6,000 students. Between January 2025 and March 2026, school police ran more than 375 ALPR searches where the listed reason was school residency verification, or “RV.” According to EFF, that made up more than half of all ALPR searches in that period. In the first three months of 2026, three-quarters of all searches were residency-related.

Buford officials defended the practice. A spokesperson told Appen Media, in an email shared with EFF, that the district faces “ongoing challenges with residency fraud” because it is “highly sought-after,” and that Flock Safety is one tool used to verify residency and protect the district for families who live there.

That defense explains the motive. It does not solve the proportionality problem.

A residency dispute asks one narrow question: does a family live inside the district? An ALPR search may expose far more. It can reveal patterns around medical visits, religious attendance, late-night travel, work routines, family visits, vacations, and other sensitive movements. In some Buford cases, EFF says officers ran searches across more than 5,800 different networks nationwide. That is not a local address check in any ordinary sense.

The network effect changes the surveillance scale#

ALPR systems become more powerful when agencies share access. EFF says most agencies choose broad sharing, often through a nationwide pool. That means a single local agency’s cameras and search access may be tied into a much larger location-search network.

This is why “mission creep” is not just a rhetorical complaint. A tool placed at intersections for one purpose can become part of a national query system for another. The larger the shared network, the less meaningful the original local justification becomes.

A city may approve cameras on the understanding that they help find stolen cars. Later, those records can be searched for school residency checks, employment screening, or minor complaints, depending on agency policy and platform access. The same infrastructure serves all of those purposes unless law or policy blocks them.

Audit logs are therefore important. They show not only whether the system works in dramatic cases, but how it is actually used day to day. EFF’s argument is that the mundane searches are the warning sign. The abuse risk is not limited to a rogue official targeting a political enemy or an ex-partner. The deeper risk is normalization: sensitive location searches becoming routine paperwork.

Other agencies appear in the logs#

Buford was the most prominent school-residency example in EFF’s writeup, but not the only one.

EFF says the Delhi Township Police Department in Ohio ran 35 searches related to students in five schools during a three-month period in spring 2025. The department defended the practice by pointing to warnings given to parents that false residency statements may be a felony.

After EFF contacted the department, Delhi Township Police conducted a brief review and said the searches were not done to verify residency at submission, but to investigate cases where officials believed the form had been filled out falsely. That is a narrower claim than blanket verification, but it still leaves key facts unanswered. EFF says the department did not specify what evidence was required before an ALPR query, nor how many investigations were ultimately justified.

The department did say it would change how these queries are documented in Flock and internally to improve accountability and avoid confusion.

EFF also names Cortland Police Department in Ohio and Lincoln Police Department in Alabama as agencies that ran school residency searches. It notes that several agencies used terms like “residency,” “residency investigation,” or “residency verification,” though those labels may refer to other public-service contexts and should not automatically be read as school-related.

That caveat matters. Search-reason fields are useful evidence, but they are not always complete explanations. They can be vague, abbreviated, inconsistent, or written to satisfy a logging requirement rather than to create a reliable public record. Still, the pattern is enough to raise governance questions.

What not to overclaim#

EFF’s article does not prove that every listed search was unlawful. It does not show that every agency used ALPR data without any internal approval. It also does not resolve whether specific school residency investigations involved prior suspicion, a formal referral, or a documented fraud allegation.

The stronger claim is narrower and better supported: absent a warrant requirement and strict use limits, ALPR databases are being used beyond serious criminal investigations. The examples are not edge cases in a theoretical debate. They are audit-log entries tied to real agencies and ordinary administrative problems.

That should shift the burden. Agencies that deploy ALPR systems should not be allowed to rely only on worst-case crime examples when seeking public acceptance. They should disclose common uses, sharing scope, retention rules, query standards, and audit outcomes.

What communities should ask before accepting ALPR expansion#

The practical questions are not complicated.

  • Is a warrant required before searching historical ALPR records?
  • If not, what level of suspicion is required?
  • Are school officials, school police, or non-criminal investigators allowed to request searches?
  • Can searches run across outside networks, including nationwide pools?
  • How long is plate data retained?
  • Are audit logs public, independently reviewed, or only checked internally?
  • What happens when an officer enters a vague reason such as “residency”?
  • Are low-level complaints, civil matters, or employment background checks prohibited?

The answer to those questions decides whether ALPR is a targeted investigative tool or a general location database with police branding.

EFF’s report is useful because it focuses on the boring uses. That is where surveillance policy often becomes real. Not in the press release about a violent case, but in the ordinary query made because a plate search is easy, available, and unlikely to be challenged.