Beyond Alpharetta: How a Default Setting Quietly Built a National Surveillance Network

The revelations about Alpharetta's expansive data-sharing practices are likely to intensify public scrutiny on the default settings and data governance policies of surveillance technology providers like Flock Safety. Expect increased calls for greater transparency from local municipalities regarding who has access to their data and under what circumstances. It is also probable that privacy advocates and civil liberties organizations will push for new legislation or local ordinances to regulate how such data is collected, stored, and shared, moving beyond the current patchwork of policies.

Alpharetta, Georgia, is a relatively small suburb north of Atlanta, home to approximately 67,000 residents and served by about 120 police officers. Despite its size, the city has become a central node in a vast surveillance network, primarily through its use of Flock Safety's automated license plate recognition (ALPR) cameras. These cameras capture images of license plates, which are then stored and can be searched by authorized users.

What makes Alpharetta's situation particularly notable is the sheer scale of its data sharing. According to a WIRED public records analysis published on August 28, Alpharetta shares its camera data with over 2,000 distinct organizations. These are not just neighboring police departments; the list includes entities as diverse as federal agencies, university campuses, airport authorities, and specialized units like a Medicare fraud investigation team in Illinois and Florida's Fish and Wildlife Commission.

Crucially, this wide-ranging access is not the result of individual, explicit agreements with each of these 2,000+ entities. Instead, it is largely attributed to a default setting within the Flock Safety system that allows police departments to automatically approve data sharing requests from any agency within a 500-mile radius. This 'opt-out' rather than 'opt-in' approach has allowed the network to proliferate rapidly. Since June 2025, the number of entities receiving data from Alpharetta police has grown by roughly 42 percent, while the number of entities sending data to Alpharetta has seen an even larger surge, increasing by about 125 percent, now totaling over 1,300 entities.

The case of Alpharetta is not just about one suburb's surveillance practices; it highlights a fundamental tension between public safety goals and individual privacy in the digital age. When a relatively small local police department becomes a data hub for thousands of organizations, it creates a national-scale surveillance infrastructure that operates with minimal public transparency and potentially limited accountability.

For citizens, this means their movements, captured by license plate readers, can be tracked and compiled by an untold number of agencies, often without any suspicion of wrongdoing. The presence of a Medicare fraud unit or a fish and wildlife commission in this network raises questions about the scope creep of surveillance, where data collected for one purpose (e.g., local crime fighting) can be repurposed for entirely different, unrelated investigations.

This broad, default-driven data sharing also presents significant institutional challenges. It creates a complex web of data access that is difficult for local officials to fully comprehend or control, and even harder for the public to monitor. The lack of granular oversight for each data-sharing agreement means that the potential for misuse, data breaches, or the creation of comprehensive personal movement histories without judicial review becomes a much more tangible concern. The story of Alpharetta serves as a stark illustration of how technical defaults can quietly shape public policy and civil liberties on a grand scale.