Four weeks ago, if you asked what separated one plate reader vendor from another, the honest answers were camera count and price. As of this week, the honest answer is governance. Not because the industry got religion. Because the last 30 days made governance the thing that decides whether your program survives a council vote.
Here is the run of events, in order.
July 23: Salem, Massachusetts ended its Flock contract. Not because the cameras failed. The city said the vendor did not give it enough protection or local control over its own data, and it plans to replace the system with plate readers it controls locally. Read that carefully. An agency kept the capability and fired the governance model.
August 3: Savannah PD put six people on leave over possible misuse of its plate reader system and referred the cases to the Georgia Bureau of Investigation. Four were sworn officers. Two were civilian employees. If your audit program only covers people with badges, it covers part of your exposure.
August 5: a federal district judge ruled that cell tower dumps violate the Fourth Amendment, five weeks after the Supreme Court took down geofence warrants in Chatrie. Two rulings, one direction. Courts are getting comfortable saying that bulk collection is a search, and the lawyers challenging bulk plate retention are citing both.
August 13: Flock announced its overhaul. Default retention drops from 30 days to seven. Every search will need a case code. Audit assistance becomes mandatory by January 1. Accounts that show abnormal search behavior get locked out automatically pending review. I wrote last week about what those reason fields do and do not prove, so I will not repeat that here. The point for this piece is different: the largest vendor in the category just conceded that these controls are the product now.
August 18: the governor of Rhode Island called for a statewide pause on new plate reader installations and ordered a 60-day review to set uniform standards for privacy, retention, sharing, and local consultation. That is a state deciding that a patchwork of local policies is no longer acceptable.
August 20: the IACP published a model policy for plate readers. It got almost no attention. It should get yours, because when a reporter or a council member asks why your policy says what it says, pointing at the IACP model is a much better answer than pointing at the vendor's defaults.
Six events, 29 days. Any one of them is a news item. Together they are a change in what procurement means.
For most of my 21 years in law enforcement, technology contracts were scoped around capability. Coverage, uptime, integrations, price per camera. Governance was a policy binder somebody wrote after the purchase order, and everyone understood the binder was aspirational.
That order just flipped. The agencies losing their programs this month did not lose them over capability. Salem's cameras worked. Savannah's system worked well enough to catch its own users. The failures were governance failures, and the consequences ran through city councils and grand juries, not through the product.
So here is what I would put in the next contract, based only on what this month demonstrated. Retention you chose on purpose, not the default you inherited. Query-level audit logs the agency owns and can produce under public records law without vendor permission. Misuse detection that covers civilian users, because Savannah. A defined escalation path from anomaly to referral, decided before the first case instead of during it. And sharing agreements that name offenses, not agencies, so you can answer exactly who can search your data and for what.
None of that is exotic. Most of it is now either shipping as a product feature or sitting in the IACP model policy waiting to be copied. The only question is whether it gets written in before the signature or bolted on after the first headline.
One more thing worth saying plainly. Louisiana signed a 192.6 million dollar, ten-year, no-bid contract with a single vendor this month, covering radios, plate readers, body cameras, and in-car video. I am not going to argue the merits of that deal from the outside. I will say that a decade of lock-in signed the same month the governance ground shifted this much is a bet I would want a very good answer for.
If you run a center or sit on the buying side: what governance term do you now wish was in your current contract? I will be at the NRTCCA conference in Phoenix next week asking versions of that question all week.