Memorandum
Background
Dur
ing the week of March 2, 2026, the Information Technology Department (ITD) conducted a review of the City’s Flock Safety system following concerns raised by community members and City Council regarding privacy and whether the system shares data with federal agencies, including Immigration and Customs Enforcement (ICE).
T
he purpose of the review was to confirm how the system is currently configured and determine whether any federal agencies have access to the City’s data.
Revi
ew
I
TD reviewed the administrative settings within the Flock Safety system, including agency sharing configurations, user access permissions, and available system logs. The review focused on identifying whether any federal agencies were listed as approved partners for data sharing and whether there was any indication of access to the City’s system by federal entities.
I
TD reviewed system access controls and data sharing settings and verified the following:
• Ac
tive user accounts and assigned roles are properly configured and logged. • Shared or generic accounts are not used.
• Role-based access controls limit user access to appropriate functions. • System logs capture user activity.
• Data sharing with external agencies follows California Civil Code Section 1798.90.5. • Data sharing with other agencies is manually authorized, rather than automatic.
I
TD also met with Flock Safety’s technical team to review the system configuration and discuss how data is stored and retained within the platform. Flock confirmed that data captured by the system is retained for 30 days, after which it is automatically deleted.
Date: 3/12/2026
To: Tim Kirby, City Manager
Daniel Pistor, Director of Public Safety
Kathleen Boutté Foster, Chief Information Officer
From: Wil Guitarte, IT Manager
Subject: ITD Review of City’s Flock Safety System Settings and Logs Attachment 2
Memorandum
Flock explained that the system uses distributed cloud infrastructure rather than storing data on a single device or hard drive. In traditional storage, data may exist on a single physical device, which could potentially be accessed or recovered if the device is retained. In contrast, the Flock system stores data on cloud infrastructure across multiple systems. Data is retained for 30 days, after which it is automatically deleted according to the system’s retention policy and can no longer be accessed through the Flock system.
F
indings
T
he review confirmed that the City’s Flock Safety system is not configured to share data with federal immigration enforcement agencies, including Immigration and Customs Enforcement (ICE). Federal immigration enforcement agencies do not appear in the system as authorized data-sharing partners.
D
uring the review, ITD identified one past instance of access involving a federal-related law enforcement agency: Loma Linda Healthcare System CA Veterans Affairs Police Department.
This agency is associated with the Veterans Affairs healthcare system in California and operates as a hospital police department responsible for security and law enforcement activities at VA medical facilities.
S
ystem logs indicate that this activity occurred in May 2025 and was flagged in the system as an investigation. This was a historical incident, and the agency is no longer listed as a sharing partner in the system. No additional activity from this agency was identified in the logs reviewed.
I
TD also reviewed available system logs and did not identify any access to the City’s Flock system by federal immigration enforcement agencies.
Co
nclusion
A
t the time of the review, the City’s Flock Safety system was not configured to share data with federal agencies, including ICE. The review identified one historical instance of activity involving a federal agency, the Loma Linda Healthcare System CA Veterans Affairs Police Department, which occurred in May 2025 and was flagged in the system as an investigation.
That agency is no longer configured as a sharing partner in the system.
Attachment 2