CITY AND COUNTY OF SAN FRANCISCO
POLICE DEPARTMENT
HEADQUARTERS
1245 3RD Street
San Francisco, California 94158
DANIEL LURIE DERRICK J. LEW
MAYOR CHIEF OF POLICE
August 5, 2026
Via GovQA portal
RE: Public Records Request, dated July 11, 2026
Reference # P264292-071126
Dear Anonymous,
The San Francisco Police Department (SFPD) received your Public Records Act request, dated July
11, 2026.
You requested, “Dear Custodian of Records:
Under the California Public Records Act (Gov. Code sections 7920.000 et seq.) and the San
Francisco Sunshine Ordinance (S.F. Admin. Code sections 67.1 et seq.), I request the following
records. Where a record exists in electronic form, I request it in that electronic form (native
format, CSV, or searchable PDF) delivered by email.
CONTEXT (for clarity, not a limitation): In June 2026, SFPD publicly disclosed that a routine
audit had found its Flock Safety Automated License Plate Reader (ALPR) data was improperly
accessed on behalf of out-of-state and federal agencies. Per SFPD’s public statements, the
Northern California Regional Intelligence Center (NCRIC) had granted access to the Western States
Information Network (WSIN), whose analysts ran approximately 299 improper inquiries over
roughly a year, and those inquiries simultaneously queried the ALPR databases of between 531 and
763 other law enforcement agencies. This request seeks the underlying audit and the identities of the
agencies whose data was queried.
RECORDS REQUESTED
-
The audit, report, or analysis (including any spreadsheet, log, or presentation) in which SFPD
identified the improper access of its ALPR/Flock data via NCRIC and WSIN, including its
findings, methodology, date range, and the count of improper inquiries.
-
Records sufficient to identify the law enforcement agencies whose ALPR databases were queried
in the improper inquiries described in that audit – i.e., the “531 to 763 other law
enforcement agencies” referenced in SFPD’s public statements – including any list, roster, or
log naming those agencies.
-
Records sufficient to show whether the Benicia Police Department’s ALPR cameras or data were
among those queried in the improper inquiries, including any audit-log entries referencing
Benicia.
-
The audit-log data for the improper inquiries, showing for each: the date/time, the searching
P A G E |2
user or organization (e.g., WSIN), the requesting or beneficiary agency (including any
out-of-state or federal agency), and the stated reason or case reference, with plate/personal
data redacted as required but non-exempt fields produced.
-
Records reflecting SFPD’s authorization or agreement granting NCRIC access to SFPD’s
Flock/ALPR network, and any records reflecting NCRIC’s onward grant of access to WSIN or other
entities.
-
Communications between SFPD and any of the following concerning the improper access, its
discovery, or its remediation, from January 1, 2025 to the present: NCRIC; WSIN; Flock Safety;
and the California Department of Justice / Office of the Attorney General.
-
Any notification SFPD sent to partner or affected agencies (including agencies whose data was
queried) regarding the improper access, and any records reflecting the decision to disable
NCRIC’s and WSIN’s access.
REQUEST FOR EXPEDITED / IMMEDIATE DISCLOSURE
To the extent items 1 and 2 are already-compiled records (the audit and any agency list), I
request them as an Immediate Disclosure Request under S.F. Admin. Code section 67.25, which calls
for production by the close of the next business day for records that are readily available.
CLARIFICATIONS AND REQUESTS
-
Rolling production: Please produce responsive records on a rolling basis rather than waiting to complete the entire request; the audit (item 1) and the agency list (item 2) are the priority.
-
Format: Please provide log and list data in machine-readable form (CSV or spreadsheet) rather than a flattened image, so it remains searchable and sortable.
-
Redactions and segregability: If you withhold or redact any record or portion, please cite the specific exemption for each withholding (Gov. Code section 7922.540; S.F. Admin. Code section 67.27) and produce all reasonably segregable non-exempt portions. The existence, scope, and headline findings of this audit have already been publicly disclosed by SFPD; I ask that administrative and statistical portions not be withheld wholesale on investigative grounds.
-
Fees: Please notify me before incurring any duplication fees over $20. Electronic production should carry minimal or no cost.
-
Timeline: I understand SFPD must respond within 10 days under the CPRA and the Sunshine Ordinance (with limited extensions), and by the next business day for any portion granted as an Immediate Disclosure Request.
If any part of this request is unclear, please contact me so we can discuss it rather than denying it outright; I am willing to reasonably narrow scope while preserving items 1-3.
Thank you for your assistance.” P A G E |3
On July 21, 2026, SFPD invoked the extension of time to respond to your request pursuant to California Government Code section 7922.535(c)(1) & (2) due to the need to search and review our records.
SFPD is still in the process of searching for responsive records. We will continue to be in contact with you and provide you with an update by August 19, 2026.
If you have any questions, please contact the Legal Division at (415) 837-7394.
Thank you for your courtesy in this regard.
Sincerely, SFPD Legal Division, on behalf of
Acting Lieutenant Darwin Naval # 2271 Officer in Charge - Legal Division