Missouri governor orders 30-day data limit on Flock license plate cameras

Overview

Updated Oct 6

Missouri Gov. Mike Kehoe signed an executive order September 16 capping how long police can keep license plate reader data at 30 days and banning facial recognition integration. The state's Department of Public Safety followed up on October 2 with formal guidance telling agencies how to comply, including monthly audits and a ban on vendors selling Missouri data.

Two days before the guidance came out, Sen. Josh Hawley introduced a federal bill that would apply similar limits nationwide, including a 10-day deletion rule and a ban on data sales. St. Louis County also ordered a review of its own Flock cameras. The state legislature still must turn the executive order into permanent law.

Why it matters

If Missouri's rules hold and spread, police lose the ability to build long-term location records on innocent drivers, and Flock's data business takes a hit.

Questions about this story

Free account needed to ask — your question is kept and asked for you right after sign-up. Answers are public.

No questions yet — be the first to ask.

Key Indicators

30 days

License plate data retention limit

Captured images must be permanently deleted within 30 days unless tied to an active investigation or life-safety emergency.

120,000

Registered Flock cameras nationwide

Sen. Josh Hawley cited this figure in calling for federal privacy protections around ALPR networks.

Oct 2

DPS guidance published

Missouri's Department of Public Safety released its 10-page ALPR best-practice guidance on October 2, 2026.

Voices

Curated perspectives — historical figures and your fellow readers.

People Involved

Mike Kehoe

Governor of Missouri

In office; signed Executive Order 26-18

Josh Hawley

U.S. Senator from Missouri

Backed the executive order; called for federal protections

Sam Page

County Executive of St. Louis County

Signed Executive Order No. 4 on September 25, 2026

Organizations Involved

Flock Safety

Technology company

Vendor most affected by the order

Atlanta-based company selling ALPR camera networks to police departments nationwide.

Missouri Department of Public Safety

State agency

Tasked with implementing the order

State agency responsible for setting ALPR standards and drafting the permanent legislative proposal.

Missouri General Assembly

State legislature

Expected to codify the order into permanent law

Missouri's legislature, which must turn the executive order into a statute.

Timeline

September 2026 October 2026

7 events Latest: October 2nd, 2026 · 1 month ago

Tap a bar to jump to that date

October 2026
DPS publishes ALPR best-practice guidance
Latest Rule Change

Missouri's Department of Public Safety issued a 10-page guidance for law enforcement agencies covering 30-day deletion, vendor certification, monthly audits, and a ban on facial recognition integration.
October 2nd, 2026
September 2026
Hawley introduces federal ALPR privacy bill
Legislation

Sen. Josh Hawley introduced a bill to restrict automated license plate reader data, including a 10-day deletion rule, a ban on data sales, and a written approval process for searches.
September 30th, 2026
St. Louis County orders review of ALPR cameras
Rule Change

County Executive Sam Page signed an order directing an audit of ALPR cameras on county property and a review of data-sharing agreements.
September 25th, 2026
Columbia PD confirms it already complies with most rules
Statement

Columbia Police Department said its ALPR policies already meet the order's standards, except for a newly required vendor certification.
September 17th, 2026
Hawley calls for federal ALPR privacy protections
Statement

Sen. Josh Hawley backed state-level restrictions and argued citizens have a right not to be tracked outside law enforcement contexts.
September 16th, 2026
Kehoe signs Executive Order 26-18 restricting ALPR use
Rule Change

Governor signs order capping ALPR data retention at 30 days, banning vendor data sales and facial recognition integration, and requiring misuse reporting.
September 16th, 2026
New York Sheriff's investigator arrested for Flock data misuse
Legal

A New York Sheriff's investigator was criminally arrested for using Flock Safety data improperly, a case Missouri cited as evidence of the need for safeguards.
September 2026

Scenarios

Missouri makes ALPR guardrails permanent law

Possible Resolves by May 30, 2027

Discussed by: Governor Kehoe's office; Missouri Association of Prosecuting Attorneys; Sen. Josh Hawley

The order directs the Department of Public Safety to draft a legislative proposal with the 30-day retention cap, vendor data-sale ban, and facial recognition prohibition intact. If the General Assembly passes it in the 2027 session, the rules outlast the executive order, which could otherwise be reversed by a future governor.

New data-misuse prosecutions test the reporting rules

Uncertain Resolves by Sep 16, 2027

Discussed by: The order's own enforcement provisions; September 2026 New York arrest as precedent

The order mandates criminal referral and DPS notification for any misuse of ALPR data, with officer license revocation as a possible penalty. A public prosecution or license revocation in Missouri within the first year would signal that the safeguards are enforceable, not symbolic.

Federal ALPR privacy bill advances

Unlikely Resolves by Q2 2027

Discussed by: Sen. Josh Hawley, who cited Flock's 120,000-camera national footprint

Hawley used the Missouri order to argue for federal rules, noting the scale of Flock's network across states. A federal bill standardizing retention limits or banning facial recognition integration would extend Missouri's approach nationwide and override the patchwork of state laws.

Historical Context

3 moments from history that rhyme with this story — and how they unfolded.

June 2013

Maine's ALPR retention law (2013)

Maine became the first state to restrict automated license plate reader data, capping retention at 21 days and limiting who could access the records. The law followed concerns from civil liberties groups that police were building searchable databases of drivers' movements.

Then

Maine police agencies adjusted retention practices and reporting requirements.

Now

The law set a template other states later drew on for ALPR limits.

Why this matters now

Missouri's 30-day cap is the same mechanism Maine pioneered over a decade ago, but imposed by executive order while awaiting legislation.

June 2018

Carpenter v. United States (2018)

The Supreme Court ruled 5-4 that police generally need a warrant to access cell-site location records, holding that such data can reveal the whole of a person's physical movements over time.

Then

Law enforcement agencies began securing warrants for cell location data.

Now

Established that pervasive location tracking implicates the Fourth Amendment even when records sit with a third party.

Why this matters now

Kehoe cited the same principle—continuous tracking of movements—as grounds for capping ALPR data retention.

May 2019

San Francisco's facial recognition ban (2019)

San Francisco became the first U.S. city to ban facial recognition technology use by city agencies, including police, requiring approval for future surveillance purchases.

Then

Boston, Oakland, and other cities adopted similar restrictions.

Now

Showed that surveillance tech can be restricted at the procurement and deployment level, not just in court.

Why this matters now

Missouri's ban on integrating facial recognition with ALPR systems applies the same logic statewide, through an executive order rather than a city ordinance.