A court has now ruled that warrantless searches of Flock's license plate reader data amount to mass surveillance. It is being described as the first ruling of its kind. But the same reporting points to a second trend running alongside it: as courts close in on warrantless location searches, police are learning to buy the data instead. That shift is the police buying location data warrant loophole, and it matters for anyone who carries a phone or drives a car.

What the court ruled on Flock searches

Flock operates a network of automated license plate readers, and officers can search that data across jurisdictions. The ruling centers on a simple question: can police search that data without first getting a warrant from a judge?

According to our earlier coverage, a federal judge found a police officer's warrantless search of Flock's nationwide network unconstitutional, citing reporting from 404 Media. The newer report frames the decision more broadly, as the first court to treat these searches as warrantless mass surveillance.

The significance is in the direction of travel. Courts are applying Fourth Amendment limits to location tracking tools that, until recently, operated with few legal checks. A warrant requirement forces police to show a judge why they need specific information about a specific person.

How police sidestep warrants by buying data

A warrant is required when the government compels a company or person to hand over protected information. When the government is simply a customer, the legal picture looks different. Commercial data brokers collect and sell location information gathered from apps, ad networks, and other sources. If an agency buys that data on the open market, it can argue that no search took place, and so no warrant is needed.

This is the workaround the source article flags: police are adapting to tighter court rules by changing how they obtain the data, not by stopping the practice. The ruling addresses one pipeline (searching Flock's plate reader network without a warrant). It does not, on its own, close the other pipeline (purchasing data from brokers).

This is also why privacy researchers and legal scholars have spent years calling the practice a loophole. The legal question of whether buying data should require the same process as demanding it is still being argued, and a win against one tool does not automatically carry over to the other.

What a VPN can and can't hide from location tracking

Because this is a VPN-focused site, it is worth being direct: a VPN does not protect you from either of these practices.

License plate readers. Flock cameras read the plate on your vehicle as you drive past. That is a physical, real-world observation. Your internet connection is not involved, so a VPN has no effect on it.

Data broker location data. Brokers typically get location signals from the apps on your phone, such as GPS coordinates, Wi-Fi and Bluetooth signals, and advertising identifiers. A VPN masks your IP address and encrypts traffic between your device and the VPN server. It does not turn off GPS, and it does not stop an app with location permission from reading and sharing where you are.

What a VPN can do is limit what your internet provider and local network can see, and obscure your IP address from the sites you visit. That is useful, but it addresses a different problem than the one raised by this ruling.

What This Means For You

The ruling is a good sign for people who care about Fourth Amendment protections, but it should not be read as the end of warrantless location tracking. Police have more than one route to the same information, and the legal protections are being worked out one tool at a time.

For most readers, the practical exposure comes from two places: your vehicle's plate, which you cannot easily change, and your phone's location data, which you can control to a meaningful degree. The second is where you have the most leverage.

Practical steps to reduce your location data exposure

  • Audit app location permissions. Set location access to "While Using" or "Never" for apps that do not need it. Weather, shopping, and game apps rarely need precise location.
  • Turn off precise location where an approximate area is enough.
  • Reset or delete your advertising ID. Both major mobile operating systems let you remove or reset it, which makes it harder for brokers to link location points to you over time.
  • Review Wi-Fi and Bluetooth scanning settings, which can reveal location even when GPS is off.
  • Delete apps you no longer use, since dormant apps can keep sharing data.
  • Follow the legal developments. Support for warrant requirements covering both direct searches and data purchases is where meaningful change is likely to come from.

The takeaway

The first ruling treating warrantless Flock searches as mass surveillance is a real step, but the police buying location data warrant loophole shows why one court decision does not settle the issue. A VPN is a useful layer for protecting your browsing, though it will not stop plate readers or data brokers. Pair it with tighter phone settings and a habit of checking what your apps collect. For the legal background on the decision itself, read our coverage of the judge's ruling on warrantless Flock searches, then take ten minutes today to review which apps on your phone can see where you are.