# 2026-04 Council Questions Flock Information Security On or before 2026-04-20, **Conway City Council members raised questions** with Conway PD about Flock's information-security posture, specifically asking about data-breach exposure. The questions reached Lt. Andrew Burningham (not Chief Harris directly, per the surfaced thread), who emailed Flock Support that day asking for "talking points about the program. They are wanting to know specifically about information security and if Flock has ever had any data breaches." Flock's Customer Success Manager Gena Hatch replied the same evening with vendor talking points and a "Security Claims and Facts" one-pager — and **Flock Advisory Network CSM Emmie Tajik replied earlier the same day with a shorter set of talking points** that **Burningham forwarded through Chief Harris to Mayor Castleberry within ~5 hours of the original request** ([[Flock Talking Points to Mayor's Office April 2026]]). ## Sources - [[Flock Cameras Apr 2026 City Council QA Thread]] — the CPD-side email chain (PD-2026-354). - [[Flock Talking Points to Mayor's Office April 2026]] — the Mayor's-Office-side capture of the same April 20, 2026 talking-points request, showing the chain extending to Castleberry's inbox via Chief Harris forwarding (FOIA-2026-127). ## Significance - **This is the only documented instance in the corpus of the Conway City Council exercising oversight of the Flock deployment after the initial 2024 budget-cut decision.** After the Council declined to appropriate in December 2024 and the procurement pivoted to asset-forfeiture funding without further Council vote, the deployment ran for ~16 months before Council scrutiny resurfaces here. - The [[2026-05 Bounce-Scope Diagnostic]] showed zero Council email addresses in From/To/Cc/Bcc fields of the 389 .msg production. This thread is the missing piece: Council questions reached CPD through non-email channels (in-person, hallway conversation, work-session question) and surface in the email record only as Burningham's relay to Flock. - **The thread also documents:** - Burningham's prior (2026-04-02) request for access to "the privately owned Home Depot Cameras in town" — anticipating the corporate-coordinated state-wide rollout that played out 2026-03-12 → 2026-04-08 (see [[Home Depot Camera Sharing Series]]). - Flock's vendor-positioning: "All Flock data is owned and controlled by the agency that collects it" — Flock pushes accountability back to the agency. - Flock's "Security Claims and Facts" one-pager rebutting the 2024 independent-researcher disclosure about camera vulnerability. - **A project FOIA was filed 2026-04-17, three days before Burningham's email.** The contemporaneous timing — Council questioning Flock while civilians sought CPD-Flock records and sent oversight questions to elected officials — is the broader spring-2026 scrutiny moment for Conway's deployment. The Mayor's-Office production documents a separate April 17 civilian FOIA and Council email; civilian identities are omitted. See [[Spring 2026 Citizen FOIA and Reconsideration Wave]]. - **Flock-supplied talking points reached the Mayor's executive office within ~5 hours of Burningham's request.** This is the Mayor's-Office-side finding from `FOIA-2026-127`: Chief Harris forwarded the Engage Success / Emmie Tajik reply to Mayor Castleberry at 12:47 PM, 39 minutes after Harris himself received the forward from Burningham. The vendor's defensive material reached executive office in real time during the citizen-oversight window. See [[Flock Talking Points to Mayor's Office April 2026]]. ## Open - **Which Council members raised the questions?** Not identified in the corpus. A drafted supplemental FOIA will ask explicitly for Council-mentioning emails — this thread is one such email already present, but a refreshed scope might surface additional CPD ↔ Council communications outside email (memos, meeting notes, briefing documents). - **Whether the Council got satisfactory answers** is outside the corpus. - **The public technical record is now partly identified and archived.** Fifteen model/build-specific NVD/CNA records, bounded teardown/repository material, Flock's May 2025 and March 2026 responses, and competing Condor exposure accounts were preserved on 2026-07-20; see [[Vendor Information Security Posture]]. The exact identity/video behind every “YouTuber” reference in the talking points remains unconfirmed, and none of the public records establishes the security state of Conway's specific devices.