# 2026-04 Council Questions Flock Information Security On or before 2026-04-20, **Conway City Council members raised questions** with Conway PD about Flock's information-security posture, specifically asking about data-breach exposure. The questions reached Lt. Andrew Burningham (not Chief Harris directly, per the surfaced thread), who emailed Flock Support that day asking for "talking points about the program. They are wanting to know specifically about information security and if Flock has ever had any data breaches." Flock's Customer Success Manager Gena Hatch replied the same evening with vendor talking points and a "Security Claims and Facts" one-pager — and **Flock Advisory Network CSM Emmie Tajik replied earlier the same day with a shorter set of talking points** that **Burningham forwarded through Chief Harris to Mayor Castleberry within ~5 hours of the original request** ([[Flock Talking Points to Mayor's Office April 2026]]). ## Sources - [[Flock Cameras Apr 2026 City Council QA Thread]] — the CPD-side email chain (PD-2026-354). - [[Flock Talking Points to Mayor's Office April 2026]] — the Mayor's-Office-side capture of the same April 20, 2026 talking-points request, showing the chain extending to Castleberry's inbox via Chief Harris forwarding (FOIA-2026-127). ## Significance - **This is the only documented instance in the corpus of the Conway City Council exercising oversight of the Flock deployment after the initial 2024 budget-cut decision.** After the Council declined to appropriate in December 2024 and the procurement pivoted to asset-forfeiture funding without further Council vote, the deployment ran for ~16 months before Council scrutiny resurfaces here. - The [[2026-05 Bounce-Scope Diagnostic]] showed zero Council email addresses in From/To/Cc/Bcc fields of the 389 .msg production. This thread is the missing piece: Council questions reached CPD through non-email channels (in-person, hallway conversation, work-session question) and surface in the email record only as Burningham's relay to Flock. - **The thread also documents:** - Burningham's prior (2026-04-02) request for access to "the privately owned Home Depot Cameras in town" — anticipating the corporate-coordinated state-wide rollout that played out 2026-03-12 → 2026-04-08 (see [[Home Depot Camera Sharing Series]]). - Flock's vendor-positioning: "All Flock data is owned and controlled by the agency that collects it" — Flock pushes accountability back to the agency. - Flock's "Security Claims and Facts" one-pager rebutting the 2024 independent-researcher disclosure about camera vulnerability. - **Joshua's FOIA was filed 2026-04-17, three days before Burningham's email.** The contemporaneous timing — Council questioning Flock at the same moment a citizen filed a FOIA covering CPD-Flock correspondence — is the broader 2026-spring scrutiny moment for the Conway Flock deployment. The Mayor's-Office-side ingest (`FOIA-2026-127`, 2026-05-22) now documents that the same April 17, 2026 day brought a separate citizen FOIA from Jacquiline Dickens / "Jacqui Landri" to the City Clerk and a separate citizen "negligent unanimous decision" email to all Council members and Mayor Castleberry — the spring 2026 citizen oversight wave Burningham's talking-points request sits inside. See [[Spring 2026 Citizen FOIA and Reconsideration Wave]]. - **Flock-supplied talking points reached the Mayor's executive office within ~5 hours of Burningham's request.** This is the Mayor's-Office-side finding from `FOIA-2026-127`: Chief Harris forwarded the Engage Success / Emmie Tajik reply to Mayor Castleberry at 12:47 PM, 39 minutes after Harris himself received the forward from Burningham. The vendor's defensive material reached executive office in real time during the citizen-oversight window. See [[Flock Talking Points to Mayor's Office April 2026]]. ## Open - **Which Council members raised the questions?** Not identified in the corpus. A drafted supplemental FOIA will ask explicitly for Council-mentioning emails — this thread is one such email already present, but a refreshed scope might surface additional CPD ↔ Council communications outside email (memos, meeting notes, briefing documents). - **Whether the Council got satisfactory answers** is outside the corpus. - **The 2024 vulnerability disclosure Flock is rebutting** should be identified through external research.