Today in Surveillance:
- ICE plans a five-year, $125 million Thomson Reuters CLEAR contract with voter fraud named as the lead use case. Joseph Cox at 404 Media published the procurement record on July 17, 2026. The contract goes to Thomson Reuters Special Services and is the first ICE deal that explicitly puts voter fraud in scope. CLEAR's data fields include names, addresses, Social Security numbers, ethnicity, geolocation, license plate data, social media posts, and property records [1][2][3].
- Flock's FreeForm AI lets officers search for people by race, clothing, tattoos, and political belief across hundreds of cameras. 404 Media reviewed Flock's own audit logs and found officers typing suspect write-ups, not plate numbers, into the FreeForm search bar. The California Highway Patrol ran a single gray-shirt search across 274 cameras, Texas DPS pulled 96 networks, and Anne Arundel County, Maryland police pulled 198 networks [4][5][6].
- Thomson Reuters defended the CLEAR contract by saying "Immigration status is not a search field." That language is the same one the company's employees and the BCGEU minority shareholder have been disputing since at least February 2026, after whistleblower Billie Little was fired for raising the same concerns. Little's retaliation suit is in Oregon federal court [1][7][8].
- Flock says FreeForm "is not facial recognition" and blocks queries for race, ethnicity, religion, and nationality. The audit logs reviewed by 404 Media include searches with explicit racial and political-affiliation prompts, and Flock did not say what happens to an officer after the admin alert fires [4].
Also today: The Anthropic Claude Code steganographic-tracker thread stayed alive over the weekend, with the removal pull request merged on July 1, 2026 still without a formal postmortem naming the dates the marker ran, the data it sent, and the retention policy for the collected signal [9][10]. EFF and ARTICLE 19 filed a joint submission at the European Commission asking the DSA trusted-flagger guidelines to bar law enforcement from the moderation queue [11]. The Register reported that Grok Build's CLI silently exfiltrated SSH keys and password stores to vendor cloud for users who had only opted out at the GUI layer [12].
ICE Is Buying a $125M CLEAR Pipeline and Naming Voter Fraud as the Mission
On July 17, 2026, 404 Media published a procurement record showing that U.S. Immigration and Customs Enforcement is preparing a five-year, $125 million contract with Thomson Reuters Special Services, a Thomson Reuters subsidiary, for direct access to the CLEAR database. The contract value works out to $25 million a year. The procurement record frames the work as supporting a "presidential mandate of the identification of Voters Fraud, Immigration Fraud and National Security," a phrasing that pulls voter fraud into the official mission for the first time in the ICE-Thomson Reuters relationship [1][2].
The data fields listed in CLEAR's product documentation cover names, addresses, Social Security numbers, ethnicity, geolocation, license plate data, social media posts, property records, credit header data, phone and utility records, and vehicle registrations. The procurement record says the database will be used to "validate and verify school, benefit, immigration and other eligibility requirements" [1][3]. TRSS is described in the document as the "only contractor able to provide ICE with a continuous monitoring and alert service for millions of individuals and entities of interest" and notes that TRSS provides batch data access not available from other contractors. The vendor fielding posture is "embedded data scientists cleared up to Top Secret/SCI," a staffing model that lets TRSS do query work inside ICE's investigative environment rather than handing over a raw feed [1][2].
The contract was filed the day after President Trump held a July 16, 2026 press conference on election security [13]. Emma Pullman, an analyst with the British Columbia General Employees' Union, which holds a minority stake in Thomson Reuters, told 404 Media: "Thomson Reuters has given shareholders, employees, and the media inconsistent and shifting accounts of the nature of its ICE contracts. TRSS latest ICE contract is the first to include voter fraud that we are aware of" [1]. The June 10, 2026 BCGEU-led shareholder resolution calling for an independent human-rights impact assessment of the ICE contracts won only a small share of votes cast, well short of the support needed to push the board to act [7][8].
Thomson Reuters' public defense, in a statement to 404 Media, was that "Immigration status is not a search field in CLEAR" and that the company prohibits use of CLEAR "for the purpose of identifying and locating noncriminal immigrants or undocumented individuals with the intention of deportation solely on the basis of the individual's immigration status" [1]. That language is the same one the company has used in prior public statements defending its ICE contracts. The same language is what Thomson Reuters staff in the Committee to Restore Trust have been disputing since at least February 2026, when the group sent the company a letter raising concerns that ICE could be using Thomson Reuters products unlawfully. One of the group's spokespeople, Billie Little, was fired within weeks of the New York Times covering the dispute and has since filed a whistleblower retaliation suit in federal court in Oregon [1]. Our full brief covers the procurement record, the CLEAR field list, and the whistleblower line [14].
CLEAR Already Feeds the Palantir and Mobile Companion Pipeline
The new contract does not stand up a new system. It widens the front door on a pipeline that already exists. 404 Media's earlier reporting documented that CLEAR feeds directly into Palantir's "ELITE" application, the mapping tool ICE uses to plot neighborhoods for raids, populate target dossiers, and assign confidence scores to home addresses. An ELITE user guide cited CLEAR as a data source for address information [15].
A separate 404 Media investigation found that Thomson Reuters data also flows into a Mobile Companion app combining driver's license, voter registration, and marriage records with Motorola Solutions' Vigilant license plate reader network, the same Vigilant dataset integrated into CLEAR since 2017. Mobile Companion is the tool field agents use during traffic stops, a context the New York Times covered in a July 14, 2026 piece on ICE traffic stops that has drawn national attention [16][17].
What the new contract changes is the scope of the queries. ICE investigators are now being told, in writing, to query CLEAR specifically to support voter-fraud cases. The same database that already populates raid-targeting maps and field-agent phones is now positioned as the primary tool for the administration's election-integrity enforcement work. The five-year term matters as much as the dollar figure. A voter-fraud investigation window opens when the administration chooses to open it, and the database access does not need to be renewed mid-cycle. Once the contract is in place, every state voter file, every SAVE database check, and every DHS cross-reference can be run through CLEAR on a continuous basis without a new procurement [1][3]. The procurement line on "validate and verify school, benefit, immigration and other eligibility requirements" is the catch-all that turns a voter-fraud investigation tool into a general-purpose eligibility screen. Our dedicated vessel carries the procurement record and the ELITE pipeline [14].
Flock's FreeForm AI: Officers Searched for People, Not Plates
Joseph Cox at 404 Media published the investigation on July 16, 2026, showing that Flock Safety's FreeForm search feature, marketed to cities as an investigative aid for license plate reader footage, has been used "at least hundreds of times" by police to find human beings instead of vehicles. Audit logs reviewed by 404 Media show officers typing natural-language descriptions of people into a search bar and pulling footage across hundreds of cameras in a single query [4][5].
The text prompts captured in the audit log include "heavy-set male with a black and white hat," "non caucasion [sic] male wearing blue shirt blue pants white hat," "person on skateboard," "blue jeans, boots with white paint stains, possibly carrying a black helmet," "female with ugg boots," and one near-racial-profiling template: "white male about 6ft 1in tall, longer brown hair." One entry logged a "white jeep with trump flag" as the search description [4]. Wikipedia, citing the same 404 Media reporting, summarizes the evidence bluntly: "Public records requests showed that police were searching for characteristics of individuals, including by race, gender, clothing, height, tattoos, and perceived political affiliation" [5].
The network is built for cross-jurisdiction pulls. The records 404 Media reviewed show officers searching across dozens of networks in a single query. Dunwoody, Georgia police ran queries across 9 Flock networks. Pocatello, Idaho police ran searches against 38 cameras. Milford, Connecticut used "more than a hundred cameras" for individual queries. The California Highway Patrol ran a single gray-shirt search across 274 cameras. The Texas Department of Public Safety ran searches against 96 networks. Anne Arundel County, Maryland police pulled footage across 198 networks in a single query [4]. The value of the Flock network to a single department is the rest of the network. The same feature that lets a small-town police department reach across state lines to find a stolen plate also lets it reach across state lines to find a person who fits a description. Once the camera data is in Flock's cloud, the geographic boundary the city thought it bought disappears.
In a statement to 404 Media, Flock said FreeForm "is designed to help investigators quickly search through large amounts of footage" and "is not facial recognition." Flock also claims FreeForm blocks queries for "race, ethnicity, religion, nationality" and sends an alert to the agency administrator when a scrutinized query triggers that filter [4]. The descriptions captured in the records include explicit racial and political-affiliation prompts. Flock did not say what happens to an officer after the admin alert fires, and the records show the searches still ran. A natural-language interface does not require facial recognition to enable people-tracking: a description of clothing, body type, race, gender, height, tattoos, and political belief is enough for a human reviewer to identify a candidate, and that is the workflow the audit logs document [4][5]. Our vessel carries the audit-log excerpts and the ACLU, CDT, and EFF reactions [6].
FreeForm Sits on Top of a Network Cities Have Already Started to Cancel
FreeForm is a different category from the searches the cancel-wave stories have documented. Earlier coverage of cities tearing out Flock cameras focused on plate reads that ended up in federal hands, including ICE, ATF, Air Force, and GSA Inspector General queries [18]. FreeForm adds a second, more invasive channel on top of the plate reads: the same network that flags your car can now be told to find a person who looked like you.
The civil-liberties reaction was direct. Jay Stanley, a senior policy analyst with the ACLU's Speech, Privacy, and Technology Project, told 404 Media the public has not caught up to how much more powerful a surveillance camera has become, and that Flock is moving beyond its original pitch of catching stolen cars toward general-purpose people-tracking [4]. Tom Bowman, policy counsel for surveillance and security at the Center for Democracy and Technology, called the practice a bait-and-switch in which cities bought a stolen-car tool and got a people-tracking system [4]. Beryl Lipton, a senior investigative researcher at the Electronic Frontier Foundation, said AI-enabled video analysis across large volumes of footage creates new risks for people going about their daily lives [4]. EFF has separately used the same Flock audit log channel to document 80-plus law enforcement agencies running searches that targeted Romani and Irish Traveller communities with stereotypes [19]. The FreeForm disclosures and the EFF Romani-stereotype audit are two windows into the same database.
LAPD's Flock contract expired on July 11, 2026 after the inspector general's audit found 161 innocent drivers pulled over on false stolen-vehicle flags across a two-month window. The inspector general's audit, numbered BPC 26-184, ran August and September 2025 and documented 210.5 million plate reads, 5,911 distinct plates flagged, no action on 4,575 of them, and 74 arrests [20][21]. The cancel-wave and the FreeForm disclosures now stack on the same evidence base: a network whose value is its scale, whose scale is the privacy problem, and whose audit log channel is the only window into what officers have actually been typing [19].
What to Watch This Week
Federal Procurement Data System flip. The $125 million ICE-CLEAR procurement has been posted but no award date has been published. The procedural trigger is the FPDS record flipping from solicitation to awarded status. Once that flips, the contract becomes binding and the five-year clock starts [1].
DHS implementation memo on the "validate and verify" clause. The procurement language frames the database work as validating "school, benefit, immigration and other eligibility requirements." That "other" is the catch-all that turns a voter-fraud investigation tool into a general-purpose eligibility screen. Watch for any DHS implementation memo clarifying which eligibility programs are in scope [1].
Palantir ELITE update. The ELITE user guide already names CLEAR as an address data source. A revised ELITE data-source list that explicitly tags CLEAR queries as "voter-fraud" investigations would be the visible hand-off between the two contracts [15].
BCGEU's next move. The June 10 shareholder vote failed. The new voter-fraud scope is the strongest argument the union has had for a renewed push. Watch for a second resolution, a board engagement request, or a formal complaint to the Ontario Securities Commission [7][8].
The Little lawsuit. Billie Little's whistleblower retaliation suit in Oregon is in discovery. If Thomson Reuters is forced to produce internal documents on the scope of its ICE contracts, the new procurement record will be a benchmark, not a ceiling [1].
California Highway Patrol, Texas DPS, Anne Arundel County FreeForm records. The FreeForm audit logs are sitting in every Flock-equipped department's own system. The three departments that ran the largest documented FreeForm queries are the natural public-records targets. LAPD's contract expiration on July 11, 2026 is the precedent for what happens when the records come out [4][21].
Sources
- 404 Media, Joseph Cox: "ICE to Pay Thomson Reuters $125 Million to Find 'Voter Fraud'" (July 17, 2026). https://www.404media.co/ice-to-pay-thomson-reuters-125-million-to-find-voter-fraud/
- DHS procurement record: "ICE Thomson Reuters $125 Million" (DocumentCloud, July 2026). https://www.documentcloud.org/documents/28492574-ice-thomson-reuters-125-million/
- Thomson Reuters: CLEAR product page (accessed July 2026). https://legal.thomsonreuters.com/en/products/clear
- 404 Media, Joseph Cox: "How Cops Use Flock to Track People, Not Cars" (July 16, 2026). https://www.404media.co/how-cops-use-flock-to-track-people-not-cars/
- Wikipedia: Flock Safety entry on FreeForm search feature and audit-log evidence. https://en.wikipedia.org/wiki/Flock_Safety
- State of Surveillance: Flock's FreeForm AI Searches for People, Not Just Cars, the brief on the audit-log evidence and ACLU, CDT, and EFF reactions. /news/flock-freeform-ai-people-search-2026
- Reuters: "Thomson Reuters faces shareholder vote over ICE contracts" (June 10, 2026). https://www.reuters.com/legal/legalindustry/thomson-reuters-faces-shareholder-vote-over-ice-contracts-2026-06-10/
- CTV News: "Thomson Reuters faces shareholder vote over ICE contracts" (June 10, 2026). https://www.ctvnews.ca/business/article/thomson-reuters-faces-shareholder-vote-over-ice-contracts/
- The Register, Thomas Claburn: "Anthropic is removing its covert code for catching Chinese competitors" (July 1, 2026). https://www.theregister.com/ai-and-ml/2026/07/01/anthropic-is-removing-its-covert-code-for-catching-chinese-competitors/5265366
- State of Surveillance: Anthropic Hid a Steganographic Tracker in Claude Code, the brief on the disclosure and the Anthropic response. /news/anthropic-claude-code-steganographic-tracker-discovery-2026
- EFF Deeplinks: "EFF and ARTICLE 19 Submission to the European Commission on DSA Trusted Flagger Guidelines" (July 2026). https://www.eff.org/deeplinks/2026/07/eff-and-article-19-submission-european-commission-dsa-trusted-flagger-guidelines
- The Register: "Musk promises purge after Grok Build caught sending entire repos to the cloud" (July 14, 2026). https://www.theregister.com/ai-and-ml/2026/07/14/musk-promises-purge-after-grok-build-caught-sending-entire-repos-to-the-cloud/5271123
- NPR: "Trump election address" (July 16, 2026). https://www.npr.org/2026/07/16/nx-s1-5896448/trump-election-address
- State of Surveillance: ICE Plans $125M Thomson Reuters CLEAR Deal for Voter Fraud Hunt, the brief on the procurement record and CLEAR field list. /news/ice-thomson-reuters-clear-125-million-voter-fraud-2026
- 404 Media: "ELITE: The Palantir App ICE Uses to Find Neighborhoods to Raid." https://www.404media.co/elite-the-palantir-app-ice-uses-to-find-neighborhoods-to-raid/
- 404 Media: "This App Lets ICE Track Vehicles and Owners Across the Country." https://www.404media.co/this-app-lets-ice-track-vehicles-and-owners-across-the-country/
- The New York Times: "ICE agents traffic stops" (July 14, 2026). https://www.nytimes.com/2026/07/14/us/ice-agents-traffic-stops.html
- State of Surveillance: "30+ Cities Have Canceled Flock Safety Contracts" (May 19, 2026). /news/flock-safety-cancel-wave-30-cities-alpr-surveillance-contracts-2026
- State of Surveillance: "DeFlock and the 90,000-Camera Revolt" (April 2026). /news/deflock-flock-safety-revolt-90000-cameras-cities-cancel-2026
- 404 Media: "LAPD Regularly Pulled Over Innocent People Because License Plate Readers Flagged Their Cars as Stolen" (July 13, 2026). https://www.404media.co/lapd-regularly-pulled-over-innocent-people-because-license-plate-readers-flagged-their-cars-as-stolen/
- State of Surveillance: Daily Surveillance Briefing, July 17, 2026: LAPD Flock Audit (the brief on the BPC 26-184 audit and the 161 innocent stops). /news/daily-surveillance-briefing-july-17-2026