Three Residents Took On Their Town's Surveillance System. They Won.

TL;DR: This week, Houlton, Maine finished physically removing 55 Verkada surveillance cameras with facial recognition capabilities after three residents spent two years forcing the town to admit it violated state law. Access logs revealed 56,000+ instances of live video viewing and over 5,266 facial searches in a single year. All user accounts have been deleted, and all collected data is ordered destroyed. It took two years of FOIA requests, public pressure, and the threat of a lawsuit, but the cameras are gone.

What Happened

Houlton is a small town of about 6,000 people in northern Maine, near the Canadian border. In 2022, the town used $130,000 in federal COVID relief funds to buy 55 Verkada surveillance cameras ^[1].

The cameras didn't go up right away. It wasn't until January 2024 that Police Chief Tim DeLuca told the Town Council that 50 cameras would be installed around municipal buildings for "security." ^[2]

He didn't mention that the Verkada system includes facial recognition. He didn't explain that officers could search for specific people based on appearance, clothing, or facial matches. He didn't share that every face captured would be stored and searchable ^[2].

The council approved the installation.

Three Residents Noticed

Patrick Bruce, who works at Farr and Associates Security, knew exactly what these cameras could do. In early 2025, he started showing up at Town Council meetings, telling anyone who would listen that Houlton was breaking Maine law ^[2].

Maine passed the nation's strongest facial recognition restrictions in 2021. LD 1585 prohibits state, county, and municipal employees from possessing and using facial recognition technology, with narrow exceptions for investigating serious crimes, and only with probable cause ^[3]. The law also bans governments from working around the restriction by hiring third parties to do the scanning for them.

Bruce argued the town's casual use of Verkada's "people analytics" violated that law. He was joined by two other residents: Craig Harriman and Mark Lipscombe. Together, they filed public records requests demanding to see how the cameras were actually being used ^[1].

The Numbers Were Damning

When the access logs finally came out, they told a story the town couldn't explain away.

In 2024 alone:

56,000+ instances of live video feed access
5,266 "Profile Searched" entries: meaning officers actively searched for specific people who had been previously captured by the cameras

This wasn't passive security footage sitting on a hard drive. This was active surveillance. Officers were searching for specific individuals. In a town of 6,000 people ^[1].

After the documents leaked in August 2025, the controversy exploded. The town briefly disconnected the cameras, then quietly reactivated them in July 2025 under a new policy that claimed to prohibit facial recognition use. Bruce, Harriman, and Lipscombe weren't satisfied. They prepared to sue ^[1]^[2].

The Town Settled

In early November 2025, facing a lawsuit, Houlton agreed to:

Physically remove all 55 cameras
Delete all user accounts, ending employee access
Destroy all collected data
Hand the cameras to a third party, not the town
Allow a third-party auditor to verify compliance
Adopt a new public records policy with a request log

This week, the town finished the physical removal. Twenty-eight cameras came down. The rest had already been relinquished ^[1].

Craig Harriman's response: "Two years of unlawful facial recognition technology breaking Maine law, the cameras are finally down. But will accountability follow?" ^[1]

Mark Lipscombe called it "a new era for the town."

What We Still Don't Know

The cameras are gone. The data destruction is a different question.

The settlement required a third-party auditor to verify that all data was actually destroyed. As of this week's reporting, it's unclear whether that audit has been completed or what it found ^[1].

Verkada stores footage in the cloud. Even if Houlton deleted its local access, the data may still exist on Verkada's servers. The settlement terms don't appear to address that.

There's also the question of accountability. Who approved 5,266 facial searches? Were any of them for legitimate law enforcement purposes under the narrow exceptions in Maine law? The town hasn't said.

Why This Matters Beyond Houlton

Surveillance usually expands. It rarely contracts. When cameras go up, they stay up. When databases get built, they grow. When partnerships form between police and tech companies, the data flows.

Houlton is different. Three residents (not the ACLU, not a major advocacy group, just three people who paid attention) forced a town to physically dismantle its surveillance infrastructure and destroy years of collected data.

They did it by knowing the law (Maine's facial recognition ban), documenting the violations (those access logs), and being willing to sue if necessary.

This happened in a town most Americans have never heard of. It happened because three people refused to let it happen quietly.

What You Can Do

Know your state's laws. Maine has the strongest facial recognition restrictions in the country. The EFF tracks state-by-state facial recognition laws.
File public records requests. Access logs, contracts, and policies are often available through FOIA. If your town has surveillance cameras, ask how they're being used.
Show up at council meetings. Bruce made his case at public Town Council sessions. Local government often operates below public attention.
Look for Verkada logos. The company's AI-powered cameras are marketed to schools, hospitals, and municipalities nationwide. If you see Verkada hardware, the facial recognition capability is built in. (For practical steps, see how to beat facial recognition.)

Sources

Published: February 18, 2026