Cities Are Canceling Flock Contracts (08/31/2026)

The surveillance camera story has changed shape. For a year it was a debate about whether the networks should exist, and in August it became a procurement question that cities are answering by canceling.

Top 5 Critical Privacy Alerts

1. Municipal Flock Contracts Are Being Canceled at a Record Pace

Cities terminated Flock contracts during August faster than in any previous month, a trend that landed alongside Texas Governor Greg Abbott freezing state funding for additional cameras. The cancellations are municipal decisions taken independently of each other. PogoWasRight

Operator Note: Watch what happens to the data at termination rather than the termination itself. A canceled contract does not by itself delete the historical reads, and most municipal agreements are vague about what the vendor retains and for how long. If your organization runs cameras under any contract, the question worth asking your counsel this week is what happens to the archive on the day you stop paying.

2. Connecticut Settles With Both Meta and TaxAct

The Connecticut attorney general announced two privacy settlements, one with Meta and one with TaxAct, continuing an enforcement pattern we carried on Friday when the TaxAct matter first surfaced. PogoWasRight

Operator Note: State attorneys general have become the operative privacy regulator in the United States while federal rulemaking stalls, and Connecticut is now running a program rather than bringing occasional cases. If your product touches residents of a state with a comprehensive privacy law, the enforcement risk is no longer theoretical and it does not require a breach.

3. The EFF Publishes a Practical Doxxing Response Guide

The two-part guide covers prevention and footprint management first, then incident response for somebody who has already been targeted. Both parts are written for the person affected rather than for a security team. EFF

Operator Note: This is the most immediately usable thing on today’s list and it belongs in your employee resources rather than your security wiki. Executives, moderators, and anybody who speaks publicly for your organization are the people who need it, and most organizations offer them nothing until after an incident.

4. US Age Assurance Moves Into Implementation

Age assurance requirements in the United States have passed from legislating into implementing, with courts and lawmakers now refining rules that platforms are already building against. The rules are being adjusted while the systems meant to satisfy them are under construction. Biometric Update

Operator Note: The implementation phase is where the compliance cost actually lands, and it is arriving at the same time as the Meta settlement’s age-verification requirement we covered on Wednesday. Any consumer product should be working out now which verification method it will accept, because that decision determines how much identity data you end up holding.

5. Australia Broadens Digital ID Privacy Protections

Australia has extended privacy protections around its digital ID system under a new strategy. The changes cover what relying parties may do with verification results. Biometric Update

Operator Note: Australia keeps arriving at these questions a year or two ahead of comparable markets, which makes its choices a reasonable preview. The protections worth reading are the ones governing what a relying party may retain after a successful verification, since that is where digital ID schemes usually leak.

Additional Privacy Alerts

Surveillance & Investigations

• Researchers tracked a Nigerian scammer to his doorstep: A readable account of open-source investigation, and a reminder of how much of this is possible from public data alone. 404 Media

The Axe Report is a daily briefing from Grab The Axe. Need help assessing your organization’s security posture? Take our free Human Attack Surface Score assessment.