Government agencies defending automated license-plate readers usually make the same promise: every search is logged, audits catch misuse and employees who break the rules will be held accountable.
Brunswick County is now testing every part of that promise.
A former sheriff’s deputy faces 18 criminal counts tied to alleged searches of six vehicles or license plates without a legitimate law-enforcement purpose. That case is serious enough on its own. But public records reviewed by WECT have exposed a separate problem: 145 audit entries involving nearly 20 people were marked as needing review, then archived on August 31—one day before Sheriff Brian Chism publicly announced a state investigation.
Those 145 flags are not 145 proven abuses. The records apparently do not list former deputy Daniel Heith Little, the man now charged, and the public still does not know exactly what conduct caused each flag. But that uncertainty is the point. An audit system is not meaningful because it generates alerts. It is meaningful only if the agency explains how those alerts were investigated and resolved.
One case is now 18 criminal counts
A Brunswick County grand jury indicted Little on October 5 on six counts of accessing a government computer, six counts of misuse of an automated license-plate reader system and six counts of willful failure to discharge duties, according to WECT’s reporting on the indictments and Port City Daily.
Prosecutors allege Little used a county-issued phone or computer to search for six vehicles or plates between February and August without a legitimate law-enforcement purpose. He resigned August 18. His next court date is scheduled for December 8, Port City Daily reported.
The indictments are allegations, not findings of guilt. Little is presumed innocent unless the state proves the charges beyond a reasonable doubt.
The sheriff’s office said it was disappointed by the allegations, takes the matter seriously and will cooperate while the justice system proceeds. The agency said its policies are clear that the technology may be used only for legitimate law-enforcement purposes. Chism declined WECT’s request for an interview through a spokesperson.
The 145 flags are a separate question
At a September county meeting, Chism said an internal audit had identified one employee who was allegedly using the system improperly. Commissioner Pat Sykes was not convinced the problem stopped there.
WECT later obtained a spreadsheet showing 145 records labeled “Needs Review.” The entries involved nearly 20 people, including system administrators. A field called “Entity Details” initially appeared to contain no useful information; changing the font color reportedly revealed names and other details. The records were archived August 31.
Archiving is not the same as deleting, and a flag is not proof of wrongdoing. Audit tools can mark activity that turns out to be legitimate. Little’s name also was not among the people shown in those 145 entries, according to WECT, so the records cannot simply be treated as evidence against him.
But the public deserves answers that do not require a reporter to reformat a spreadsheet:
- What triggered the 145 flags?
- Who reviewed each one, and what did that review find?
- Why were they archived together on August 31?
- Why did the visible spreadsheet obscure the identifying details?
- Were any cases referred for discipline, further investigation or prosecution?
Sykes told WECT she was considering a motion to end the county’s contract with Flock Safety. Before commissioners decide whether to keep paying for the system, they should obtain the complete audit history and make as much of it public as the law permits.
The timing of the sheriff’s policy needs an answer
North Carolina law says a law-enforcement agency must adopt a written policy governing its automated license-plate reader system before the system becomes operational. The policy must address training, oversight, security, auditing and access to outside systems. State law also says ALPR data may be obtained, accessed, preserved or disclosed only for a law-enforcement purpose.
Those requirements appear in Article 3D of Chapter 20. A violation of the article can be a Class 1 misdemeanor.
The policy currently posted by the Brunswick County Sheriff’s Office is dated September 1, 2026. WECT reported that no earlier Brunswick policy has been made public, that the office’s policy was absent from a State Bureau of Investigation pilot-program report and that the SBI said it was seeking clarity about the issue.
That does not by itself prove the sheriff’s office operated unlawfully. An earlier policy may exist. If it does, the office can settle the question by producing it, identifying when it took effect and showing the county’s actual audit procedure before September 1.
If no earlier written policy existed, county officials have a much larger problem than one employee accused of unauthorized searches. They would need to explain why a surveillance network was allowed to operate before a safeguard required by state law was in place.
The office says safeguards are clear now
The sheriff’s current public ALPR page says only trained and authorized employees may use the system, each user has an individual account, every search is recorded and monthly audits are conducted. It says plate data is retained for 30 days and searches must be tied to a legitimate law-enforcement purpose.
Those are sensible safeguards. They also raise the obvious follow-up: what did the monthly audits show before August, and what became of the 145 items needing review?
The most charitable interpretation is that the system worked: logs preserved the searches, an audit identified suspicious activity and investigators brought the case to prosecutors. That is the official accountability argument in its strongest form.
The less comfortable interpretation is that one criminal case surfaced only after months of access, while a much larger set of internal flags remains unexplained and the public-facing policy carries a date after the scandal broke. Both possibilities deserve evidence, not reassurance.
The contract grew from eight cameras to 15
Port City Daily reported that Brunswick County entered a two-year agreement with Flock Safety in 2024 for eight cameras, with an initial cost of $29,200 and an annual cost of $24,000. The operational network later reached 15 cameras because seven devices on private property remained in service when eight additional cameras were installed on state-owned land.
That growth matters. Every additional camera expands a searchable map of ordinary people’s movements. Most drivers captured by the system are not suspected of a crime. Their plates become records because they used a public road.
Killjoy Media has raised the same concern in its reporting on Flock cameras around Jacksonville: a tool sold as a way to find stolen cars can also become a broad movement-tracking system if its use is not tightly limited and independently checked.
North Carolina law defines a law-enforcement purpose broadly enough to include criminal investigations, locating missing people, enforcing court orders and other official duties. That makes honest audits more important, not less. A logged search should have a documented reason that an outside reviewer can understand.
What should happen next
Little’s criminal case should proceed on the evidence, with the same presumption of innocence owed to any defendant. It should not be used as a shortcut to assume that every flagged user acted improperly.
At the same time, county commissioners should not allow the pending case to become an excuse for silence about the surveillance program itself. They should require:
- the written policy that governed the system before September 1, or a clear admission that none existed;
- an independent review of all 145 archived flags and the reasons each was resolved;
- a public accounting of the network’s cameras, costs, data-sharing arrangements and outside-system access;
- regular audit reports that disclose misuse and corrective action without exposing active investigations or confidential data;
- a vote on whether the contract should continue after those facts are known.
Internal auditing is better than no auditing. Independent oversight is better than asking the agency operating a mass-surveillance system to grade its own homework.
A transparency portal is useful. A policy dated after the scandal and an audit log that has to be reformatted to reveal its flags is something else.