I Saw a Shiny Thing

Asked by investigators why he had used Florida's law-enforcement databases and a license plate reader network to track a woman he had met once on a film set, Deputy Lamar Roman said: "I mean, I saw a shiny thing, teasing and all that."

And then, in nearly the same breath: "I knew that when I put that in, I was like 'Fuck.'"

Put those two lines next to each other, because together they demolish the standard explanation for how this keeps happening.

He knew. Not in retrospect — and I'll grant that this is an interview sentence, a man narrating months later a moment he now understands, so read it as a reading. But it is the reading he handed them: at the keystroke, the knowledge was already fully present, and it changed nothing. Whatever stood between Roman and that woman's real-time location, it was not a gap in his understanding.

Which matters, because a gap in understanding is the only kind of failure these institutions know how to fix. The body camera footage 404 Media obtained includes an investigator telling the victim that officers had been repeatedly instructed not to misuse the databases for personal reasons. Repeatedly instructed. That is the safeguard. That is the entire control surface on a system that converts one login into a live feed on any driver in the state: a reminder, delivered at intervals, to people who have already proven that reminders are not the binding constraint.

But knowledge transfer was never training's only job. The other job — the real one — is to make you believe you will be caught. And that is where Roman's confession does its actual damage, because he knew the rule and correctly predicted the consequence. He typed it anyway because nothing was ever going to notice.

Nothing did. The Washington Post, analyzing police and court records, identified at least fifty officers charged with or accused of using plate reader networks for unauthorized purposes — in twenty-six of those, tracking wives, girlfriends, exes, exes' new partners, or women they wanted to meet. Fifty found, and the audit logs did not find them. Recklessness did. Roman surfaced because he sped, passed cars haphazardly, and nearly hit a truck head-on — in front of his own body camera — while closing distance on someone who never agreed to be found. A system whose abuse detection depends on the abuser being spectacular is not detecting abuse. It is collecting anecdotes.

Now sit with the noun. Shiny thing. He is not describing a person. He is describing something he spotted and wanted and reached for, and the grammar is the grammar of acquisition. The surveillance stack did not put that view in his head. Men who see women as objects they happened to notice are not a new development. What is new is that we built an infrastructure that agrees with him — point it at a shiny thing and it returns a home address, a vehicle record, and a stream of pings marking where she is right now. The system's neutrality was never innocence. Neutrality means it agrees with whoever is typing.

Then comes the part that should end anyone's remaining faith in internal accountability. On the footage of the arrest, a detective tells Roman, "you'll get past this bro." Later, investigators urged the victim not to post about what happened on social media.

Notice the direction the care flows. The institution's protective reflex fired exactly as designed — just not for her. It fired first for him, then for itself. The message delivered to the officer is that this is survivable. The message delivered to the woman he hunted is that the problem, at this stage, is visibility.

And here is the fact that reframes all of it: the data was never the department's. Roman chained together state DMV and criminal-justice databases with Guardian, an automated plate reader product sold by a private vendor. The largest of these networks, Flock Safety, runs tens of thousands of cameras under contract to thousands of agencies, and a department that joins can elect to share its reads with named neighbors, with its whole state, or with the entire national network. Mountain View, California pulled its cameras after discovering its data had gone to hundreds of agencies, federal ones included, without permission. This is a nationwide record of ordinary movement, assembled from public roads, enclosed as a commercial product, and retailed by subscription.

Which tells you who counts. Of the Post's fifty cases, forty-six ran on Flock — and Flock had acknowledged roughly fifteen. The party holding the audit logs is the party doing the counting, and it counted low by a factor of three. That is not a department shrugging. That is the accountability layer itself being a vendor with a sales motion.

So the fix was never more training, and everyone involved has enough evidence by now to know it. Exhortation is what you reach for when you are unwilling to change the environment. The environment is what actually decides. Make the abuse expensive at the point of the keystroke — no plate onto a hotlist without a case number and a second human signature; every query attributed and audited by a body outside both the department and the company, because self-reported vendor numbers have now been measured against reality and lost; DPPA penalties that actually land. Do that and the reminders become unnecessary, because the frictionless act is no longer frictionless.

Until then, the design holds and the outcome is not a mystery. Roman already told us how it works, with a candor his department will spend years trying to walk back.

He saw a shiny thing, and there was nothing in the way.