The Database He Aimed at Her

You know that part. I have written that part twice and I am tired of it.

Here is the part I have not written. According to 404 Media, the deputy in question is Michael Fultz of the Brevard County Sheriff's Office in Florida. He was hired in 2024. In 2025 his agency named him Deputy of the Year. The complaint that eventually unspooled all of this was filed the same day as the ceremony.

That detail does more work than any argument I could make about surveillance architecture. The standard defense of these systems is the bad-apple defense: a few unfit officers slipped through, tighten the screening, move on. But Fultz was not a slip. The same institution that could not detect him running his ex-girlfriend's plate handed him a plaque for being the best it had. I don't know what Brevard gives that award for — arrest counts, stop volume, a commander's discretion — and as far as I can tell neither does anyone outside the building. That is a smaller version of the same problem.

And notice what did not fail. In my earlier pieces on this pattern I leaned on the claim that nobody was reading the logs. That was accurate then and it is the wrong complaint now, because in Brevard County the logs were read. There was an audit. It pulled his access records, established that he had been in the system off duty on his agency-issued phone, and confirmed he had tracked her movements while he was denying it. The paper trail worked exactly as designed. Every control the vendor and the agency would point to on a slide was present and functioning.

Look at what those functioning controls actually are.

The first is the reason field. When Fultz queried his ex, he entered "investigation." That is the mechanism. The safeguard standing between a nationwide movement-tracking network and its misuse is a text box that the person doing the misusing fills in himself, and a one-word lie clears it. This is not oversight. It is self-certification with a database schema — the honor system, wearing a lanyard.

And "investigation" is not a clever lie. It is the house style. When the ACLU of Massachusetts obtained Flock network audits spanning roughly 7,000 agencies, it found officers routinely entering exactly that — "investigation," "susp" — vague, tautological, substanceless. Fultz did not defeat the control. He filled it out the way it is normally filled out. One of those audits logged more than 450,000 searches of the national database in a single thirty-day window. Case-by-case review of that is not a resourcing problem. It is arithmetic.

The second is the audit log, which is not a control at all. An audit log is evidence. It is a record of what already happened, retrievable by someone who already suspects. It never once told anyone what was happening. It sat there, complete and accurate and inert, until a human being outside the system filed a complaint and gave someone a reason to go look. Every abuse that nobody complains about is also fully logged, permanently, in a file no one will ever open.

The third is the disciplinary process, and this is the one that should end the conversation. Fultz resigned before he could be fired. The agency's own closing language: although termination is warranted for the misconduct, because he is no longer employed there, the investigation is closed. Referred to file. The accountability process has a quit button, and the subject of the investigation is the one holding it. He walked out with the finding unenforced and, as far as the reporting shows, no criminal charge — and the plate-reader abuse was the mild item on a list that, per 404 Media, also included a Nazi salute and holding a gun in a woman's mouth.

Here is what those three have in common. The reason field is self-reported. The audit is the agency examining itself. The evaluation that made him Deputy of the Year is the agency grading itself. The discipline is the agency judging itself, right up until the moment he removed himself from its jurisdiction and it agreed that this settled the matter.

Something external did work here, and this piece would be lying if it didn't say so. A woman filed a complaint. 404 Media published. Both did more than every internal control combined.

So the claim is not that no outside input exists. It is that there is exactly one, and look at what it costs. The sole external trigger this system accepts is a victim who already knows she is being tracked, who can substantiate it well enough to be believed, and who is willing to carry that complaint into the building that employs her stalker. That single fact explains everything else. It explains why the audit log sat inert — it needs an accuser to activate. It explains how the award and the complaint could be dated the same day — nothing internal was looking. And it explains the part that should bother you most: she cannot audit her own plate. There is no interface where she can ask who has been looking for her. She is simultaneously the only mechanism that can start an investigation and the only party with no access to the record.

She is not going to get one, either, because the entity that would have to build it is not the sheriff.

Brevard County did not design the reason field. Flock did. An unvalidated free-text box is a product decision — friction low enough to sell into thousands of agencies — and the same schema ships to every customer. There is no regulator of that schema. No jurisdiction voted on the text box. When a county commission holds a hearing about license plate readers, the thing it is actually approving was designed in Atlanta and is not on the agenda.

The network geometry makes it worse than a county story. Nearly 90,000 Flock cameras were deployed nationally as of last summer, and roughly three-quarters of the law enforcement agencies using them have enabled National Lookup — the checkbox that trades your cameras into the pool in exchange for searching everyone else's. A Brevard deputy can therefore query movement records collected in states that never held a hearing on any of this. Fultz's ex-girlfriend could have moved anywhere in the country. The database goes with her.

Which is why "she cannot audit her own plate" is not an oversight gap somebody forgot to close. There is no entity that could grant her that access if it wanted to. The agency does not hold the network. The vendor does not answer to her — its customer is the police department, and its product is the movements of people who are party to nothing. The closed loop is not the sheriff's office. The sheriff's office is one node inside it, and closed loops do not detect their own distortion. They give it an award.

One test before I let this go. The Nazi salute and the gun in a woman's mouth are the correct facts to report, and they are supplying most of this piece's emotional temperature while having nothing to do with the mechanism. So take them out. Suppose Fultz had done nothing but run her plate and type "investigation." Every structural claim above survives intact: the self-certifying field, the inert log, the internal audit, the quit button, the absent woman. The monstrousness is why you heard about this one. It is not why it happened. Treating it as the story is the bad-apple defense in a worse costume.

The cameras in Brevard County are still up. The reason field is still a text box.

Fultz's personnel file now holds two documents: a Deputy of the Year commendation and an administrative finding of egregious misconduct, closed without effect. They were issued about a year apart by the same office, under the same standards, and I do not think either one is wrong about the system that produced it.