Two stories ran in opposite directions this month and landed in the same place. The industry spent a decade wiring everything together and collecting everything it could – and this month the bill for that came due, in city halls, in Congress, and in a Claroty scan of 750,000 data-center assets. The quiet throughline across the reads below is that the value isn’t in connecting or collecting more. It’s in the unglamorous work of governing, logging, and actually seeing what you already turned on.
1. Flock makes its guardrails mandatory – after the backlash
Flock is shortening data retention from 30 days to seven, forcing every search to carry a case number, and locking users out when an audit tool flags abnormal behavior – all mandatory by Jan. 1. It follows 50+ agencies dropping the cameras this year and Savannah PD firing six people for misuse. The Institute for Justice called the changes “window dressing” from a company “in panic mode.”
Teldio Perspective: The tell isn’t the cameras – it’s that the audit log, the case-number scoping, and the short retention were optional until the backlash made them not. Automation that’s logged, scoped, and permissioned from day one is what survives scrutiny. “Collect it all and sort it later” is now a liability, not a feature.
2. New York’s “Ban the Scan” clears a majority
An NYC bill with majority support in the City Council would bar public-facing venues from running facial recognition without consent, a written data policy, and a private right to sue. Madison Square Garden, accused of using it to bar hundreds of opposing counsel lawyers, is the cautionary example everyone’s citing.
Teldio Perspective: For an operations leader, the lesson isn’t “avoid biometrics,” it’s “settle the governance before you deploy, not after the filing.” Route the right event to the right person and keep the record – don’t quietly bank faces you’ll later have to defend in court.
3. Almost 90% of data-center BMS talk over insecure protocols
(Facilities Dive / Claroty, Jul 29)
Claroty analyzed ~750,000 data-center assets: 40% of critical power distribution and 30% of HVAC sit one hop from a risky connection. The surveillance debate is about what we’re collecting; this is the bill for what we already connected.
Teldio Perspective: You can’t secure or act on what you can’t see. Device health and protocol visibility are the boring first step that has to come before any “AI-powered” anything. This is the OT/BMS surface where monitoring earns its keep, and it’s exactly the gap that most estates can’t currently render on a single screen.
4. HID, Soloinsight and CTS launch an integrated visitor kiosk
Document authentication, a facial liveness check, badge printing, host notification – a tidy visitor package. The line that matters is the last one: it “integrates with existing access control, HR databases and IT platforms without replacing core hardware.”
Teldio Perspective: The kiosk is the easy 20%. Wiring identity into the ACS, the directory, and the systems that already run the building is the 80% where deployments actually live or die. When a vendor says “integrates with your existing stack,” that clause is the whole project – and it’s rarely as turnkey as the datasheet.
5. Genetec’s State of Physical Security: convergence is here, sharing isn’t
Across 7,368 professionals surveyed, 60%+ now run unified or integrated systems but only 25% share that security data with other departments. AI interest doubled year over year, pushing video modernization out of the top two priorities for the first time.
Teldio Perspective: Convergence makes the integration layer matter more, not less – connecting the systems is step one; getting the data to the people who can use it is where most stall. Genetec’s own Andrew Elvish said the honest part: “there’s nothing worse than acquiring tech for the sake of acquiring tech.” (Their 2026 report, published late last year – included for the trendline, not as this week’s news.)
6. SAGE Integration buys Vital Installs and sudoVision
Another integrator roll-up, aimed squarely at accounts “where physical security, resilient networks and emerging technologies intersect.”
Teldio Perspective: Every acquisition inherits a messier, multi-vendor estate. Consolidation doesn’t shrink the integration problem; it concentrates it under one roof and raises the premium on unifying what’s already installed rather than ripping it out.
What it adds up to
The pitch is shifting under everyone’s feet from “we can connect everything” to “we can connect it, log it, and prove who did what.” The systems are already talking to each other; the open question this fall is whether anyone can audit the conversation. Which of your integrations could survive an audit tomorrow?
Leave a Reply