Government Deployed Extreme Surveillance Technologies to Monitor and Target Muslim Minorities in Xinjiang

A suite of AI-powered digital surveillance systems involving facial recognition and analysis of biometric data were deployed by the Chinese government in Xinjiang to monitor and discriminate local Uyghur and other Turkic Muslims.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.1 Disinformation, surveillance, and influence at scale

The Chinese government uses the IJOP system to conduct coordinated, population-level mass surveillance and social control targeting the Uyghur and Turkic Muslim population in Xinjiang.

Additional risk subdomains

• 2.1 Compromise of privacy by obtaining, leaking or correctly inferring sensitive information: The system systematically collects and aggregates highly sensitive, non-public personal data including biometrics and location trajectories without consent.
• 1.1 Unfair discrimination and misrepresentation: The system is explicitly designed to target, profile, and restrict the movements of ethnic Uyghurs and Turkic Muslims.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The mass surveillance and subsequent detentions are the result of intentional decisions and actions by the Chinese government using the deployed IJOP system.

EU AI Act risk tier

• Risk tier: 1 Unacceptable

Unacceptable Risk: The system is used by a government for pervasive mass surveillance, biometric categorization, and profiling of a population, which violates fundamental rights and is prohibited under the EU AI Act.

AI system and alleged parties

• AI system: Integrated Joint Operations Platform (IJOP)
• AI purpose: Smart Surveillance; Predictive Policing
• Behaviour type: Assistant
• Alleged developer: Chinese government
• Alleged deployer: Chinese government
• Alleged harmed parties: Uyghur people, Turkic Muslim ethnic groups

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Severe. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Substantial
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Severe, indirect Severe
• Civil rights: direct Severe, indirect Severe
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Severe, indirect Severe
• Psychological: direct Negligible, indirect Severe
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Physical

Reported: The report explicitly describes physical harm, including arbitrary detention, forced political indoctrination, and reports of torture and mistreatment in detention camps.

Indirectly caused: Up to one million Turkic Muslims have been detained in political education camps where they face arbitrary detention, restricted movement, and some are subjected to torture and mistreatment.

Inferred additional harm: It is highly likely that thousands of detained individuals have suffered physical injuries, malnutrition, or death due to harsh conditions and torture in the camps, though exact numbers are not quantified.

Differential treatment

Reported: The report explicitly describes systematic differential treatment of ethnic Uyghurs and Turkic Muslims.

Directly caused: The IJOP system is specifically designed and deployed to target, track, and profile the 13 million Turkic Muslims in Xinjiang based on their ethnic and religious identity.

Indirectly caused: The system subjects this specific demographic group to virtual fences, checkpoints, and arbitrary detentions that do not apply to the general Chinese population.

Inferred additional harm: The pervasive profiling has likely institutionalized deep systemic discrimination and social exclusion against Turkic Muslims across China.

Civil rights

Reported: The report explicitly describes massive violations of internationally guaranteed human and civil rights.

Directly caused: The IJOP system directly violates the right to privacy by collecting biometrics, location data, and personal relationships without consent.

Indirectly caused: The system facilitates the violation of the rights to be presumed innocent, freedom of association, movement, expression, and religion, leading to the arbitrary detention of up to one million people.

Inferred additional harm: The complete suppression of civil liberties in Xinjiang has effectively eliminated the ability of 13 million people to exercise any basic human rights without risking detention.

Privacy

Reported: The report explicitly describes massive and systematic privacy violations.

Directly caused: The IJOP system aggregates and analyzes highly sensitive personal data, including DNA, fingerprints, iris scans, blood types, real-time location trajectories, and phone content of millions of individuals without consent.

Indirectly caused: The collection of this data enables police to conduct intrusive home visits and interrogate individuals based on private behaviors like utility usage or communication with family abroad.

Inferred additional harm: The Chinese government has likely expanded this biometric and surveillance database to cover the entire population of Xinjiang and potentially other regions, completely obliterating any expectation of personal privacy.

Psychological

Reported: The report explicitly describes severe psychological distress, trauma, and constant fear caused by 24/7 surveillance and detention.

Indirectly caused: Detainees like [PERSON_002] experienced severe trauma from being handcuffed, stripped of their belongings, locked in monitored rooms, and forced to undergo political indoctrination for months.

Inferred additional harm: Widespread psychological trauma, anxiety, and constant fear likely affect the entire population of 13 million Turkic Muslims living under pervasive, round-the-clock surveillance.

People affected

• Occurrences reported: 1
• People reportedly harmed: 1000000
• People reportedly exposed: 13000000

Potential causes

Management

• Priority on Pervasive Social Control: Government prioritizes absolute social monitoring over individual human rights.
• Officer Performance Scoring: App scores officials on task completion, incentivizing aggressive policing.
• Corporate Complicity in Repression: State-owned contractors build and supply surveillance tech to the government.

Technology

• Automated Trajectory Tracking: System tracks location of phones, IDs, and vehicles to find deviations.
• Unreliable AI Facial Recognition: Scans faces at checkpoints, flagging individuals for immediate investigation.
• Simple Conditional Logic Alerts: Rigid 'if-then' rules generate false positives on normal daily behaviors.

Data Inputs

• Intrusive Biometric Harvesting: Massive collection of DNA, fingerprints, and irises without consent.
• Everyday Behavior Data Ingestion: System logs normal activities like utility usage and package deliveries.
• Tracking of Personal Relationships: Flags relations to people with new phones or foreign links as suspicious.

Human Factors

• Coerced Officer Data Entry: Officials under high pressure and surveillance to enter data or face punishment.
• Complete Lack of Citizen Consent: Citizens are forced to provide personal data and undergo biometric scans.
• Over-reliance on System Flags: Officers blindly investigate and detain based on automated app alerts.

Process and Methods

• Strike Hard Campaign Mandates: Systematic drives to maximize detentions of those deemed 'untrustworthy'.
• Intrusive Home Surveillance Visits: Cadres forced to stay in homes to collect data and log personal information.
• Arbitrary Investigative Missions: App triggers police missions based on 'micro-clues' like high power usage.

Regulatory Environment

• Absence of Privacy Protections: No legal limits on state biometric collection or data aggregation in China.
• Lack of Judicial Oversight: No independent courts to challenge arbitrary surveillance or detentions.
• State-Controlled Press and Civil Society: Absence of free press prevents public accountability for surveillance abuses.

Information quality

• Classification confidence: High
• Reason for confidence: The reports provide highly detailed, first-hand technical analysis of the IJOP app obtained through reverse-engineering, alongside credible testimonies from affected individuals and extensive documentation of the system's deployment and impacts.
• Ambiguities identified: The exact algorithmic complexity of the central IJOP system (beyond the app interface) and the degree to which it uses advanced big data algorithms versus simple conditional rules remain somewhat unclear.
• Alternative interpretations: None. The evidence of systematic mass surveillance and human rights violations is overwhelming and consistent across multiple independent investigations.

The Chinese government's deployment of the IJOP system in Xinjiang represents a critical, first-of-its-kind national security and human rights crisis. By integrating AI-driven mass surveillance with predictive policing, the state has systematically violated the civil liberties of 13 million Turkic Muslims, leading to the arbitrary detention of up to one million people.

• Overall national security impact: Critical
• Scope: Single nation
• Primary target: China
• Alleged perpetrator: Chinese government

Threat characteristics

• Imminence: Long-term. The system represents an ongoing, deeply entrenched strategic surveillance capability deployed since late 2016.
• Autonomy: Human-supervised. The AI system autonomously aggregates data and flags 'suspicious' behavior, but human police officers execute the physical investigations and detentions.
• Novelty: First-of-its-kind. First documented case of a nation-state deploying a fully integrated, AI-driven mass surveillance and predictive policing system to control an entire ethnic minority.

Impact by dimension

• Physical security: Minor. While not a kinetic military attack, the system directly leads to physical arbitrary detention and reports of torture and mistreatment in political education camps for up to one million people.
• Information security: Severe. Represents an unprecedented deployment of mass surveillance, aggregating massive amounts of sensitive biometric, location, and behavioral data without consent.
• Sovereignty: Minor. The system automates police profiling and investigations, deeply integrating AI into regional governance and law enforcement, though it is state-sanctioned.
• Economic security: Minor. Causes localized economic harm through the loss of livelihood for hundreds of thousands of detained individuals, but does not threaten overall state economic stability.
• Societal stability: Critical. Critical impact on societal stability and human rights, systematically profiling and suppressing 13 million Turkic Muslims and leading to the arbitrary detention of up to one million people.