A man was falsely arrested for theft after police used facial recognition software to identify him from surveillance footage. Despite having a clear alibi—being at a hospital for his son's birth—the man was held in jail for months. The prosecution relied on the facial recognition match and a suggestive eyewitness identification, eventually forcing the man to take a plea deal to secure his release.
A man was arrested for theft of socks from a TJ Maxx store under the guise of an eyewitness ID case, after the local police asked the store's security guard to confirm the facial recognition match produced using surveillance footage, despite him having an alibi at the time of the theft.
Risk classification
- Primary risk domain: 1 Discrimination & Toxicity
- Primary risk subdomain: 1.3 Unequal performance across groups
The incident involves a facial recognition system that exhibits unequal performance and higher error rates for non-white individuals, leading to the wrongful arrest of a Black defendant.
Additional risk subdomains
- 7.3 Lack of capability or robustness: The facial recognition system failed to perform reliably under real-world conditions, generating a false match from low-quality surveillance footage.
- 5.1 Overreliance and unsafe use: Police and prosecutors exhibited overreliance on the AI system, maintaining an 'undying faith' in its accuracy despite a clear alibi.
Causal factors
- Entity: AI
- Intent: Unintentional
- Timing: Post-deployment
The incident was triggered by an incorrect match generated by the facial recognition AI system post-deployment, which was an unintentional and unexpected outcome of the identification process.
EU AI Act risk tier
High Risk: The report describes the use of facial recognition in law enforcement applications, which is explicitly listed under High Risk ('Law enforcement applications, including facial recognition').
AI system and alleged parties
- AI system: None named
- AI purpose: Face Recognition; Identification
- Behaviour type: Tool
- Alleged developer: unknown
- Alleged deployer: New York Police Department
- Alleged harmed parties: unknown
Harm severity
Severity ratings are based on this scale.
Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.
- Physical: direct Negligible, indirect Negligible
- Infrastructure: direct Negligible, indirect Negligible
- Property: direct Negligible, indirect Negligible
- Financial: direct Negligible, indirect Negligible
- Environmental: direct Negligible, indirect Negligible
- Malicious content: direct Negligible, indirect Negligible
- Differential treatment: direct Minor, indirect Substantial
- Civil rights: direct Minor, indirect Minor
- Democracy: direct Negligible, indirect Negligible
- Privacy: direct Minor, indirect Negligible
- Psychological: direct Negligible, indirect Minor
- Epistemic: direct Negligible, indirect Negligible
- Child sexual exploitation and abuse: direct Negligible, indirect Negligible
Differential treatment
Reported: Yes
Directly caused: The AI system generated a false match for the unnamed Black client, subjecting him to wrongful arrest and prosecution.
Indirectly caused: The systemic use of facial recognition disproportionately exposes Black and minority communities to higher rates of false identification and wrongful arrests.
Civil rights
Reported: Yes
Directly caused: The unnamed client's civil liberties were severely violated through wrongful arrest and six months of unjustified incarceration based on a false AI match.
Indirectly caused: The prosecution used the false AI match to pressure the defendant into a coerced misdemeanor plea deal, violating his right to a fair trial.
Privacy
Reported: Yes
Directly caused: The client's face was scanned and processed by the facial recognition system using surveillance footage without his consent.
Inferred additional harm: The widespread, unregulated use of facial recognition databases by law enforcement likely violates the privacy rights of thousands of citizens whose photos are searched without consent.
Psychological
Reported: Yes
Indirectly caused: The unnamed client experienced significant distress and pressure, spending six months in jail away from his newborn son, which ultimately coerced him into accepting a false plea deal.
Inferred additional harm: It is highly likely the individual suffered long-term psychological trauma, anxiety, and distress from being wrongfully incarcerated and separated from his family during the birth of his child.
People affected
- Occurrences reported: 1
- People reportedly harmed: 1
- People reportedly exposed: 1
Potential causes
Management
- Inadequate Operational Oversight: No independent validation or strict accuracy thresholds enforced by leadership.
- Discretionary Disclosure Policy: Prosecutors are instructed to use discretion rather than mandatory disclosure.
Technology
- Algorithmic Demographic Bias: Higher error rates for dark-skinned individuals, women, and young people.
- Inherent Algorithmic Flaws: Even top algorithms fail frequently when analyzing low-quality images.
Data Inputs
- Grainy Surveillance Footage: Low-resolution, poorly lit security camera images hinder accurate matches.
- Unregulated Probe Images: Police use celebrity photos or sketches instead of actual suspect photos.
Human Factors
- Suggestive Human Identification: Police text a single mugshot to a witness, prompting biased confirmation.
- Over-reliance on AI Outputs: Investigators and prosecutors assume the algorithm is always correct.
Process and Methods
- Lack of Mandatory Disclosure: Police and prosecutors hide the use of facial recognition from defense teams.
- Plea Bargain Pressure: Innocent suspects accept plea deals to escape jail, avoiding trial testing.
Regulatory Environment
- Absence of National Standards: Few federal regulations or strict rules govern law enforcement use of AI.
- Lack of Legal Safeguards: No consistent legal requirements to turn over alternative candidate matches.
Information quality
- Classification confidence: High
- Reason for confidence: The reports provide clear, detailed accounts of the specific incident involving the Bronx public defender's client, including the timeline, the nature of the AI's failure, and the legal outcomes. The role of the facial recognition software is explicitly stated and corroborated across both reports.
- Ambiguities identified: The exact name of the specific facial recognition software vendor used in the Bronx case is not explicitly named, though the NYPD's Facial Identification Section is mentioned.
- Alternative interpretations: None. The facts of the wrongful arrest and the role of the facial recognition match are clear.
A domestic law enforcement incident where facial recognition software generated a false match, leading to a wrongful arrest and coerced plea deal. While raising significant civil rights, privacy, and algorithmic bias concerns, the national security implications are minor and manageable within standard legal and domestic policy frameworks.
- Overall national security impact: Minor
- Scope: Single nation
- Primary target: United States
- Alleged perpetrator: NYPD
Threat characteristics
- Imminence: Long-term. The incident reflects ongoing systemic challenges with law enforcement technology rather than an active, imminent crisis.
- Autonomy: Human-controlled. The AI acted as an investigative tool, with human police officers and prosecutors making all final arrest and prosecution decisions.
- Novelty: Established threat. Facial recognition false positives and algorithmic bias in policing are established and well-documented issues.
Impact by dimension
- Physical security: Negligible. No physical security threats, kinetic attacks, or critical infrastructure compromises occurred in this domestic law enforcement incident.
- Information security: Negligible. No intelligence compromise, classified data theft, or foreign information warfare operations were involved.
- Sovereignty: Negligible. While involving local law enforcement, the incident does not threaten state sovereignty or core federal government functions.
- Economic security: Negligible. No strategic technology theft, economic manipulation, or threats to critical supply chains were reported.
- Societal stability: Minor. The incident represents a serious civil rights violation and algorithmic bias leading to wrongful arrest, but its national security impact remains minor and localized.