Activists Allege NYPD's Application of Facial Recognition Interfered with Right to Protest

The NYPD used facial recognition software to identify and track a Black Lives Matter activist, Derrick Ingram, following an alleged assault during a protest. Activists and civil liberties groups criticized the use of the technology as a tool for political targeting and intimidation, noting that the photo used in the lead report appeared to be sourced from social media, potentially violating the department's own policies. The incident prompted the mayor to call for a reassessment of standards for police use of facial recognition.

Black Lives Matter activists alleged being targeted for arrest by New York Police using facial recognition, interfering with their right to protest.

Source: AI Incident Database

Risk classification

  • Primary risk domain: 1 Discrimination & Toxicity
  • Primary risk subdomain: 1.1 Unfair discrimination and misrepresentation

The incident involves the targeted use of surveillance technology against a prominent Black Lives Matter activist, raising significant concerns about discriminatory policing and the targeting of specific political and racial groups.

Additional risk subdomains

  • 4.1 Disinformation, surveillance, and influence at scale: The NYPD's use of facial recognition to track and identify political protesters constitutes a form of state surveillance that can intimidate activists and silence political dissent.
  • 6.5 Governance failure: The incident highlighted a lack of binding municipal regulations, external oversight, and clear standards governing the NYPD's use of facial recognition systems.

Causal factors

  • Entity: Human
  • Intent: Intentional
  • Timing: Post-deployment

The risk and subsequent controversy were caused by the NYPD's intentional decision to deploy facial recognition technology against a political activist, potentially violating their own internal policies.

EU AI Act risk tier

  • Risk tier: 2 High Risk

High Risk: The report describes the use of facial recognition software in law enforcement, which is explicitly classified as a high-risk application under the EU AI Act due to its significant implications for fundamental rights and public safety.

AI system and alleged parties

  • AI system: Clearview AI, NYPD Facial Identification Section software (Clearview AI)
  • AI purpose: Face Recognition; Identification
  • Behaviour type: Tool
  • Alleged developer: Clearview AI
  • Alleged deployer: New York City Police Department
  • Alleged harmed parties: Derrick Ingram, Black Lives Matter activists

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

  • Physical: direct Negligible, indirect Negligible
  • Infrastructure: direct Negligible, indirect Negligible
  • Property: direct Negligible, indirect Negligible
  • Financial: direct Negligible, indirect Negligible
  • Environmental: direct Negligible, indirect Negligible
  • Malicious content: direct Negligible, indirect Negligible
  • Differential treatment: direct Minor, indirect Minor
  • Civil rights: direct Minor, indirect Minor
  • Democracy: direct Negligible, indirect Minor
  • Privacy: direct Minor, indirect Severe
  • Psychological: direct Negligible, indirect Minor
  • Epistemic: direct Negligible, indirect Negligible
  • Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Differential treatment

Reported: The report explicitly describes differential treatment of Black Lives Matter activists who were targeted with surveillance technology.

Directly caused: The NYPD used facial recognition to target and track Derrick Ingram, a prominent Black Lives Matter organizer, leading to a massive police response at his home.

Indirectly caused: The deployment of this technology against a civil rights activist represents differential treatment of political protesters and Black individuals, who are disproportionately targeted by surveillance.

Inferred additional harm: It is highly likely that other Black Lives Matter activists were similarly subjected to targeted surveillance and differential treatment by the NYPD using facial recognition.

Civil rights

Reported: The report explicitly describes violations of civil rights and interference with constitutional rights.

Directly caused: The NYPD's warrantless five-hour siege of Ingram's apartment, initiated using a facial recognition lead, interfered with his constitutional rights and freedom from unreasonable search.

Indirectly caused: The use of facial recognition to identify and target a prominent activist represents an attempt to silence political dissent and violates the civil rights of protesters.

Inferred additional harm: The unregulated use of facial recognition by law enforcement likely leads to broader, unrecorded violations of privacy and civil liberties for numerous citizens.

Democracy

Reported: The report explicitly describes the erosion of democratic norms through the targeting of political dissent.

Indirectly caused: Using advanced surveillance technology, originally intended for fighting terrorism, to target and intimidate political activists undermines the democratic right to protest and free expression.

Inferred additional harm: The lack of democratic oversight and binding regulations on police surveillance tools threatens the rule of law and public trust in democratic institutions.

Privacy

Reported: The report explicitly describes privacy violations related to the sourcing of photos and the use of Clearview AI.

Directly caused: The NYPD obtained and used a photo from Ingram's Instagram page for facial recognition matching, potentially violating its own internal policies.

Indirectly caused: The NYPD's use of Clearview AI, which harvests billions of photos of individuals from the internet without their consent, constitutes a systemic violation of privacy rights.

Inferred additional harm: Thousands of New Yorkers have likely had their privacy compromised through unauthorized facial recognition searches conducted by the NYPD using databases like Clearview AI.

Psychological

Reported: The report describes intimidation tactics and attempts to silence the activist, which caused distress.

Indirectly caused: Derrick Ingram experienced significant distress and intimidation when dozens of tactical officers, police dogs, and a helicopter besieged his apartment for five hours without a warrant based on the facial recognition lead.

Inferred additional harm: It is highly likely that neighbors and other activists in the area experienced anxiety and distress due to the highly visible, militarized police presence in their residential neighborhood.

People affected

  • Occurrences reported: 1
  • People reportedly harmed: 1
  • People reportedly exposed: 1

Potential causes

Management

  • Lack of High-Level Approval: The high-intensity raid was executed without authorization from top leadership.
  • Bypassing Official Channels: Management allowed use of Clearview AI despite denying official contracts.

Technology

  • Use of Uncontracted FRT: NYPD ran thousands of Clearview AI searches without official contracts.
  • Inherent Biases in FRT: FRT has been criticized for wrongful arrests of Black individuals.

Data Inputs

  • Use of Social Media Photos: NYPD used an Instagram photo, violating policy restricting database sources.
  • Unconsented Scraping of Data: Clearview AI collects photos of citizens without their consent.

Human Factors

  • Targeting of Activists: Officers used technology to target and identify prominent protest organizers.
  • Over-reliance on FRT Leads: Officers treated an informational lead as justification for a major raid.

Process and Methods

  • Non-Binding Internal Policy: NYPD guidelines on facial recognition use were internal and non-binding.
  • Lack of External Oversight: No independent review of how FRT matches are generated and analyzed.

Regulatory Environment

  • Absence of City Laws: No municipal laws governed or restricted the police use of surveillance tech.

Information quality

  • Classification confidence: High
  • Reason for confidence: The reports provide consistent, detailed accounts of the specific incident involving Derrick Ingram, including confirmations from the NYPD, statements from the mayor, and reactions from civil rights groups. The role of the facial recognition software as an investigative lead generator is clearly documented.
  • Ambiguities identified: It remains slightly unclear whether the photo used in the lead report was officially sourced from Instagram in violation of NYPD policy, as the NYPD did not clarify this specific detail.
  • Alternative interpretations: The police argue the technology was used as a standard investigative tool for a reported physical assault, rather than as a tool to target political dissent.

The NYPD's use of facial recognition to identify a Black Lives Matter activist led to a local standoff and sparked significant civil liberties concerns. While highlighting domestic privacy and surveillance policy challenges, the incident represents a minor national security impact, confined to local municipal governance and standard policy reassessments.

  • Overall national security impact: Minor
  • Scope: Single nation
  • Primary target: United States
  • Alleged perpetrator: New York City Police Department

Threat characteristics

  • Imminence: Long-term. Reflects ongoing, long-term policy and strategic debates surrounding law enforcement surveillance rather than an active, immediate national security crisis.
  • Autonomy: Human-controlled. The facial recognition system acted strictly as an investigative tool, with human officers retaining full control and making all tactical and arrest decisions.
  • Novelty: Established threat. The use of facial recognition by law enforcement is a well-established practice with known civil liberty risks, not a novel technological threat.

Impact by dimension

  • Physical security: Negligible. No threat to physical systems, critical infrastructure, or kinetic national security assets occurred during this local law enforcement action.
  • Information security: Negligible. No foreign disinformation, state-sponsored intelligence compromise, or classified system breaches were involved in this domestic police incident.
  • Sovereignty: Negligible. The incident involved local municipal law enforcement operations and did not threaten national sovereignty, federal government operations, or constitutional processes.
  • Economic security: Negligible. No strategic technologies were stolen, and there was no impact on national economic stability or critical supply chains.
  • Societal stability: Minor. The incident raised domestic civil liberties and privacy concerns regarding police surveillance of activists, but the impact was localized and manageable within existing legal and standard municipal policy review procedures.
Explore in the interactive Incident Tracker