Protocol | China

China sours on facial recognition tech

State media and new regulations are going after dodgy company practices. Government still gets a free pass.

China sours on facial recognition tech

A screen shows visitors being filmed by AI (artificial intelligence) security cameras with facial recognition technology at the 14th China International Exhibition on Public Safety and Security at the China International Exhibition Center in Beijing on October 24, 2018.

NICOLAS ASFOURI / Contributor/ Getty Images

Hundreds of thousands of surveillance cameras throughout China have been hoovering up facial recognition data without notifying the people attached to the faces. Now, the companies behind the tech are finally under the microscope after a blistering recent exposé — one carried by a major mouthpiece for Beijing, the same government known for its own untrammeled intrusions into private life.

On March 15, China Central Television broadcast its annual consumer rights gala, a long-running annual special that has uncovered many high-level consumer frauds. One segment revealed that facial recognition security cameras located at chain stores nationwide have been picking up shoppers' personal information without their knowledge or consent. The revelations ignited a furious backlash against the companies. "Two characters," went one popular online comment about the findings: "wu chi (无耻)," meaning "shameless." It's another instance of grassroots pushback against surveillance tech in China, a global leader in surveillance research as well as in deployment.

The central irony went unremarked: that Beijing has become both the critic and perpetrator of mass surveillance.

Caught in the act

In the 10-minute investigative segment, undercover reporters talked to surveillance camera providers who proudly exhibited the power of their facial recognition systems. Within seconds of encountering a shopper, cameras installed in retail stores could recognize and document that person's, age, ethnicity and even emotional state. The cameras also successfully identified return customers, allowing sellers to call up purchase histories in real time.

Such technologies have been branded "VIP customer identification," promising to use facial recognition to help retailers identify their frequent clients in order to serve them better. In fact, the cameras collect and store information from everyone who's ever stepped in a store, regardless of status.

The website of Ovopark, one of the firms exposed for selling surveillance cameras and software, once proudly noted that this technology had been sold to retailers including international brands Kohler and MaxMara, both of which have operations in China. (That assertion was no longer posted as of Monday, the day the CCTV take-down aired.) In a blog post published in November 2020, Ovopark, a Suzhou-based startup founded in 2014 that raised $12 million in its series B round last May, said its cameras work covertly in situations where customers wouldn't want their biometric data to be collected. It gave the example of a real estate sales office. "Customers there will never agree to have their facial recognition data collected, so [we offer] Facial Recognition Technology for Non-Cooperative Individuals at a Distance, designed for commercial environments," the blog post reads. Ovopark has since published a vague statement on its website saying the company is investigating the issues the investigation raised.

Kohler also released a statement saying it has ordered the immediate removal of all surveillance cameras from its stores in China. Kohler and retailer MaxMara separately claimed they used the cameras only to count customer traffic.

It's an open question how much CCTV's latest exposé will change corporate behavior. The surveillance industry is thriving in China, which combines abundant engineering talent with a relatively lax environment for deployment. According to data analytics firm Qichacha, over 7,000 companies in China provide services or equipment related to facial recognition.

Some of China's AI unicorns are getting in on the action. CloudWalk, one of China's "four AI dragons," currently seeking approval for a domestic IPO, said in a Sep. 2018 press release that it was helping equip several prominent shopping malls with tech that performed functions similar to Ovopark's. Cloudwalk boasted of an innovative way of obtaining facial recognition data: by prompting customers to participate in "face swaps" and "celebrity look-alike" games to capture their faces, then asking for their phone numbers in exchange for cash incentives.

Big brother Beijing

Private companies haven't vaulted China to its leading status in facial recognition tech by themselves. National tech policies and standards have encouraged its research and commercial implementation since 2015. In a 2017 blueprint to "facilitate the development of next-generation AI industry," China's Ministry of Industry and Information Technology said that by 2020 it aimed to support recognition that would work on "people from different regions" and achieve recall rates of 97% and recognition rates of 90% "under complex/dynamic conditions."

Crucially, China's state surveillance projects have also offered industrial applications for technologies once only used in labs. "Sharp Eyes," a controversial nationwide program that aimed to cover all of China's public spaces with public safety cameras by 2020, has been a boon for the surveillance tech industry. "'Sharp Eyes' facilitated the exponential growth of the video surveillance market as part of the larger security industry," Beijing-based think tank EqualOcean wrote in a market analysis. "It has significantly stimulated demand for high-resolution cameras, facial recognition cameras and other video surveillance equipment."

While such projects are often officially for public safety purposes, they're frequently abused to infringe on individual privacy. For example, surveillance cameras have become ubiquitous in the western region of Xinjiang to monitor and suppress ethnic minorities, including Uyghurs and Kazakhs.

Hints of a movement

Given the consequences for political dissent, it's risky for Chinese people to speak out against state-sponsored or state-imposed surveillance projects. But pro-privacy sentiment is still gathering steam. In a 2019 public survey conducted by a Chinese think tank, over 70% of respondents said they worried about their facial recognition data being leaked. Over 40% said the use of these technologies should be limited in certain situations.

Most ire at privacy violations is directed towards private companies. In 2019, a law professor in the tech-friendly city of Hangzhou sued a local zoo for forcing him to submit facial recognition data to gain access. He later won the case, widely regarded as the first facial recognition lawsuit in China. There are regular conversations on social media about the ubiquitousness and invasiveness of surveillance cameras.

CCTV's exposé shows the state is well aware of these societal concerns. Beijing genuinely concerned with privacy abuses and happy to crack down on them — when the private sector is the perpetrator. In 2020, China's Ministry of Industry and Information Technology tested 520,000 mobile apps for their privacy protection practices, according to the minister. Many popular apps owned by China's Big Tech, including Tencent and JD, were ordered to make changes.

But the state has been quiet about how it uses the surveillance tech the private sector has developed for its own purposes. CCTV didn't say whether facial recognition cameras or similar equipment were being deployed by government actors.

Regulation is here to help, sometimes

A new law likely to be passed in 2021 will help government further regulate the commercial uses of facial recognition. Article 27 of the draft Personal Information Protection Law states that "image collection or personal identity recognition equipment" shall only be installed in public venues "as required to safeguard public security and observe relevant State regulations," adding that "clear indicating signs shall be installed."

A major question for now is what constitutes a "public venue."

"Even though [shopping malls] may be privately owned, you've got the general public running in and out. It's not like it's a private club or a person's house," Jamie Horsley, a visiting lecturer at Yale Law School and an expert on Chinese administrative law, told Protocol. She pointed to 2016 regulation that includes "malls (shops), bookstores" and many more retail spaces to the definition of "public venues."

The draft law, Horsley said, primarily regulates private companies, not governments. Under the new rules, facial recognition can still be deployed for public security purposes and when required by "relevant regulations." That allows authorities to keep their police surveillance projects.

There is a provision in the law that restricts government use of facial recognition as well. But actually enforcing it will be difficult. Chinese courts lack judicial independence and rarely accept cases brought against the state.

Regardless, the forthcoming rules, which adopt provisions from existing privacy laws around the world, could be the beginning to the end of China's facial recognition free-for-all. "The government is very interested in social stability, and so they recognize that how they handle personal data ... is now an issue at the forefront of people's minds," Horsley said. "[Even] if you are a powerful government agency."

Clarification: This article has been updated to clarify comments made by Yale Law School lecturer Jamie Horsley.

Diversity Tracker

Tech company diversity reports are more important than ever

More tech companies released their reports following the murder of George Floyd in 2020.

Tech companies started reporting their own numbers around 2014.

Photo: SCC/Getty Images

Years after most tech companies had been publishing diversity reports, Snap's CEO Evan Spiegel remained steadfast about not releasing his company's numbers. "I've always been concerned that releasing that data publicly only reinforces the perception that tech is not a place for underrepresented groups," he said during an all-hands in June 2020 after years of only releasing a report internally.

A few months later, Snap, one of the most vocal diversity report holdouts, became part of a second wave of companies that started releasing diversity data. Following the murder of George Floyd in 2020, others like Tesla and Oracle — which was facing a shareholder resolution on more transparency — also publicly released diversity reports. Netflix, although it had been posting diversity data on its jobs page quarterly since 2013, also released its first formal inclusion report in 2021.

Keep Reading Show less
Biz Carson

Biz Carson ( @bizcarson) is a San Francisco-based reporter at Protocol, covering Silicon Valley with a focus on startups and venture capital. Previously, she reported for Forbes and was co-editor of Forbes Next Billion-Dollar Startups list. Before that, she worked for Business Insider, Gigaom, and Wired and started her career as a newspaper designer for Gannett.

If you've ever tried to pick up a new fitness routine like running, chances are you may have fallen into the "motivation vs. habit" trap once or twice. You go for a run when the sun is shining, only to quickly fall off the wagon when the weather turns sour.

Similarly, for many businesses, 2020 acted as the storm cloud that disrupted their plans for innovation. With leaders busy grappling with the pandemic, innovation frequently got pushed to the backburner. In fact, according to McKinsey, the majority of organizations shifted their focus mainly to maintaining business continuity throughout the pandemic.

Keep Reading Show less
Gaurav Kataria
Group Product Manager, Trello at Atlassian
Diversity Tracker

The tech industry needs to standardize diversity reports

No tech firm reports diversity the same way. That makes tracking progress harder.

Tech lacks a standard, comprehensive method of reporting and presenting employee demographic data.

Illustration: Christopher T. Fong/Protocol

Diversity reports don't always tell the full story of what representation looks like at tech companies.

The earliest versions of tech industry diversity reports created a binary narrative about diversity and inclusion, according to Bo Young Lee, Uber's chief diversity officer. The reports, which tech companies began consistently releasing in 2014, communicated that "diversity is about gender representation, and it's about race and ethnicity, and it's about nothing else," Lee told Protocol.

Keep Reading Show less
Megan Rose Dickey

Megan Rose Dickey is a senior reporter at Protocol covering labor and diversity in tech. Prior to joining Protocol, she was a senior reporter at TechCrunch and a reporter at Business Insider.

Protocol | Workplace

Introducing Protocol’s Diversity Tracker

Tech companies talk a good game on diversity. Our new tracker shows where there's progress – and where there isn't.

Our tracker contains historical and current diversity data for the most powerful tech companies.
Illustration: Christopher T. Fong/Protocol
Protocol team

A new media company from the publisher of POLITICO reporting on the people, power and politics of tech.

Protocol | Workplace

Productivity apps can’t stop making money

ClickUp had one of the biggest Series C funding rounds ever. Here's how it matches up to the other productivity unicorns.

ClickUp made $400 million in its series C funding round.

Photo: ClickUp

Productivity platform ClickUp announced a milestone today. The company raised $400 million, which is one of the biggest series C funding rounds in the workplace productivity market ever. The round, led by Andreessen Horowitz and Tiger Global, put the private company at a $4 billion valuation post-money.

In case it's not clear: This is a massive amount of money. It shows how hot the productivity space is right now, with some predicting the market size could reach almost $120 billion by 2028. In a world of hybrid workers, all-in-one tool platforms are all the rage among both startups and productivity stalwarts. Companies everywhere want to escape tool overwhelm, where work is spread across dozens of apps.

Keep Reading Show less
Lizzy Lawrence

Lizzy Lawrence ( @LizzyLaw_) is a reporter at Protocol, covering tools and productivity in the workplace. She's a recent graduate of the University of Michigan, where she studied sociology and international studies. She served as editor in chief of The Michigan Daily, her school's independent newspaper. She's based in D.C., and can be reached at llawrence@protocol.com.

Latest Stories