Hikvision

Technical capabilities

Hikvision develops video-surveillance hardware (IP cameras, network video recorders, thermal cameras), embedded video-analytics software, and large-scale video-management systems. Product capability includes real-time face recognition, license-plate recognition, behavior analytics, age and gender estimation, and crowd-density analysis.

IPVM’s November 2020 disclosure identified an ethnicity-classification feature in Hikvision software with a documented “Uyghur” alarm category, designed to flag Uyghur faces in camera feeds. The feature was the subject of repeated reporting between 2018 and 2021. Hikvision publicly stated removal of the feature from its standard product line after disclosure.

Documented use

Hikvision equipment is documented at scale in Xinjiang surveillance infrastructure:

• Procurement records and IPVM analysis: Hikvision and Dahua won an estimated US 1.2 billion in Xinjiang Public Security Bureau contracts between 2016 and 2018, including for “Predictive Police Cloud Platform” and Integrated Joint Operations Platform infrastructure.
• Camera installations at Uyghur internment camps, mosques, and ethnic-minority neighborhoods, documented by IPVM, the Australian Strategic Policy Institute (ASPI), and BuzzFeed News.
• Deployment by Iranian authorities, per IPVM and the Wall Street Journal, for monitoring of protesters during the 2022 to 2023 protests.
• Past deployments in UK government and police installations, ordered removed from sensitive sites in May 2022.

Customer states

Hikvision sells to more than 150 countries. Documented government and large-scale customers include China (primary market, including Xinjiang Public Security Bureau), Iran, Saudi Arabia, the United Arab Emirates, and numerous Belt and Road partner states. Western government adoption peaked around 2017 to 2018 and has since reversed under sanctions and procurement bans in the United States, United Kingdom, Australia, and various EU member states.

Legal and sanctions status

• US Department of Commerce Entity List since October 9, 2019, in connection with Xinjiang human-rights abuses.
• US National Defense Authorization Act for FY 2019: prohibits federal procurement of Hikvision equipment.
• US Federal Communications Commission: equipment authorizations banned for “Covered List” entities November 25, 2022.
• US Department of the Treasury / OFAC: Hikvision itself not on the SDN List but related Xinjiang Public Security entities are designated.
• UK Cabinet Office: ordered Hikvision equipment removal from sensitive sites May 24, 2022.
• Multiple EU member states have restricted Hikvision in government procurement.

Technical countermeasures

• Procurement audit: organizations should map existing Hikvision deployments and OEM-rebadged equipment. Hikvision hardware is sold under more than 20 OEM brand names.
• Firmware integrity: Hikvision devices have a long history of vulnerabilities (CVE-2017-7921 backdoor among them). Air-gap or VLAN-isolate any retained units, never expose to internet.
• Face occlusion in protests: facial recognition deployed on Hikvision camera networks is defeated by partial face occlusion, oblique angles, and infrared-blocking eyewear (effectiveness varies).
• Anti-tracking apparel: research projects (HyperFace, adversarial fashion) provide patterns shown to degrade face-detection neural networks. Practical effectiveness against deployment-grade systems is partial.
• Policy advocacy: support local-government bans on facial-recognition deployment in public spaces.

There’s no perfect setup. Anyone selling you perfect is selling fear. The goal is simple: make yourself a harder target than the person next to you.