Mechanism
The Command Chain of Xinjiang's Integrated Joint Operations Platform
Reconstructing IJOP from data collection and risk rules to police checking and detention consequences.
Contents
Operational chain: The Command Chain of Xinjiang's Integrated Joint Operations Platform
Read from information intake to organizational consequence.
On May 1, 2019, Human Rights Watch published its reverse engineering of a Xinjiang police app connected to the Integrated Joint Operations Platform, or IJOP. The system collected personal data and generated investigation prompts from circumstances such as unusual electricity use or a mismatch between a phone user and its registered owner. The app also assessed officials' completion of tasks. Surveillance of residents and supervision of personnel met in the same workflow. [7]
In December 2020, Human Rights Watch analyzed an Aksu list containing more than 2,000 detainees. An entry for a woman identified as Ms. T recorded four overseas calls in March 2017 as part of the foreign connections that drew attention to her. Researchers called the number and reached her sister. A family relationship had entered a record used to justify detention. [18]
The investigations exposed an application used by police and records of people subjected to coercion. IJOP's power depends on decisions about what counts as suspicious, who must investigate and who may deprive someone of liberty.
Everyday records become police assignments
Electricity data can serve billing. Phone registration can identify a subscriber. A security system gives these records additional uses: a change in consumption becomes a question requiring an answer, and a caller becomes a relationship to investigate. Numerical precision can make an administrative suspicion look better supported than it is.
The criteria determine what the system finds. If those criteria encompass ordinary lawful conduct, expanding collection and processing expands the population exposed to scrutiny. An accurate match does not make a family telephone call dangerous. Measuring its duration cannot supply a justification for police intervention.
The classification determines which parts of a resident's life officials can demand to have explained. A resident's conduct may be unchanged, but its official description has acquired a security meaning. By the time someone demands an explanation, the classification has become an assignment from above. The resident must answer the suspicion without having agreed to the rule that created it.
The platform disciplines its operators too
The task assessment function identified by Human Rights Watch gave supervisors a way to assign leads and monitor responses. Officials received instructions through the platform, and superiors could track their performance. [7]
For a subordinate, an outstanding assignment creates pressure to account for inaction. Explaining why a lead is meaningless can be harder than completing a check and entering a result. Where performance rewards responsiveness without comparable penalties for unjustified interference, investigating one more person can feel safer than refusing an unreasonable task.
That incentive does not dictate every official's behavior. It helps explain how the CCP translates political demands into daily administrative discipline. An officer may describe the work as processing assignments, and a supervisor as checking completion. Neither description reduces the intrusion experienced by the resident.
Officials remain responsible for detention
Human Rights Watch's analysis of the Aksu list suggests that people were flagged by IJOP, evaluated by officials and sent to political education camps. The local record does not disclose a complete region-wide approval chain or identify every individual decision-maker. [18]
A computer prompt cannot legitimize what follows it. Officers interpret the lead. Authorities decide on a response. Detention institutions accept and hold the person sent to them. Software does not knock on a door or escort someone into custody. Describing an algorithm as the decision-maker can obscure the agencies that exercise force.
A particularly abusive arrangement lets unresolved suspicion justify continued restriction. Officials then need no demonstrated crime, only a classification that has not been satisfactorily explained away. Someone who cannot inspect the record has little ability to end that condition. The cost of official uncertainty falls on the person whose freedom is withheld.
Relational suspicion makes ordinary contact risky
A system organized around relationships can extend suspicion beyond anything an individual controls. Where a relative lives, what a contact has done or how records are combined can influence an administrative judgment. Ms. T's entry demonstrates the use of family calls in a detention rationale. It does not establish that every overseas call resulted in detention. [18]
For families exposed to that possibility, fewer calls may appear safer. Authorities do not need to prohibit every conversation if relatives begin avoiding contact themselves. Security classification can therefore reshape private life before any new instruction is issued.
Persisting records create a further danger. A previous investigation may become a reason for renewed attention, making it difficult to leave the category of people requiring scrutiny. The public investigations do not show whether or when every individual's record was erased. That uncertainty matters to anyone trying to resume an ordinary life.
The limits of a technical explanation
An analyzed app is not the entire central system, nor does it reveal every internal detention decision. Its exposed functions still connect information collection, suspicious classifications and organized enforcement. [7]
Responsibility follows those powers. The people approving criteria answer for what they classify. Those ordering and conducting investigations answer for the intrusion. Those authorizing detention answer for the loss of liberty. A supplier's responsibility depends on its actual contribution, rather than speculation based on a company name.
The CCP benefits when abuse appears to originate in an incomprehensible machine, as though better data would resolve the problem. Classifying harmless conduct for police attention is already a political choice. Even perfectly accurate records give no legitimate grounds for arbitrary interference with family communications, travel and private life. The power using the data needs restraint.
What the available sources establish
Technical analysis of an application linked to Xinjiang's Integrated Joint Operations Platform found that it aggregated multiple forms of personal data and generated leads for police follow-up.
The OHCHR assessment concluded that large-scale arbitrary detention and related abuses in Xinjiang may constitute international crimes, while individual responsibility requires further independent investigation.
The U.S. Treasury stated in sanctions actions that several Chinese technology companies participated in biometric surveillance targeting ethnic minorities in Xinjiang.
Sources
Regulation on Public Security Video Image Information Systemsprimary-recordLive
MPS Rules for Public Security Video Information Systemsprimary-recordUnavailable
Personal Information Protection Law of the PRCprimary-recordLive
Data Security Law of the PRCprimary-recordLive
Provisions on the Administration of Internet User Account Informationprimary-recordLive
Provisions on Algorithmic Recommendation in Internet Information Servicesprimary-recordLive
China's Algorithms of Repression: Reverse Engineering a Xinjiang Police Apptechnical-researchLive
We Chat, They Watchtechnical-researchLive
Censored Contagion IItechnical-researchLive
OHCHR Assessment of Human Rights Concerns in Xinjiangofficial-findingLive
Treasury Sanctions on Biometric Surveillance Technologyofficial-findingLive
2024 Country Report on Human Rights Practices: Chinagovernment-reportLive
Official Accountability Record on the Henan Red-Code Incidentprimary-recordRedirected
Investigation into Red Health Codes Assigned to Henan Bank Depositorsinvestigative-reportingLive
CECC 2025 Annual Reportgovernment-reportLive
Human Rights Watch Report on Detained White Paper Protestersinvestigative-reportingLive
Amnesty International Interviews One Year after the White Paper Movementinvestigative-reportingLive
China: Big Data Program Targets Xinjiang's Muslimsinvestigative-reportingUnchecked