China tightens internet controls with new centralized form of virtual ID

A man uses his laptop outside a coffee shop in Shanghai, China, in March 2022.

A man uses his lap­top out­side a cof­fee shop in Shang­hai, Chi­na

Chi­na has mas­tered the craft of polic­ing the inter­net, oper­at­ing one of the world’s most exten­sive online cen­sor­ship and sur­veil­lance regimes. With manda­to­ry iden­ti­ty checks on every online plat­form, it has become almost impos­si­ble for users to stay anony­mous.

But this rigid­ly mod­er­at­ed online envi­ron­ment is about to face even stricter con­trols with the intro­duc­tion of a state-issued nation­al inter­net ID.

Instead of requir­ing indi­vid­u­als to sub­mit their per­son­al infor­ma­tion for iden­ti­ty checks sep­a­rate­ly on each plat­form, the gov­ern­ment now seeks to cen­tral­ize the process by issu­ing a vir­tu­al ID that will allow users to sign in across dif­fer­ent social media apps and web­sites.

The rules for the new sys­tem, cur­rent­ly vol­un­tary, were released in late May and will be imple­ment­ed in mid-July. It aims to “pro­tect cit­i­zens’ iden­ti­ty infor­ma­tion, and sup­port the healthy and order­ly devel­op­ment of the dig­i­tal econ­o­my,” accord­ing to the pub­lished rules.

Experts, how­ev­er, have raised con­cerns that the new pol­i­cy will fur­ther erode already lim­it­ed free­dom of expres­sion by forc­ing inter­net users to relin­quish even more con­trol to the state.

Since Chi­nese leader Xi Jin­ping took pow­er in 2012, the coun­try has fur­ther tight­ened its grip on the dig­i­tal space through an army of cen­sors. Deployed around the clock, they remove posts, sus­pend accounts and help author­i­ties iden­ti­fy crit­ics, quash­ing any sign of dis­sent before it can gain trac­tion.

The final­ized rules were announced after a pro­pos­al that was opened for pub­lic com­ment last sum­mer, a typ­i­cal step in China’s leg­isla­tive process. Dur­ing the course of the pub­lic con­sul­ta­tion over the past year, the pro­pos­al faced back­lash from law pro­fes­sors, human rights experts and some inter­net users. Yet, the final­ized rules remained large­ly sim­i­lar to the draft.

This is a state-led, uni­fied iden­ti­ty sys­tem capa­ble of real-time mon­i­tor­ing and block­ing of users,” said Xiao Qiang, a research sci­en­tist study­ing inter­net free­dom at the Uni­ver­si­ty of Cal­i­for­nia, Berke­ley. “It can direct­ly erase voic­es it doesn’t like from the inter­net, so it’s more than just a sur­veil­lance tool – it is an infra­struc­ture of dig­i­tal total­i­tar­i­an­ism.

Con­trol of China’s vast por­tion of the glob­al inter­net has large­ly been del­e­gat­ed to a decen­tral­ized range of dif­fer­ent groups, with author­i­ties rely­ing par­tial­ly on the social media plat­forms them­selves to iden­ti­fy com­ments deemed prob­lem­at­ic. Xiao warned that a cen­tral­ized sys­tem using the inter­net ID could make it much eas­i­er for the gov­ern­ment to wipe out a user’s pres­ence across mul­ti­ple plat­forms at once.

Shane Yi, a researcher at Chi­na Human Rights Defend­ers, an advo­ca­cy group, echoed Xiao’s wor­ries. The sys­tem gives the Chi­nese gov­ern­ment expand­ed pow­er to “do what they want when they see fit” on the inter­net, as author­i­ties are able to track users’ entire dig­i­tal trail “from point zero,” she said.

At home, Chi­nese state-run media has called the inter­net ID a “bul­let-proof vest for per­son­al infor­ma­tion” and tout­ed the sys­tem as being able to great­ly reduce the risk of per­son­al data leaks.

Already, more than six mil­lion peo­ple have reg­is­tered for the ID, accord­ing to Chi­nese state-run media Xin­hua last month, out of a total esti­mat­ed online pop­u­la­tion of more than one bil­lion.

A cyber­se­cu­ri­ty offi­cial from the Min­istry of Pub­lic Secu­ri­ty told Xin­hua that the inter­net ID ser­vice was strict­ly “vol­un­tary,” but the gov­ern­ment encour­ages var­i­ous indus­tries and sec­tors to inte­grate with it.

“Its goal is to pro­vide indi­vid­u­als with a secure, con­ve­nient, author­i­ta­tive and effi­cient means of iden­ti­ty ver­i­fi­ca­tion, in sup­port of the devel­op­ment of the dig­i­tal econ­o­my,” the per­son was quot­ed as say­ing.

But experts have also ques­tioned how vol­un­tary the sys­tem tru­ly is and high­light­ed risks of poten­tial data breach­es, as per­son­al infor­ma­tion is now being col­lect­ed in a cen­tral­ized man­ner.

Haochen Sun, a law pro­fes­sor at the Uni­ver­si­ty of Hong Kong, said that, although the law presents the sys­tem as vol­un­tary, it could grad­u­al­ly evolve into a sys­tem which users may strug­gle not to opt in to.

“If the gov­ern­ment wants to pro­mote this inter­net ID ver­i­fi­ca­tion sys­tem, it can do so through var­i­ous arrange­ments – essen­tial­ly by encour­ag­ing peo­ple to adopt it, offer­ing more con­ve­niences in return,” he said.

Sun also raised con­cerns about the increased risks of data leaks.

“A cen­tral­ized, nation­wide plat­form inher­ent­ly cre­ates a sin­gle point of vul­ner­a­bil­i­ty, mak­ing it an attrac­tive tar­get for hack­ers or hos­tile for­eign actors,” he said.

Criticism silenced

Although the new rules won’t take effect until mid-July, hun­dreds of apps start­ed tri­al­ing the inter­net ID since last year.

The sys­tem was born out of a pro­pos­al by a police offi­cial ear­ly last year. Jia Xiao­liang, a cyber police deputy direc­tor in north­east­ern Chi­na who is also a del­e­gate to China’s rub­ber-stamp leg­is­la­ture, the Nation­al People’s Con­gress, first pro­posed the sys­tem dur­ing the Congress’s annu­al meet­ing in March 2024.

As soon as the gov­ern­ment began solic­it­ing pub­lic com­ments on the pro­pos­al last July, experts and legal schol­ars voiced oppo­si­tion.

Lao Dongyan, a promi­nent law pro­fes­sor at Tsinghua Uni­ver­si­ty, com­pared the sys­tem to “installing a sur­veil­lance device on every individual’s online activ­i­ty” in a post on Wei­bo, an X‑like Chi­nese social media plat­form.