Shanghai Residents Discover Their Faces Used in Unauthorized Commercial Campaigns

A 34-year-old graphic designer from Changning District opened a food delivery app in May and found her own face smiling back at her from a promotional banner for a hotpot restaurant she had never visited. She had not sold the image. She had not licensed it. The photo had been scraped from her Xiaohongshu profile, duplicated, and dropped into an advertising template by a third-party image vendor operating out of a commercial unit in Caohejing Development Zone.

She is not alone. Across Shanghai, a growing number of residents are reporting that their personal photographs, pulled from social media platforms, e-commerce review sections, and even corporate directories, are being recycled into advertising material, training datasets for AI models, and stock image libraries without any form of consent or compensation. The issue has moved from a niche digital-rights complaint into something closer to a street-level grievance, fuelled by the explosion of generative AI tools that can replicate, modify and redistribute a face at minimal cost.

The timing matters. China's Personal Information Protection Law, which came into force in November 2021, prohibits the commercial use of biometric data, including facial images, without explicit consent. But enforcement has been uneven, and the pace of the AI industry's image appetite has outrun regulatory follow-through. The Cyberspace Administration of China issued supplementary guidance on AI-generated content in August 2023, requiring watermarking and provenance disclosure, but community members say those rules are routinely ignored by smaller vendors.

From Xujiahui to Lujiazui: where the complaints are clustering

The pattern showing up in community feedback sessions and neighbourhood WeChat groups is geographically specific. Residents near Xujiahui's commercial strip on Huashan Road describe finding their images on signage for businesses they have no connection to. In Pudong's Lujiazui financial district, several junior bank employees have reportedly spotted their headshots, originally posted on LinkedIn or their firms' internal directories, appearing in stock image searches under generic tags like "professional Asian businessman." One user in a 3,000-member Pudong expats' group posted a screenshot in June showing her own face tagged as royalty-free on a major international image platform.

Shanghai-based digital rights advocacy group Data Rights Shanghai, which began tracking resident complaints in early 2025, says it received more than 400 reported cases of duplicate or unauthorised image use between January and June this year alone. The group, which operates a reporting hotline and holds monthly drop-in sessions at a co-working space on Yanping Road in Putuo District, says the majority of complainants are women between the ages of 22 and 40, and that the images most commonly misused are lifestyle or professional headshots originally posted to Xiaohongshu, Weibo, or Douyin.

What residents are doing, and what they are being told

Community members who have attempted to file complaints describe a confusing patchwork of jurisdictions. The Shanghai Municipal Cyberspace Affairs Commission handles some digital privacy matters, while consumer disputes may fall under the Shanghai Market Supervision and Administration Bureau. A paralegal volunteer at a free legal clinic run out of Jing'an Temple Community Service Centre on Nanjing West Road said during a July session that most residents arrive without knowing which body to approach first, and that many drop their complaints after being bounced between departments.

For now, practical advice circulating in community groups focuses on platform-level action: setting Xiaohongshu and Weibo profiles to private or friends-only, filing takedown requests directly with image hosting platforms citing the PIPL, and screenshotting evidence before the infringing content disappears. Data Rights Shanghai recommends residents log any unauthorised use with a timestamped report through the CAC's online complaint portal, which processed roughly 1.3 million digital privacy submissions nationally in 2024, according to figures the agency published in its annual report.

A formal review of the AI image supply chain, which the CAC indicated in spring 2026 would begin in the second half of the year, is expected to bring new scrutiny to image vendors and dataset brokers. Until that process produces enforceable outcomes, residents are largely navigating the problem themselves, one takedown request at a time.