Personalization of Power and Mass Uprisings in Dictatorships

Abstract Most major nonviolent civil resistance campaigns target autocratic regimes. Yet, most dictators are toppled by their close supporters, not civilian protesters. Building on theories of strategic interactions between leaders, security agents, and protesters, we make three core claims: first, protesters are relatively less likely to mount a major nonviolent uprising against dictatorships with personalized security forces; secondly, personalized security forces are more likely to repress realized protest; and, thirdly, security force personalization shapes the prospects for success of mass uprisings in promoting democratic transitions. We leverage new data on security force personalization—a proxy for loyal security agents—and major nonviolent protest campaigns to test these expectations. Our theory explains why many dictatorships rarely face mass protest mobilization and why uprisings that are met with violent force often fail in bringing about new democracies.

Nonviolent civilian-led mass uprisings have challenged authoritarian rule around the world in recent decades, with protests rocking cities as diverse as Algiers, Hong Kong, Khartoum, and Caracas in 2019 alone (see, for example, Chenoweth 2020).Yet, historically, most dictators have been ousted by elites in the military and government, not by civilian protesters (Geddes, Wright, and Frantz 2018;Svolik 2012).Although over two-thirds of major nonviolent protest episodes target autocracies, mass uprisings are still relatively rare events in dictatorships, occurring in less than 4 per cent of years under autocratic rule.Nearly 60 per cent of autocratic regimes have never faced a major nonviolent protest campaign.Some regimes, by contrast, face repeated challenges from mass protests.Why are some autocratic regimes more prone to mass uprisings than others, and how does personalization of power in dictatorships affect the onset and outcome of mass uprisings?
Extant theories of civil resistance have yet to fully answer these questions, in part, because this literature has focused more on the strategy and tactics of protesters (see, for example, Ackerman 2007;Sharp 1973), while "largely neglect[ing] the characteristics of the regimes themselves" (Sutton 2018, i).Some theories of mass uprisings examine structural factors, such as political grievances, resource mobilization, modernization, and political opportunity structures. 1 Others point to contingent factors, such as collective action trigger events like economic crises or fraudulent elections (see, for example, Brancati 2016), temporal-spatial diffusion (see, for example, 1 For a review and test of structural theories, see Chenoweth and Ulfelder (2017).To our knowledge, no prior study of the onset or repression of nonviolent resistance campaigns includes measures of personalization in their empirical tests.Braithwaite, Braithwaite, and Kucik 2015;Gleditsch and Rivera 2017), or the influence of such external actors as major power patrons (see, for example, Ritter 2015) or advocacy networks tied to international nongovernmental organizations (NGOs) (Murdie and Bhasin 2011).
While a substantial literature examines how elections and democratic-looking institutions sustain or undermine authoritarian rule (see, for example, Donno 2013;Gandhi 2008;Knutsen, Nygård, and Wig 2017), this article refocuses attention on how repressive institutions in dictatorships shapes protest behavior and outcomes (see, for example, Greitens 2016). 2 Building on strategic theories of collective action and distinctions between different forms of autocratic rule, we make three key claims: first, major nonviolent protest campaigns are relatively less likely in dictatorships with personalized security forces; secondly, personalized security forces are more likely to repress realized protest; and, thirdly, security force personalization reduces the prospects that mass uprisings successfully promote democratic transitions.Thus, our theory explains how a key feature of autocratic rule, that is, a dictator's personal control over the security apparatus, shapes both incentives to protest and responses of security forces, with implications for protest success and failure.
This article makes at least two contributions.First, we help explain why personalist dictatorships are the least likely to democratize when they fall (Geddes, Wright, and Frantz 2014).Although mass uprisings are now the most common method of toppling dictatorships, mass uprisings are still risky, and not all dictatorships are equally vulnerable to them.By showing how some dictators recruit and employ personalized repressive agents to deter and repress nonviolent mass uprisings, we help explain the dearth of democracy in personalism's wake.Despite initial optimism, the Arab Spring uprisings in 2011, for example, only toppled four dictatorships in the region and led to a sustained democratic transition in just one country (Tunisia).Regime continuity and civil war were the most common outcomes of the Arab Spring.We help shed light on these patterns, for the region was awash with personalized security forces that increased state-led repression, leading to an Arab Winter.Even when such forces splintered (as they did in Libya, Syria, and Yemen), democracy did not follow.Our theory and findings contrast starkly with Grundholm (2020), who argues that personalist dictators are actually more likely to be ousted in protest episodes.
Secondly, we employ new data on mass protest and the coercive apparatus in dictatorships.Our dependent variables come from the Nonviolent Episodes and Violent Episodes of Resistance (NEVER) dataset (Chin 2017), which reconstructs and extends the Nonviolent and Violent Campaigns and Outcomes (NAVCO) 2.0 dataset of Chenoweth and Lewis (2013).Both NEVER and NAVCO code "maximalist" protest campaigns/episodes that involve at least 1,000 participants, but NEVER includes nearly three times as many nonviolent episodes as NAVCO and nearly twice as many episodes as the related Mass Episodes of Contention (MEC) data of Chenoweth and Ulfelder (2017). 3By including more less well-known protest episodes, many of which fail, not listed in NAVCO or MEC, the NEVER data reduce potential sample selection bias when explaining the origins and outcomes of mass uprisings. 4ur key independent variable is a new measure of security personalization constructed from a Bayesian item response theory (IRT) model of observable indicators that proxy for loyal security 2 This article is part of a larger research project exploring the relationship between personalization and different technologies of rebellion, including protest, coups, assassinations, and insurgency.
3 NEVER (previously RE-NAVCO) records 604 major resistance episodes from 1945 to 2013, of which 327 are primarily nonviolent and 277 are primarily violent.By contrast, NAVCO 2.0 codes 99 nonviolent uprisings and 152 violent insurgencies from 1945 to 2006.MEC codes 170 mass episodes of contention from 1955 to 2013.While NAVCO 2.0 contains more violent insurgencies than nonviolent uprisings, Chenoweth and Stephan (2011) argue that collective action barriers are lower for nonviolent mobilization than violent mobilization, implying that mass uprisings should be more, not less, frequent than violent insurgencies.In contrast to NAVCO, NEVER data indicate that this is the case.agents (Song 2022). 5As all dictatorships exhibit some level of personalism and a dictators' personal power may vary substantially over time, even within regimes (Morgenbesser 2018;Svolik 2012), this measure improves on prior categorical autocratic regime typologies (for example, a personalist regime dummy variable) that are static within regimes (see, for example, Geddes 2003).Further, it isolates the security force-as opposed to the party-aspects of personalization.
We proceed as follows.First, we articulate a theory linking security force personalization to key features of nonviolent mass uprisings, namely, (1) onset, (2) repression, and (3) democratic transition.Secondly, we describe the data and model used to test three of our hypotheses.Thirdly, we present our empirical results, first for onset, then for repression, and finally for democratization.We conclude by discussing implications of our results and avenues for future research.

Personalization and the Strategic Logic of Mass Uprisings
Material, informational, and logistical assets are necessary for a regime to defeat external threats. 6 Coercive capacity can be modeled as a (possibly budgetary) resource a dictator (the principal) allocates to security forces (the agents of repression), who not only both deter and defend against external threats, but can also threaten to replace the dictator (see, for example, Dragu and Przeworski 2019;Svolik 2012;Tyson 2018).While it is common in empirical studies to conflate material capacity-some function of military size or spending (see, for example, Albertus and Menaldo 2012)-with loyalty, we posit that although leaders may try to "buy" military loyalty with greater funding and material perquisites (Leon 2014), the capability to repress and willingness to do so are conceptually distinct.
Coercive capacity means little to a dictator if repressive agents are disloyal.Investing in security forces to deter or suppress a mass uprising poses a moral hazard problem for dictators because these same forces can use their power to oust the leader.The Hashemite dynasty in Iraq, for example, was overthrown in a bloody 1958 coup (the "July 14 Revolution") after the units that were mobilized to support King Hussein of Jordan, who feared a revolt in Lebanon might spread to his country, instead marched on Baghdad.The royal family, including King Faysal II and the regent 'Abd al-Ilah, were executed (Ghareeb and Dougherty 2013, 505).
Dictators may mitigate this moral hazard problem with nonmaterial mechanisms to prevent coordinated action by security agents or increase loyalty to the leader by more closely linking the fates of the security apparatus with the regime.A dictator's efforts to build a security apparatus that is personally loyal to them may result in security force personalization (Song 2022), under which security elites are stacked with individuals who are relatively better off with the specific leader in power.For example, dictators may create specially recruited (and often better compensated) counterbalancing security forces that lie outside the regular military hierarchy (see, for example, De Bruin 2021). 7However, security force personalization differs from general institutional coup-proofing, as it aims not only to create coordination obstacles among the security forces, but also to reshape leadership composition of the security apparatus.Personalist rulers often promote or purge senior officers based on personal loyalty, or place co-ethnics, tribal kin, family members, or others with close socio-personal ties in command of security units. 85 For a detailed description of how this latent measure was constructed, see Online Appendix A.4. 6 We use the terms "internal" and "external" threats as relative to the authoritarian regime in power, not in relation to the nation-state.Thus, elites in the supporting political party or official security apparatus are "internal" threats.By contrast, "external" threats may include domestic protesters, armed domestic rebels, terrorist groups, or a foreign adversary.In this article, we are focused on the "external" threat of domestic protest mobilization, not overseas mobilization.

7
Dictators may also create a counterbalancing organization outside the security sector, such as a political party or movement, that rallies civilians to support and coup-proof the regime (see, e.g., Frantz and Kendall-Taylor 2017).

8
In information-poor environments, such as autocracies, principals often select "good" types rather than rely on information about agent behavior to sanction poorly performing agents (see, e.g., Lust-Okar 2006).As the dictator cannot easily monitor shirking (ex post sanctioning of adverse behavior requires information about agent effort and behavior that is costly This creates a subgroup of security elites who serve as "personal loyalists" to the dictator that are distinguishable from the "outsider" group of apolitical career officers without personal connections. We posit that rulers shape the security apparatus to optimally protect themselves from internal and external threats. 9Personalizing security forces has at least two benefits from the perspective of the dictator. 10The first is coup-proofing.When security agents know that no other agents are loyal, they force the leader to continually trade off coup risk against the risk of external threats (see, for example, Svolik 2012, ch. 5).Personalism provides information to would-be coupplotters about the likely loyalty of other security units, thus reducing the likelihood of successful coup coordination among security units.If it becomes common knowledge among all security units that the leader has some loyal agents-and the leader knows all security units know-it is safer for the leader to invest in repressive coercive capacity without unduly raising coup risk.
Secondly, personalized security forces are more dependable agents of repression.When considering orders to repress a mass uprising, security agents must weigh the material allocation they expect to receive while the dictator remains in power against their expected payoff should the agents shirk or defect and the regime is ousted (see, for example, Paine 2019; Tyson 2018).Personalized security agents (that is, the beneficiaries of the dictator's favoritism) expect a lower payoff from defection and thus have limited "outside options."Their fate is more closely tied to the fate of the dictator (Geddes, Wright, and Frantz 2018;Song 2022).Nonpersonalist security agents expect a higher "outside option" payoff and thus have a greater incentive to defect (Zakharov 2016).This logic suggests that dictators should be more willing to resource personalized security agents to deter mobilization and rely on them to repress external opponents that do mobilize.
To illustrate this strategic logic, consider an example from Iraq.After the Gulf War, when his regime was beleaguered by Shia and Kurdish uprisings and the United States was publicly calling for a military coup, President Saddam Hussein responded by further personalizing his security forces.He created the Special Republican Guard, an internal security force led by his younger son, Qusay, and stacked with co-ethnic Sunnis, members of loyal tribes, and kin from Tikrit (Al-Marashi and Salama 2008), thus creating an ethnic cleavage between the security agent (Special Republican Guard commanders) and external threat (Shia and Kurdish rebels).11Hussein provided Republican Guardsmen, whom he trusted more not to turn on him, with better equipment and training than the regular army (Quinlivan 1999, 144-6, 155-7).The flow of benefits that Hussein's soldiers expected under a post-Hussein regime (the outside option) was low, bolstering their loyalty.In repeated uprisings in the 1990s, mainly Sunni security forces defended their privileged status, "understandably expecting that Hussein's fall would be a tremendous loss for them as well" (Al-Marashi and Salama 2008, 184).The regime did not therefore end with a coup or mass uprising; rather, it only ended with the US invasion in 2003.The subsequent US for the leader to acquire), leaders select "good" security agents who they anticipate will be loyal, using both prospective and retrospective information.Using tribe, ethnicity, or family connections to select "good" security agents has the benefit of being ascriptive and thus not easily adaptable.Beliefs about loyal types and their expected behavior may therefore be less likely to change over time, producing an expectation for all players-the leader, loyal agents, and, especially, disloyal agents-that loyal agents are likely to defend the leader rather than defect, even during mass protests.9 We do not explain why we observe more or less personalization, which depends, in part, on leaders' initial perception of whether internal or external threat is greatest (Greitens 2016), as well as the evolving balance of power of the leader relative to the initial seizure coalition and regime elites (Geddes, Wright, and Frantz 2018, ch. 4;Svolik 2012, ch. 3). 10 Of course, the personalization of security forces is not an unrestricted good for every dictator.Although personalization reduces coup risk once it is in place, it increases short-term coup risk by inviting backlash from the targeted military officers and security agents (Song 2022).Dictators who inherit strongly unified rather than divided support coalitions may have a difficult time reshaping the security apparatus by promoting, purging, or replacing the security elites in light of heightened rebellion risk.decision to purge Baathist officers and disband the Iraqi army only confirmed the fears of Hussein's security agents that they would suffer after Hussein's exit and motivated a Sunni insurgency (Pfiffner 2010).
Having sketched our basic logic, we now specify three observable implications of security force personalization for the dynamics, and legacy of mass uprisings under dictatorship: 1. MOBILIZATION EFFECT: Security force personalization lowers the likelihood of the onset of major nonviolent protest episodes, ceteris paribus.
There are two related, but conceptually distinct, reasons to expect fewer mass uprisings in dictatorships with personalized security forces: one is logistical and the other is strategic.First, for all the reasons laid out earlier, dictatorships with personalized security forces loyally engage in more preventive repression than other dictatorships. 12As a result, it is harder for dissidents to locate "free spaces" within which they can organize, and opposition leaders find it harder to overcome logistical hurdles and mobilize resources needed to successfully launch an uprising. 13According to this logic, personalized security forces are more likely to crush nascent protest movements in their infancy, either by preventing large one-off protests from becoming sustained campaigns or by preventing small protests from becoming full-blown mass uprisings.
Secondly, the expectation that personalized security forces are more likely to respond violently to a mass uprising may deter would-be protesters.First, the presence of loyal agents of repression should make individuals fear more for their own well-being when deciding whether to mount (or join) a protest.Secondly, and just as important, the presence of loyal security agents raises the fear that others will be deterred by expected violence at the hands of the regime's thugs, which would also lower one's assessment of the odds of protest success.Therefore, all else equal, citizens should be more likely to make the strategic decision to stay home.In short, the shadow of future repression deters mass uprisings.The shadow cast by personalized security forces looms larger than that of other security forces, not simply because they engage in more everyday repression, but because they are more likely to defend the regime tenaciously to the end.To the extent personalized security forces instill more fear than other security forces due to their loyalty in repressing, they are more likely to cow populations into sustained submission. 14hus, although mass uprisings are by no means impossible under personalist regimes in general (as a regime category), mass uprisings are less likely within regimes as a dictator personalizes the security force apparatus.Turkmenistan, for example, illustrates how personalization promotes effective preventive repression.At independence in 1991, Turkmenistan exhibited little security force personalization under the Soviet-era security force elites.However, in the years that followed, the Soviet-era leader, Saparmurat Niyazov, cultivated a cult of personality and consolidated his personal control through purges, giving key posts to his Tekke clansmen and promoting personal loyalists under the former KGB, which became a full-blown Ministry of National Security in 2002 (Bohr 2004).These security forces, in turn, crushed all domestic opposition and drove many dissidents into exile (Leibensperger 2009).Protests of a few hundred people in July 1995 were broken up before they could escalate into a full-scale uprising (Pannier 2020).Niyazov became president for life in 1999.After he died in 2006, his successor, Gurbanguly Berdymukhammedov, similarly promoted a personality cult, tapped his extended family to become defense minister, and continued to favor members of his (and Niyazov's) Tekke clan within the security forces (Peyrouse 2015).Thus, Turkmenistan has been called "the least likely candidate for a colour revolution" among former Soviet republics (Beacháin and Polese 2010, 217).
Our second observable implication of security force personalization for the dynamics of mass uprisings under dictatorship is as follows: 2. REPRESSION EFFECT: Security force personalization increases the level of repression during major nonviolent protest episodes, ceteris paribus.
If deterrence fails, a civilian-led mass uprising occurs, and the dictatorship collapses, the post-exit payoff for loyal security agents is lower than for disloyal agents.Knowing that loyal agents' fates are closely tied to theirs, dictators with loyal agents order repression of mass uprisings.As importantly, loyal security units, especially those that are stacked with co-ethnics of the leader (Makara 2013) and that have greater social distance with the opposition (Johnson 2017), are more likely to follow those orders to preserve their privileged status (see, for example, Barany 2016; Bellin 2012). 15In short, highly personalized security forces are more likely to shoot protesters on the streets.Now, a potential cost of personalizing security forces is that they may be less competent (Egorov and Sonin 2011). 16They may perform poorly on the battlefield (Talmadge 2015) or be ineffective in gathering intelligence, leading to inefficient, indiscriminate repression of the populace (Blaydes 2018).Such "competency" costs, however, matter less for loyalists' ability to repress mass uprisings, which, in contrast to combat or counter-insurgency, is less a complex military or information-gathering operation than a test of loyalty.As one former mercenary in Libya, who served in a unit under Gaddafi's son in 2011, stated when asked about dispersing protesters in Tripoli: "We would kill three or four in the front of the crowd and they all ran away.It was very easy" (quoted in Gwin 2011).Thus, while loyal security agents may be a liability in countering foreign militaries or rebel groups, they are an asset when shooting unarmed street protesters.
Our logic differs from Ritter and Conrad (2016), who argue that regimes that engage in preventive repression do not step up repression once protest is realized, mainly since the regime realizes that "strong" types that protest anyway cannot be deterred.Instead, they argue that only regimes that do not repress preventively increase repression during uprisings because the regime does not know if protesters are "weak" and can be repressed.We likewise assume that preventive and expected repression by (personalized) security forces deters some but not all protest.17This does not mean that dictators facing a mass uprising yield without a fight.First, dictators cannot discount the possibility that protestors have overestimated their chances of success. 18Secondly, responding to realized dissent with further repression affects future payoffs for regime insiders: if the regime remains in power, repression signals its strength and resolve, and deters future dissent. 19inally, the vast majority of regimes respond to mass uprisings with at least some repression (Chenoweth and Stephan 2011).This should be especially true of personalist dictatorships.
Take Belarus, Europe's "last dictatorship," for example.By the time of the first color revolution, Serbia's Bulldozer Revolution in 2000, Alexander Lukashenko, who has ruled Belarus since 1994 as an elected autocrat, had managed to personalize security forces significantly 15 As a result, minority ethnic groups, especially those with territorial goals (Sutton, Butcher, and Svensson 2014), are less likely to initiate nonviolent uprisings than violent insurgencies in the first place (Thurber 2018).We account for ethnic militaries in the empirical analysis.Adjusting for this factor produces stronger results than those reported in the following.

16
This may be an intentional strategy of the leader (negative selection) or an unintended consequence.Incompetent agents may be more loyal because they have lower-value outside options than competent agents (Zakharov 2016).more than in Georgia or Ukraine, whose regimes both fell to color revolutions in 2003 and 2004, respectively.Just as in these other cases, a youth movement modeled on Serbia's Otpor, Zubr (Bison), was formed in Belarus in 2001.There were several attempts to foment a mass uprising in Belarus.Prior to 2020, the largest of these protests-drawing some 20,000 protestorsoccurred in March 2006 (Beissinger 2007).All were successfully repressed after a few days of savage repression, in large part, thanks to its security forces that were stacked with personal loyalists, including Lukashenko's eldest son, Viktar.Viktar had not only been Lukashenko's special security adviser since 2005, but also served as a member of the Security Council of Belarus, the main political coordinating body for the security apparatus (Neliupšienė and Beržiūnas 2013).During the ongoing 2020-21 protests, the security apparatus has so far shown "no sign of wavering in its commitment" to its strongman, Lukashenko (Higgins 2020).At least 30,000 Belarusians have been arrested, "the most severe repression anywhere in Europe in forty years" (Wilson 2021, 299).
Our third observable implication of security force personalization for the legacy of mass uprisings under dictatorship is as follows: 3. DEMOCRATIZATION EFFECT: Security force personalization decreases the likelihood that major nonviolent protest episodes lead to democratic transitions, ceteris paribus.
Personalization is likely to lead to several dynamics during mass uprisings that pose obstacles to democratization. 20First, greater repression by personalized security forces may reduce protesters' nonviolent discipline (Pinckney 2016), which, in turn, can undermine the opposition's legitimacy, harm the ability of the opposition to receive overt support from the international community (Bob 2005), and lead to a "rally around the flag" effect.Secondly, and perhaps more importantly, a dictator's order to repress realized protest may cause personalized security forces to splinter. 21By funneling greater privileges and resources to ensure the loyalty of preferred security agents ("winners"), dictators may lose the loyalty of other units ("losers"). 22Sidelined elites have better "outside options" (post-exit payoffs) under personalist regimes.Having less to lose should the regime fall, they may seek an accommodation (pact) with the protest opposition in hopes that they may join the winning coalition should the uprising succeed (see, for example, Lee 2014).That is to say, different organizations within the security apparatus may have different post-exit payoffs.The handpicked troops of a special presidential guard, for example, will have a worse "outside option" than the regular army, while those with less loyalty will have less to lose should the regime fall, prompting defection. 23ecurity force defections, in general, have long been identified as a leading cause of the success of nonviolent revolutions (see, for example, Chenoweth and Stephan 2011).However, not all security force defections are equally likely to lead to a peaceful democratic transition.Security force defections differ in numerical extent, type of behavior, and the identity of defectors (Neu 2018).As personalized security forces have many troops whose fates are tied to the dictator, it is less likely that the whole security apparatus will defect during a mass uprising.It is far more likely that the security apparatus splinters or fragments, with (more) favored units and senior officers remaining loyal, and some units, junior officers, and/or rank and file defecting.
Such splits in the security apparatus increase the chances of stalemate or civil war rather than a peaceful transition to democracy, as the cases of Syria, Libya, and Yemen during the 2011 Arab Spring suggest.In Syria, which quickly turned into a protracted civil war, immobile wealth assets (for example, housing), sectarian ties, and social isolation produced a midranking officer class in the military that had "few viable options for themselves outside the military in Damascus" and thus viewed protesters as "a threat not only to the regime but also to them personally" (Khaddour 2015, 5-6).In Libya, members of Gaddafi's own clan that dominated the air force and senior army leadership reportedly remained loyal, in part, because they had "the most to lose from his ouster" (Fahim and Kirkpatrick 2011).Again, low-value outside options cemented loyalty.In Libya, North Atlantic Treaty Organization (NATO) intervention provided the necessary force to defeat personalist security forces.However, even when personalist dictators are ousted, as in Libya, the legacies of personalism-particularly the fragmentation of security forces-continue to dog transitional efforts to democratize.

Outcome
To test these hypotheses, we utilize new data on nonviolent mass uprisings and personalized security forces in dictatorships.Our sample includes all dictatorships from 1946 to 2010, the years with available data on personalization (Geddes, Wright, and Frantz 2018).
To test the mobilization effect, our outcome variable is the onset of major (primarily) nonviolent protest episodes.This binary indicator marks the start of a new major protest episode in a country-year from any of three data sources-NEVER (Chin 2017), NAVCO 2.0 (Chenoweth and Lewis 2013), or MEC (Chenoweth and Ulfelder 2017). 24To test the repression effect, our outcome variable is the level of repression during a nonviolent campaign-year, using data from the standardized human rights protection score of Fariss (2014).We reverse this score such that higher values indicate more state-led repression. 25To test the democratization effect, our outcome variable is a binary indicator of democratic transition from Geddes, Wright, and Frantz (2018).
Figure 1 and Table A-1 in the Online Appendix shows the incidence of protest onsets for all dictatorships during the sample period .Overall, the onset of protest episodes is a relatively rare event, occurring in only 3.8 per cent of all sample years.However, the share of dictatorships that face a nonviolent uprising has increased over the last several decades.As mass uprisings diffuse (see, for example, Braithwaite, Braithwaite, and Kucik 2015; Gleditsch and Rivera 2017), we also observe "waves of protest," with major protest waves around 1989 and 2011.

Security Force Personalization
The explanatory variable is a time-varying latent measure of security personalization, which uses a Bayesian IRT model to measure the degree to which the dictator personalizes his security apparatus based on five observable indicators from Geddes, Wright, and Frantz (2018) and Wright (2021): (1) creation of paramilitary forces that are personally loyal to the dictator; (2) directly controlling the security apparatus; (3) having discretion over appointments to military high office; and both (4) purging and (5) promoting military officers based on personal loyalty. 2624 For a brief comparison of the three sources, see earlier.NEVER is the most comprehensive of the three sources.Figure B-7 in the Online Appendix shows our findings remain when using any one of the sources.

25
Both NAVCO and NEVER provide less fine-grained repression measures (binary and trichotomous, respectively).

26
This measure varies continuously, with higher values indicating more personalization of security forces on January 1 of each calendar year; this lag structure ensures results do not stem from protest-induced personalization.For the coding rules for each personalization policy and the detailed measurement process and post-estimation results, illustrating how exactly each observable policy contributes to the latent measure, see Online Appendix A.4.
While loyalist paramilitary groups may not necessarily be those tasked with repressing protesters, the presence of loyalist forces within the security apparatus ensures other units remain loyal by both reducing coup risk and gathering intelligence on the loyalty of units tasked with repressing.Direct control over the security apparatus and power to appoint and promote high officers enable the regime leader to both select agents on loyalty and generate better information on levels of loyalty.Major purges of leadership in the security apparatus signal the leader's power to punish potentially disloyal agents. 27 Security personalization is related to, but distinct from, other measures of personalism in dictatorships.The conventional static indicators of regime type (Geddes, Wright, and Frantz 2014) do not measure changes in the level of personalism over time within regimes, but rather categorize different autocratic regimes as personalist or not.Personalism, however, is a feature of all autocratic regimes that varies in its extent; our time-varying measure thus provides information on dynamic relationships between the leader and security apparatus (see, for example, Svolik 2012). 28We also consider a time-varying measure of party personalization, which is analogously constructed as security personalization but measures a dictator's control over the ruling party apparatus. 29Finally, we consider an aggregate measure of personalization that includes both  An initial purge of disloyal agents resets the equilibrium relationship between security agents and the leader to one where the leader has relative power (Svolik 2012, ch. 5).In contrast, repeated military purges, as recorded by Sudduth (2021), indicate an equilibrium where the threat of a purge is insufficient to discipline security agents.Initial purges in our data tend to occur early in a leader's tenure.To capture the new equilibrium after an initial purge, the purge indicator remains as 1 until the leader's tenure ends.This contrasts with data that record each purge episode.security force and party indicators.Results in the Online Appendix show that party personalization does not drive the results.

Model Specification
The main specification for testing the mobilization effect includes a minimum of potential confounders that, we posit, are not posttreatment outcomes. 30First, we employ a survival framework by adjusting estimates for the natural log of time since last protest onset (Carter and Signorino 2010), assuming protest mobilizers operate in an environment where historical protest episodes structure the opportunity for current protest. 31 Secondly, we adjust for leader tenure (log) because strategic protest mobilizers may assess the likelihood of protest success by incorporating information about the dictator's type and learning about the dictator over time, or, as Chenoweth and Ulfelder (2017) posit, leader tenure could promote protest onset since regimes where the leader has remained in office for a very long time are likely to become increasingly unpopular over time.Given dictators act strategically to retain power, surviving in office is essential for observing personalization (as we measure it), and leader tenure is one of a handful of variables that improve forecast accuracy of mass uprising onset.
Finally, we adjust for the number of regional nonviolent campaign onsets (region NVC onsets, log).Regional shocks may spur emulation where there is no recent history of domestic protest (Braithwaite, Braithwaite, and Kucik 2015) and where other favorable preconditions for uprisings are absent (Beissinger 2007).Further, dictators may respond strategically to protests abroad with domestic policy and personnel changes to shore up internal support (Koesel and Bunce 2013) and thus mitigate the spread of foreign uprisings.Thus, external protest shapes both the domestic opportunity for mobilization via standard informational diffusion processes (see, for example, Weyland 2014) and dictators' strategic personalization of power to ensure the loyalty of security agents. 32We also include a Cold War indicator because foreign powers reacted differently to protest in client states during this period. 33 This baseline model specification may not capture all plausible confounders, but some standard "controls" may be posttreatment phenomena.For example, dictators strategically manipulate the economy (for example, block innovation) after consolidating personal power to curtail internal rivals' power, depressing economic development in the process (Acemoglu and Robinson 2000); moreover, dictators strategically purge military rivals when ex ante coup risk is low (Sudduth 2017).We thus use a sparse specification but test whether adjusting for any of 40 potential confounders alters the findings (they do not [see Figure B-1 in the Online Appendix]).

Estimator
With a binary outcome, we start with an ordinary probit estimator.To account for unit heterogeneity, we model regime-case fixed effects. 34After all, dictatorships differ from each other as appointments to the party executive committee; and (4) an absent or rubber-stamp party executive committee.The correlation between the security force and party personalization variables is not high (ρ = 0.324).30 Table B-2 in Online Appendix B.8 shows that dropping any combination of specified covariates does not alter the results.

31
Results hold using autocratic spells to calculate time since last protest.For tests using various duration or time functional forms or nonproportional hazards, see Online Appendix B.

32
We assume that dictators do not manipulate protest onset in other countries to counter internal threats.Leaders may catalyze protest in neighboring countries for the purposes of destabilizing foreign rivals, however.

33
For results with other operationalizations of the common time effect, see Online Appendix B.5. 34 Regime-case fixed effects, which subsume all differences between regimes, including autocratic regime "types," are the same as a country fixed effects in countries, such as China or Saudi Arabia, with only one autocratic regime in the post-1949 period.Other countries, such as Iran or Thailand, have multiple regimes during the sample period.much as they differ from democracies (Geddes 1999), and regimes arise from distinct historical political economies and colonial histories (Pepinsky 2014).Some are preceded by democracy or a long history of coups; others were constructed from the ruins of colonial empires or imposed by foreign military powers.Some have strong militaries or host foreign militaries, but each regime inherits more or less cohesive or exclusive security forces.These differences between regimes both structure opportunities for protest (Boudreau 2009) and lay the groundwork for personalization (Geddes, Wright, and Frantz 2018).Regime-case fixed effects account for both country-specific historical factors, such as culture, infrastructural power, and colonial history, and regime-specific factors, such as how the regime seized power (including whether it has revolutionary origins), whether it was preceded by democracy, and whether the initial group that seized power drew support from a military junta, a rebel group, or a prior political party. 35 To account for this heterogeneity, we test a random-effects (RE) estimator. 36The RE estimator is more efficient than a fixed unit-effects estimator but may be biased if unit effects are correlated with the explanatory variables.Yet, a fixed-effects estimator also has drawbacks given many regimes (panel units, i) are short-lived (small t).Further, mass uprisings are absent in almost two-thirds of regimes; a fixed-effects estimator will not draw inferences about marginal effects from these regimes. 37There are many approaches to dealing with this issue (see, for example, Beck 2018;Cook, Hays, and Franzese 2018;Mundlak 1978). 38Our preferred estimator follows the spirit of the Mundlak-Chamberlain approach, employing the correlated random-effects (CRE) estimator.Instead of estimating separate intercepts for each panel, we include the unit means of explanatory variables in the model (Wooldridge 2002, 488): where: D i,t is the treatment variable; X i,t are time-varying confounders; and D i and X i proxy for fixed unit effects.The estimate of β 1 adjusts for the unit means of all right-hand-side (RHS) variables for all regimes (panel units) and not just regimes that experience mass uprisings.
The marginal-effects estimates also draw information from cases where no protest onset has occurred (yet) while still accounting for unobserved time-invariant unit effects.Next, we account for common temporal shocks (that is, year effects) by adding year means (D t and X t ).Finally, an interactive fixed-effects model allows for the effects of common time shocks to vary across panel units by including D t × D i and X t × X i (see Bai 2009Bai , 1239-40)-40). 39Thus, we compare how more personalized security forces and less personalized security forces influence the onset of nonviolent protests, the repression of realized nonviolent protests, and the prospects of democratization.

Results
In the first model (an ordinary probit), the estimate for security personalization is negative and significant.Next, a random-effects probit yields a slightly larger (absolute) estimate for security personalization.In terms of marginal effects, one standard-deviation increase in security personalization reduces the risk of campaign onset by 1.4 per cent.The confounding-variable estimates,

35
For the full list of 279 regimes in our sample of 117 countries, see Table A-2 in the Online Appendix.

36
Results in the replication files indicate that a random slope and random intercept model yield almost identical findings.

37
A conditional logit drops from the estimating sample units with no within-variation in the outcome, including roughly half of the sample observations for regimes that never experience mass uprisings.

38
We discuss these trade-offs in detail in Online Appendix B.4.

39
Interactive fixed effects allow the effect of common time shocks to vary across units.For example, while the end of the Cold War lowered the threat of superpower intervention to suppress protests in client states (see, e.g., Kuran 1991) and increased Western pressure to hold multiparty elections (see, e.g., Marinov and Goemans 2014), the common time shock had differential effects in different regions (and regimes) of the world (see, e.g., Levitsky and Way 2010).
which lack a causal interpretation, are in the expected direction: longer leader tenures and regional NVC onsets are associated with higher protest onset risk.To address bias in the RE estimator if unmodeled unit effects are correlated with the covariates (X it ), the third through fifth sets of estimates in Figure 2 report CRE models.The security personalization estimates in the CRE models are larger than in the RE model (estimated marginal effects from CRE models range from −1.7 to −1.8 per cent) but with larger variances.As such, we have little concern that the RE estimator yields an estimate biased away from 0. The latter two CRE models incorporate common time shocks (similar to year fixed effects) and interactive fixed effects (Bai 2009).
Online Appendix B.1 shows that the main result-security personalization reduces the likelihood of a mass uprising-is robust to adding potential confounders.This result is also robust to: modeling calendar time trends in various ways (

Personalization and Repression of Mass Uprisings
We now describe two tests of the repression effect on observed protest episodes.First, we test whether the onset of mass uprisings increases repression over prior observed repression, measured by the lagged levels of state-led repression in the three years prior to onset of the mass uprising. 40This design accounts for the fact that past repression shapes protest in the first place.If regimes respond to protests with repression, we expect the regime to increase repression relative to the pre-protest levels during this initial period.This specification is as follows: (1) In this equation: R i,t−1/t−3 are the three lagged levels of repression prior to each campaign onset; D i,t is security personalization; and ϕ t is a time-period effect.The sample includes 181 distinct campaign onsets in 111 regimes in 81 countries.We estimate Equation 1 with a kernel least-squares estimator (KRLS) that does not make functional form (for example, linear) assumptions and thus helps protect against misspecification bias (Hainmueller and Hazlett 2014, 143-4). 41

Results
Column 1 of Table 1 only adjusts for lagged repression levels and period effects.The (average marginal) effect of security personalism is positive and statistically significant.The estimate of β is slightly larger in Column 2, which adjusts for confounders that are unlikely to be posttreatment: population, regional protests, time since last protest onset, and leader tenure.Our repression results are robust to adding any of 20 other potential confounders (see Online Appendix C.1) or using an alternative measure of repression from the Varieties of Democracy (V-Dem) project (see Online Appendix C.4). Online Appendix C.5 shows this result can be attributed to security personalization, not other aspects of personalism.
A second approach, shown in Column 3 of Table 1, expands the sample to all years of observed protest (331 regime-years), not just the onset year. 42This specification includes a measure of (log) campaign (episode) duration up to the observation year.The average marginal effect is still positive and statistically significant but slightly smaller.Figure 3 plots the marginal effect of security personalism on repression by campaign duration, which is large and positive in the first year of the campaign but then drops to (roughly) 0 later in the campaign (by year five). 43 Difference and error-correction models that separately estimate short-and long-term effects of protest episodes also indicate a large positive and significant short-term effect of protest episodes on repression under high security personalization.This suggests loyalty mechanisms in the security forces primarily increase repression in the initial stages of a mass uprising.

Personalization and Democratization
To test the democratization effect, we utilize a binary indicator from the Geddes, Wright, and Frantz (2018) data on autocracies, which records whether autocratic regime collapse events statistically significant at the 0.05 level, which suggest that a one standard-deviation increase in security personalization decreases the probability of democratic transition by 2.2 to 2.3 per cent (per the average marginal effects reported in the bottom row of the table).
These results are robust to: adjusting for any of 40 additional covariates (see Online Appendix D.2); altering how we model calendar time and duration time with logs and polynomials (see Online Appendix D.3); altering the panel unit to either the country or the individual leader (see Online Appendix D.4); estimating a Cox model (see Online Appendix D.5); or using an instrumental variables (IV) two-stage least-squares framework that treats security personalism as endogenous to unobserved, leader-specific strategic behavior (see Online Appendix D.6).Further, we show that security personalism does not have a stabilizing effect on other types of regime collapse events, such as regime change coups and rebellions (see Online Appendix D.1).Indeed, the estimates are positive, suggesting possible destabilizing potential for security personalism.
Yet, unobserved country-specific time-varying factors may still bias these estimates.For example, the dictator may partially liberalize the regime, prompting democratic mobilization, and the regime responds, in part, by appointing more loyal security officers.Security personalism, in this case, would not be exogenous to this liberalizing trend that also improves the prospects of democratic transition. 44One way to account for such factors is to include time-varying lags of the outcome.Columns 3 and 4 therefore include the first two lags of a measure of the level of democracy, from the Varieties of Democracy polyarchy score. 45These democracy lags (t − 1 and t − 2) adjust for liberalizing trends in the regime that may shape both security personalization and the prospects of a democratic transition.The main estimates of interest remain negative and significant in Columns 3 and 4, indicating that our results are robust to these time-varying trends.We do not want to directly model the time trend in prodemocracy mobilization, however, because if our theory is correct, observed mobilization is posttreatment when we model democratic transitions.

45
Replication files show that including three-and four-year lags as well produces nearly identical results (Hamilton 2018).
Column 5 reports the estimate from a two-way FE LPM with interactive fixed effects that account for country-specific responses to common time shocks (Bai 2009), allowing, for example, the end of the Cold War to have different consequences for Eastern European autocracies than for Central Asian ones.The estimate for security personalization is smaller-just under 1 per centbut still significant at conventional levels.
Our last test is similar to the CRE probit using "within" transformations but, instead of probit, employs a KRLS that relaxes functional form and additive assumptions to estimate pointwise marginal effects for each observation in the data.The estimated average marginal effect from the kernel regression (−1.42 per cent) is smaller than those reported in Table 2 but still statistically significant at the 0.05 level.Figure 4 plots a polynomial curve (that is, nonlinear fit) of the estimated pointwise marginal effects by year.The estimated marginal effect of security personalism on the probability of democratic transition is growing stronger over time: in the 1950s, security personalism decreased the probability of democratization by roughly 1 per cent, but the decrease grows to roughly 2 per cent by the 2000s.

Conclusion
While mass uprisings (nonviolent protest episodes) have become the most common path to democracy in the past three decades, historically, they have been relatively rare.Furthermore, even when protest mobilization succeeds in toppling dictatorships, this frequently results not in new democracy, but rather in civil conflict and failed states.Security force personalization, we argue, helps explain these patterns.We present evidence in support of three key hypotheses.First, citizens are less likely to mount a mass uprising against dictatorships with personalized security forces since these regimes have partially mitigated, via loyalty mechanisms, the moral hazard in employing security agents against protesters (the mobilization effect).Secondly, because the fate of personalized security forces is tied more closely to that of the dictator, such forces are relatively more likely to repress realized protest.However, the repression effect only holds during the initial stages of the uprising and diminishes over time.Thirdly, security force personalization makes democracy less likely.This democratization effect has only strengthened over time.
Our theory-which brings the question of loyalty of the state security apparatus to the center in the study of civil resistance-has implications for the prospects of authoritarian survival and democratization.While ample research in the past decade fruitfully explores the institutional sources of authoritarian durability, this article follows the recent turn toward investigating authoritarian coercive forces (see, for example, Blaydes 2018; Greitens 2016) to examine how loyalty mechanisms-in particular, the personalization of security forces-shape protest mobilization.The dynamic relationship between a dictator and his elite supporters is incredibly difficult to observe and model, but this article makes some progress through using new data to show how personalized security forces deter and repress protest, and thus prevent democratization.Our findings complicate the prevailing view in the literature that personalist regimes, if anything, are more vulnerable to being ousted in mass uprisings (see, for example, Grundholm 2020) and are thus ripe for nonviolent democratization.
Of course, there are historical cases that do not neatly fit the patterns we demonstrate in this article.For example, in some cases, security personalization fails to deter mass mobilization, the security forces splinter, and democratization follows.Understanding why protests emerge even when citizens face loyal security agents or why democratization results even when security forces splinter remains central to advancing theories of autocratic survival and represents a promising avenue for further research.Supplementary Material.Online appendices are available at: https://doi.org/10.1017/S0007123422000114Data Availability Statement.Replication data for this article can be found at: https://doi.org/10.7910/DVN/THQLIH

Figure 3 .
Figure 3. Security personalization and state repression over time during mass uprisings. 44

Figure 4 .
Figure 4. Marginal effect of security personalization on democratization, by year.
see Online Appendix B.5); dropping regions or decades from the sample (see Online Appendix B.6); alternative operationalizations of the dependent variable (see Online Appendix B.7); and dropping covariates (see Online Appendix B.8).The results are also robust to alternative modeling choices, including: semiparametric models (see Online Appendix B.2); fixed-effects linear probability models to control for time-varying confounding (see Online Appendix B.3); Cox duration models (see Online Appendix B.9); and instrumental-variable estimators that address some endogeneity concerns (see Online Appendix B.10).