Institution
Data Governance And Social Control: Technology In Stability Maintenance
Health codes, grid data, cameras, and platform records can shift from public service to risk identification and enforcement.
Contents
How Data Becomes Stability Action
Service records move through labels, sharing, and warnings into real-world control.
Purpose-Drift Checklist
Trace purpose and authorization.
| Question | Normal Service | Control Risk |
|---|---|---|
| Purpose | Directly related to service | Expanded to political risk |
| Sharing | Necessary institutions | Broad opaque sharing |
| Decision | Explainable and appealable | Black-box restriction |
| Retention | Deleted after need | Long-term copying |
In June 2022, depositors preparing to travel to Zhengzhou to demand access to funds frozen by rural banks found that their health codes had suddenly turned red. They had not been diagnosed with COVID-19, yet the red code could block travel and entry to public places. An investigation later found that local officials had assigned red codes to more than a thousand depositors without authorization, and several officials were punished. Sixth Tone report on red health codes assigned to Henan bank depositors[1]
The episode exposed a capacity that usually remains hidden. An identity and movement system built for public health could be used by local power to stop collective petitioning. Technology did not decide whom to punish. Officials with access to back-end permissions, risk lists, and on-the-ground enforcement converted a service system into a stability-control tool.
Public-service data can change purpose quickly
Health codes, community grids, registered phone numbers, transport records, cameras, and platform accounts begin with different purposes. Once linked by an identity number, phone number, or face, they can form a profile of a person's movement, relationships, expression, and activity.
One agency collects data for health or service delivery. Another requests it for security or stability. Local personnel act on a resulting list. Such purpose changes rarely pass through public legislation. The person affected may never learn who changed the purpose and has no opportunity to object before the restriction takes effect.
Grid governance connects databases to physical action
Community grid workers, neighborhood offices, police stations, employers, and property managers possess different information and means of contact. When a system produces a warning, local personnel can call, visit, question, intercept, or ask an employer to apply pressure. The political value of data lies in helping power locate a specific person quickly.
Risk labels can also propagate. Once a person is marked as a priority petitioner, sensitive individual, or event participant, the designation may enter multiple departments' spreadsheets and internal systems. Later users often treat the database entry as fact even when the original judgment was wrong.
Cameras and platform records complete the relationship map
Public cameras and facial recognition can reconstruct movement. Ticketing and communications data can reveal travel and contacts. Social platforms retain groups, reposts, and content history. Research by Citizen Lab in We Chat, They Watch[3] found that WeChat conducts content surveillance and uses communications among users outside the China censorship environment to train its system.
These records sit in both government and corporate systems. Real-name requirements, platform responsibility, and duties to assist enforcement make access easier for the Party-state. Before an offline gathering occurs, organizers' group chats and relationship networks may already be exposed.
Algorithmic alerts expand the scale of monitoring
Human surveillance can follow only a limited number of targets. A data system can screen millions of records and send selected anomalies to officials. Models may generate risk prompts from locations, relationships, keywords, ticket purchases, or repeated petitioning.
An alert is not proof. When rules are opaque, political disagreement can be recoded as a risk indicator. Scores and colors give a biased classification the appearance of neutral calculation, while those who selected the indicators disappear from view.
Centralized Party leadership decides whom technology serves
The Constitution of the Communist Party of China[4] establishes the CCP's supreme leadership across fields. The 2023 Party and state institutional reform plan[5] strengthens central coordination over social work, data, and major areas of governance. A technical project built by a local government or company still operates inside a Party-led security and stability system.
Punishing local abuse does not mean the central system rejects data-driven stability control. In the Henan case, officials used a public-health permission for an unauthorized objective. The response did not end the broader practice of treating social grievances as stability risks and using digital systems to identify and manage targeted people.
Black-box systems defeat meaningful appeals
When a health code, ticket purchase, account, or building access suddenly fails, the affected person usually sees only the output. Customer support cannot explain a political label. Local enforcers say they are following a superior's list. Data offices refuse to publish models and access logs. Power is divided among technical steps, and responsibility disappears with it.
Freedom House Freedom on the Net 2025: China[2] describes China's continuing environment of severe online control and surveillance. Digital systems expand speed and reach without creating corresponding rights to independent judicial review, personal access to records, or deletion of an erroneous political label.
One-party rule turns smart governance into precise stability control
Public services need data. Cameras can assist criminal investigations, and risk models can identify fraud or public-health threats. The system's political character depends on who sets the purpose, who receives access, who investigates abuse, and whether an individual can refuse and correct a record.
Under CCP rule, those boundaries are decided by the same power system that holds the data. The Party-state first requires residents to surrender identity and behavior records, then incorporates political security into sharing and alerts. The Henan code scandal was an abuse of permission that publicly revealed the system's political potential. As long as stability overrides individual rights, a database built for convenience can become a control panel for stopping someone from traveling, speaking, and meeting others.
Sources
Sixth Tone report on red health codes assigned to Henan bank depositorsRedirected
Freedom House Freedom on the Net 2025: ChinaLive
Citizen Lab, We Chat, They WatchLive
Constitution of the Communist Party of ChinaLive
2023 Party and state institutional reform planLive