Mechanism
Health-Code Function Creep: From Public Health Infrastructure to Stability Control
The Henan red-code incident shows fractures among data purpose, administrative pressure, grassroots execution, and accountability.
Contents
Operational chain: Health-Code Function Creep: From Public Health Infrastructure to Stability Control
Read from information intake to organizational consequence.
Depositors' Health Codes Turned Red without a Health Reason
In June 2022, some depositors preparing to travel to Henan to recover money from village banks found that their health codes had turned red. China Economic Weekly recorded accounts from multiple depositors. A local disciplinary authority later confirmed that officials had improperly decided to assign red codes to some village-bank depositors. [14][13]
The assignments changed the depositors' ability to move. Health codes then governed transport, public venue access, and travel across regions. A red status triggered restrictions across those settings. Local authorities did not need to build separate stability infrastructure. They placed depositor identities into a public-health system that already reached daily life. The screen still displayed an epidemic color, while the system carried out an administrative mission to obstruct people seeking redress.
Function Creep Required Identity, Permission, and Physical Enforcement
Three conditions made repurposing possible. The system linked status to a named person. Local administrators had an interface that could change or influence that status. Stations and venues treated the color as an access instruction. Once a list entered the assignment process, an administrative demand could restrict movement without a public penalty decision.
That structure placed the individual at a severe disadvantage. Depositors saw a changed color but could not see who submitted the list, who authorized the operation, or which reason was entered. Transport and venue staff checked the status rather than the legality of its origin. The source of the order, technical operation, and physical enforcement sat in different bodies. Each participant could describe its own action as routine.
The Personal Information Protection Law requires a clear and reasonable purpose for processing personal information and a direct connection between processing and that purpose. The Data Security Law establishes a broader framework for data handling and security duties. [3][4] The Henan incident did not occur because written rules were wholly absent. It occurred because party-state bodies could change the purpose of data without independent oversight. A depositor discovered the restriction only after the red status took effect, when immediate prevention was nearly impossible.
Disciplinary Action Did Not Reveal the Full Command Chain
The official record confirmed improper code assignments and imposed consequences on several local personnel. That finding is the firm basis for describing the episode. It did not fully explain who first classified the depositors' gathering as a stability risk, how the names moved across agencies, why the system accepted a non-health purpose, or why abnormal assignments generated no immediate alarm.
Responsibility stopped largely with visible operators and local officials. System designers, cross-agency interfaces, and superior pressure received much less public explanation. The CCP's method of dividing responsibility is clear: political work can call on technical infrastructure, while a scandal is reduced to misconduct by individuals. Punishment can quiet public anger without removing the permissions required for another change of purpose.
The Evidentiary Limit of the Henan Incident
The incident does not establish that every health-code use during the pandemic served stability maintenance. It also does not establish identical administrative permissions across China. Health codes had a public-health use, and local systems may have differed. Without complete logs and investigation records, the missing parts of the command chain cannot be invented.
The confirmed record is still substantial. Selected depositors received improper red codes while preparing to travel and seek redress. A public-health status became a movement-control instrument, and the official accountability process admitted the abuse. The episode proves that function creep occurred and that purpose limits failed to protect individuals at the decisive moment.
The CCP Makes Public Infrastructure Available for Political Missions
Function creep is dangerous because the interface does not need to change. Residents continue to see a familiar code while the purpose behind it shifts from epidemic management to stability control. The broader the reach of a public service system, the cheaper it becomes as a political tool when no independent body reviews authorization and no prompt appeal can stop misuse.
Under CCP rule, the bodies that define the mission, hold the data, operate the system, and investigate abuse all remain inside a Party-led administrative chain. They can share power under political pressure without showing the restricted person what happened. Henan demonstrated the governing principle behind the CCP's version of digital administration: rules do not bind power; power recruits whichever system already reaches the target.
What the available sources establish
Official accountability information after the Henan village-bank incident confirmed that health codes were improperly used to restrict identified depositors.
Sources
Regulation on Public Security Video Image Information Systemsprimary-recordLive
MPS Rules for Public Security Video Information Systemsprimary-recordUnavailable
Personal Information Protection Law of the PRCprimary-recordLive
Data Security Law of the PRCprimary-recordLive
Provisions on the Administration of Internet User Account Informationprimary-recordLive
Provisions on Algorithmic Recommendation in Internet Information Servicesprimary-recordLive
China's Algorithms of Repression: Reverse Engineering a Xinjiang Police Apptechnical-researchLive
We Chat, They Watchtechnical-researchLive
Censored Contagion IItechnical-researchLive
OHCHR Assessment of Human Rights Concerns in Xinjiangofficial-findingLive
Treasury Sanctions on Biometric Surveillance Technologyofficial-findingLive
2024 Country Report on Human Rights Practices: Chinagovernment-reportLive
Official Accountability Record on the Henan Red-Code Incidentprimary-recordRedirected
Investigation into Red Health Codes Assigned to Henan Bank Depositorsinvestigative-reportingLive
CECC 2025 Annual Reportgovernment-reportLive
Human Rights Watch Report on Detained White Paper Protestersinvestigative-reportingLive
Amnesty International Interviews One Year after the White Paper Movementinvestigative-reportingLive