Event Record
Urban Grid and Digital Access Control During the Pandemic
Dense governance through health codes, venue codes, community lists, and grassroots dispatch.
Contents
Health Codes Entered Everyday Urban Life
After the outbreak in early 2020, Chinese cities connected QR codes, testing results, and neighborhood grids to ordinary movement. Residents showed a health or venue code at apartment gates, subway stations, shops, and offices. Street offices and community committees used risk lists to order lockdowns, transfers, and home checks. Citizen Lab documented deletion of COVID-related posts and account restrictions on WeChat and other platforms. Digital access control therefore operated alongside information censorship; it was a governance infrastructure, not a stand-alone medical device. [9] [3]
From Red, Yellow, and Green to Cross-Agency Dispatch
The code assigned colors from testing, travel history, and contact data. Local big-data offices combined police records, health databases, telecom information, and community rosters. Grassroots officials converted the result into calls, isolation orders, or a ban on travel. In 2022 depositors in Henan who planned to travel to Zhengzhou to demand repayment from rural banks found their health codes turned red. An investigation and a Puyang discipline commission notice said local personnel had improperly manipulated the epidemic platform and that cadres were punished. The episode demonstrated that changing a code color could block intercity movement and that a public-health interface could be used against a financial protest. [14] [13]
How the Grid Enforced Lockdowns
Street offices divided apartment compounds into grids. Community workers, property managers, and volunteers maintained resident lists. Health bureaus arranged testing, police assisted with transfers and cordons, and technology vendors supplied identity checks, location functions, and message delivery. During lockdowns, leaving home for work, medical care, shopping, or family visits required community approval. After the White Paper protests, Human Rights Watch documented interrogations, detention, and demands that participants delete images. The cases show how health-code data, phone records, and police systems could continue tracking people after street barriers were removed. [16] [17] [15]
Law and the Unanswered Question of Data Retention
The Personal Information Protection Law and Data Security Law require a lawful purpose, necessity, and security measures. Cyberspace Administration rules require platforms to register, review, preserve, and report account information and algorithmic activity. A 2025 regulation placed public-security video networks, access, and sharing under police administration. These texts state principles but create no unified public audit for health-code histories, community rosters, or vendor copies produced during the pandemic. After policy changed in December 2022, many compulsory interfaces stopped, yet authorities did not publish nationwide deletion records, access logs, or third-party retention reports. [3] [4] [5] [6] [1]
Official Story and Social Cost
Official statements present health codes as precise prevention technology that reduced contact and enabled reopening. Local cadres evaluated through “zero infection” targets had incentives to enlarge lockdowns, extend isolation, and treat a system error as a reason to deny entry. Residents could not see how a risk score was calculated and had little time to correct a wrong color. Older people, migrant workers, and anyone without a smartphone paid the highest cost. When a health interface connects to police, financial, or public-opinion systems, a medical risk becomes a political risk. The individual is expected to obey first and appeal later, if at all. [13] [12]
Power Mechanism: A Temporary Health Measure Became a Reusable Control Template
The system locked central targets, local performance pressure, and platform capacity into one chain. The center defined COVID control and “dynamic zero” as priorities. Provincial and municipal data offices encoded them. Community grids enforced lists and gates. Police supplied coercion when residents challenged a decision, while vendors stored data that could be called again. Each node could blame an algorithm or an order from above; the affected person rarely found a real appeals office. The Henan red-code episode exposed the interface's abuse potential. Post-protest interrogations showed how quickly health and policing data could converge. The danger is not a QR symbol by itself. It is the CCP's ability to turn an emergency system into infrastructure for managing movement, screening dissent, and testing obedience. [9] [16] [1]
Sources
Regulation on Public Security Video Image Information Systemsprimary-recordLive
MPS Rules for Public Security Video Information Systemsprimary-recordUnavailable
Personal Information Protection Law of the PRCprimary-recordLive
Data Security Law of the PRCprimary-recordLive
Provisions on the Administration of Internet User Account Informationprimary-recordLive
Provisions on Algorithmic Recommendation in Internet Information Servicesprimary-recordLive
China's Algorithms of Repression: Reverse Engineering a Xinjiang Police Apptechnical-researchLive
We Chat, They Watchtechnical-researchLive
Censored Contagion IItechnical-researchLive
OHCHR Assessment of Human Rights Concerns in Xinjiangofficial-findingLive
Treasury Sanctions on Biometric Surveillance Technologyofficial-findingLive
2024 Country Report on Human Rights Practices: Chinagovernment-reportLive
Official Accountability Record on the Henan Red-Code Incidentprimary-recordRedirected
Investigation into Red Health Codes Assigned to Henan Bank Depositorsinvestigative-reportingLive
CECC 2025 Annual Reportgovernment-reportLive
Human Rights Watch Report on Detained White Paper Protestersinvestigative-reportingLive
Amnesty International Interviews One Year after the White Paper Movementinvestigative-reportingLive