A Managerial Utopia in Three Pages: Reading the WHO’s Digital Immunisation Blueprint

I have just read this article in the Bulletin of the World Health Organization: “Digital transformation and the Immunization agenda 2030.” It is short, almost abrupt in its confidence. It is written in the flat, administrative language that global institutions now favour. Yet it asks for something very large. Its authors want a reorganisation of how governments understand and classify citizens, and of how consent is managed. They never say this in dramatic terms. Instead, they describe their vision as “digital transformation,” and treat its implications as obvious and desirable. It is this casual assumption — that one can redesign the relationship between individual and state without the public’s noticing — which deserves attention.

Systems built to solve health problems usually do solve them, but they also expand the power of whoever administers them. When the WHO proposes a structure capable of tracking every human being from birth, linking their medical status to identity systems, analysing their behaviour with AI, and circulating their data internationally, the issue is not whether the designers believe in benevolence. It is whether future governments will feel bound by the same self-restraint. The authors’ intentions do not change the structure they are building.

The central claim of the article is that digital transformation is necessary to achieve the Immunization Agenda 2030, because old methods leave too many people unregistered, unknown, or unreached. The WHO therefore outlines several infrastructural pillars that governments “should adopt,” each with implications far beyond vaccination.

The article defines digital public infrastructure (DPI) as a system consisting of:

digital identity
personal records
online government services
digital payments
secure data exchange

These are described as the “building blocks” of modern primary healthcare. Birth registration becomes the gateway into a lifelong data record. Every update — from child measurements to school checks to clinical encounters — flows through the same integrated system. Digital identity is not an optional convenience but the spine of the model.

Where a child lacks official ID, the system must still identify them through “demographic traits,” cross-linked to household registers. This is presented as a matter of fairness. It also blurs the line between identifying the child and identifying the household, which matters once these records include income, ethnic background, or religious affiliation.

The article highlights the weaknesses of current systems, where health workers do not know whether a child is behind schedule until the parents appear. Instead, the authors propose that birth notification instantly “triggers the set-up” of a personal digital immunisation record, available nationwide, retrievable by unique identifiers, and updated after each contact.

Examples are offered from several regions:

In Vietnam, electronic records “strengthen evidence-based planning” by linking children’s immunisation status to other developmental metrics.
In northern Nigeria, AI and online dashboards are used to monitor service bottlenecks and identify low-performing districts.
In Ethiopia and Pakistan, mobile systems allow health workers to upload vaccination data in real time.

The article frames these as success stories. They are also proof that once the system exists, states will use it for governance far beyond the clinic.

The authors note — approvingly — that some countries already require proof of vaccination for schooling and international travel. They contrast paper certificates, which can be forged or lost, with digital ones, which are “traceable and shareable.” The neutrality of that phrasing masks the political truth. Traceability enables enforcement, and shareability allows institutions outside the health sector to act as gatekeepers.

It is no longer the doctor who checks your record. It is the school receptionist, the immigration officer, the employer conducting onboarding, or any automated system connected to the national register.

The article pushes for a shift away from “standalone digital applications” towards integrated architectures built on Fast Healthcare Interoperability Resources (FHIR). Governments are urged to:

adopt FHIR as the global standard for health-data exchange,
design systems that can communicate across institutions,
align with the WHO’s “global blueprint for digital public infrastructure,”
coordinate with the World Bank and Gavi under the Lusaka Agenda.

In plain terms, this means national health systems must be built in a way that allows data sharing internationally. What sovereign states choose to share is another matter, but once the architecture is harmonised, pressures to harmonise the policies follow.

Artificial intelligence receives enthusiastic endorsement. The article claims that AI has already shown “utility in identifying and targeting the unreached,” predicting outbreaks, and analysing “population-level data.” It is also praised for “combating misinformation” and “optimising task management.”

The authors extend this into the domain of social behaviour. They describe digital messaging systems that send parents alerts and reminders to “overcome the intention–action gap.” They recommend “social listening” to gauge hesitancy and provide rapid counter-narratives online. They suggest using chatbots for counselling on adverse events.

Each element sounds reasonable. Taken together, they imply a state that monitors attitudes, and corrects them when necessary, to achieve compliance targets. One of the more startling sentences sits halfway through the article:

Registers that record household asset data for social protection programmes enable monitoring of vaccination coverage by socioeconomic status such as household income, ethnicity and religion.

A system that links vaccination schedules to people’s economic and cultural identities is already a system capable of political profiling. Even if originally designed to target services more efficiently, it gives governments the ability to map resistant communities, and to analyse their characteristics, then to design interventions tailored to their behaviour.

The authors appear not to notice the danger of what they are proposing.

It is important to separate the technical case from the political effect. The technical case is coherent. Many low-income countries lack reliable birth registration. Immunisation campaigns often operate under poor logistics, and digital records genuinely help. The examples from Africa and South-East Asia demonstrate that well-designed systems can prevent waste and raise coverage. But the article makes several assumptions that deserve scrutiny.

Assumption A: Integration is always progress

The authors see integrated digital identity as an obvious good. To them, fragmented systems produce inequality because some children fall through the cracks. What they do not consider is that fragmentation also restricts state power. A paper vaccination card, however inefficient, limits surveillance. A digital identity system does the opposite. Integration is not neutral. It redistributes power upward.

Assumption B: Social behaviour is a legitimate area of intervention

The article treats parental hesitation as a logistical obstacle, not a sign of autonomy. The instinct is not to persuade but to “nudge,” to analyse sentiment, and to “combat” expressions deemed unhelpful. The language is managerial rather than authoritarian, yet it moves in the same direction: behaviour must be shaped; dissent must be countered; the public must be guided.

Assumption C: Donor agendas align neatly with democratic accountability

The article’s authors work for WHO, UNICEF, the World Bank, and the Gates Foundation. These institutions are not accountable to any specific population. They operate transnationally, and their priorities reflect the strategies of funders rather than the preferences of citizens. When they speak of “bold, new approaches,” they mean approaches approved by donors. National parliaments barely feature in the architecture.

Assumption D: Interoperability will not lead to mission creep

Once countries adopt a common data standard, it becomes easy to expand what gets recorded, who may access it, and what conditions attach to its use. Travel requirements can become education requirements. Education requirements can become employment requirements. A system designed for vaccination can become a system for verifying anything else the state wishes to mandate. Infrastructure shapes governance long after the original purpose fades.

I do not think the authors imagine themselves to be building a global police state. The article is too earnest, too convinced of its benevolence. The danger lies precisely in this tone. When systems are built under the banner of public health, they tend to bypass normal political safeguards. People accept them because the aims sound humane. But once those systems exist, they do not disappear. Governments inherit them. Future crises activate them. Other departments repurpose them. The architecture expands because it can.

The question is not whether digital systems help vaccination campaigns; they obviously do. The question is whether they should become the organising structure of citizenship. The WHO assumes the answer is yes. The public has not been asked.

Relevant links