The health code records our personal information, including personal name, ID number, contact information, location, itinerary, health status and so on. After mutual recognition, all localities need to scan personal health codes when implementing epidemic prevention and control work, so personal information is always exposed to the public and is easily obtained and used by criminals. If we fail to control the health code, once it is leaked or abused, it may seriously threaten the personal information security of the general public. According to the laws and regulations of China, health information and medical status are core privacy. Personal information on health codes must be used in accordance with laws and regulations to ensure its safety. To this end, all localities need to strengthen the construction of laws and regulations for the protection of personal information. In the process of using health codes, on the one hand, we should make full use of health codes to promote epidemic prevention and control. On the other hand, it is necessary to strengthen the protection of personal information. Except for the needs of epidemic prevention and control, information of others shall not be disclosed and personal information shall not be sold to others for use. In addition, according to the requirements of the Notice on Doing a Good Job in Personal Information Protection and Using Big Data to Support Joint Prevention and Control, all localities should formulate management measures for the use of local health codes, refine specific supervision systems, and form a good atmosphere for managing health codes with systems. At the same time, relevant functional departments should supervise the use of local health codes, and find that personal information disclosure and other issues should be handled according to the law. In addition to strengthening the supervision of health codes by government departments, if individuals find that personal information is leaked due to scanning health codes, they should immediately report to the relevant regulatory authorities, which should focus on investigation and handling, and safeguard their legitimate rights and interests according to laws and regulations.