Every so often people come up with this idea of the patients holding their medical information rather than the institutions but they tend to suffer greatly in emergency situations and/or have tortuously complicated hierarchies of trust and security.
EHRs should be centralized, but with extremely tight controls, either managed by a non-profit GSE or a government agency with an extremely high level of accountability.
If you go to any healthcare provider, they can request access using your government ID number (driver's license, etc). If you're conscious, you can approve this request using a two-factor auth notification on your phone (SMS, push, whatever). If you're at the ER and unable to approve the request, they can override the request, but its flagged and its going to need to be justified.
The answer, as always, is complete transparency and accountability.
Comments
What happens if you are brought in unconscious?
Every so often people come up with this idea of the patients holding their medical information rather than the institutions but they tend to suffer greatly in emergency situations and/or have tortuously complicated hierarchies of trust and security.
Agreed.
EHRs should be centralized, but with extremely tight controls, either managed by a non-profit GSE or a government agency with an extremely high level of accountability.
If you go to any healthcare provider, they can request access using your government ID number (driver's license, etc). If you're conscious, you can approve this request using a two-factor auth notification on your phone (SMS, push, whatever). If you're at the ER and unable to approve the request, they can override the request, but its flagged and its going to need to be justified.
The answer, as always, is complete transparency and accountability.