EHRs should be centralized, but with extremely tight controls, either managed by a non-profit GSE or a government agency with an extremely high level of accountability.
If you go to any healthcare provider, they can request access using your government ID number (driver's license, etc). If you're conscious, you can approve this request using a two-factor auth notification on your phone (SMS, push, whatever). If you're at the ER and unable to approve the request, they can override the request, but its flagged and its going to need to be justified.
The answer, as always, is complete transparency and accountability.
Comments
Agreed.
EHRs should be centralized, but with extremely tight controls, either managed by a non-profit GSE or a government agency with an extremely high level of accountability.
If you go to any healthcare provider, they can request access using your government ID number (driver's license, etc). If you're conscious, you can approve this request using a two-factor auth notification on your phone (SMS, push, whatever). If you're at the ER and unable to approve the request, they can override the request, but its flagged and its going to need to be justified.
The answer, as always, is complete transparency and accountability.