largest providers of confidential electronic patient records
Argh! Example of a mandated intensely centralized system that shouldn’t exist. There should be standards for data exchange between clinics on patient or doctor request, but never a central registry of appointments and diagnoses.
Or a better encryption scheme. I personally like seeing all my medical data in one place, BUT it has the obvious risks.
You could have a key encryption system such that medical data is encrypted with the public keys of the patient and relevant doctors on entry into the system. A patient could share with a doctor my encrypting with that doctor’s keys.
It could be handled transparently to the user with keys stored locally or something like a derived key from a password.