I have worked on controls in this area for a few US health insurance companies. From what I have seen, it is common to have additional restrictions on accessin

I have worked on controls in this area for a few US health insurance companies. From what I have seen, it is common to have additional restrictions on accessing high profile individuals and specific groups data. There is also a ton of auditing around this stuff. It is more primitive than what you described, but things are heading in that direction. It is a somewhat harder problem space because many parties need access to a customer's records in that domain. Ultimately, the only reason things are even this far along in health insurance is the regulatory environment. It'd be nice to have stronger privacy laws that compel companies to build good controls.