3 ms·

I not only have to trust the immediate authority over the data. I have to trust whoever has authority over them won't change the rules. I have to trust who ha

I not only have to trust the immediate authority over the data. I have to trust whoever has authority over them won't change the rules. I have to trust who has practical authority IE technical administrators. And I have to trust the people in those positions for the entire lifetime the data is held, far in the future. I haven't even gotten to malicious actors and the "defense is harder than offense" part of IT Security. Good luck with that. The only way health record digitisation even vaguely works is by people holding their own record, unlocked by themselves only when they want, to who they want. A damn good trick if you can manage it.

neatze 6y ago
> The only way health record digitisation even vaguely works is by people holding their own record, unlocked by themselves only when they want, to who they want. A damn good trick if you can manage it. This is really great point, seems like it can work with EMV cheap, eg. data only decrypted when EMV cheap is connected, and data is only access by certified software. I would not expect this to be implemented any time soon, probably, discussion on such implementation will only start when large database of medical history is leaked online, and leak effected in some way kids with very wealthy and influential people, unfortunately.