Privacy
Your rights over your health record, and how the design supports them
This page describes the design. The pilot has no patient portal and no request workflow, holds only synthetic data, and makes no claim of legal compliance.
How to read status labels: In the pilot (v0.2.0, synthetic data) Simulated in the pilot Coming (Wave 2, rolling out) Designed, not yet built Open decision Not offered / no claim made Planned partner integration
Diagram: designed, not built.
| Right | Design approach | Status |
|---|---|---|
| Access to your record | Patient-initiated request with identity verification, fulfilled through the consent flow; access history shown from audit | Designed, not yet built |
| Correction | Corrections are appended amendments; the original stays for legal retention | Designed, not yet built |
| Restriction and consent | Consent captured per purpose, data category and recipient, with the exact rendered text hashed and signed, revocable; revocation affects future access only | Designed, not yet built |
| Portability | Structured export in standard formats; export tooling not built | Designed, not yet built |
| Deletion where law allows | Destroy the keys (crypto-shredding), write a tombstone, propagate to replicas and backups; retention duties may require keeping data; legal opinion pending | Designed, not yet built |
| Who accessed my record | A patient-facing accounting of disclosures and access history; the pilot has this for privacy staff only | Designed, not yet built |
| Speed of a records request | A design goal to cut the 72-hour norm through consent-based fulfilment. Never measured, never promised. Legal review steps are not compressed | Designed, not yet built |
What exists in the pilot
Privacy staff can produce a per-patient access report and a disclosure log; sensitive patients can be flagged VIP or restricted; national IDs are masked with audited reveal; break-glass access is reviewed. Patients themselves cannot use the pilot.
Country specifics
Laws differ. Preview pages for Peru, Mexico, Colombia, Chile, Argentina and Brazil name the laws the design considers, with no compliance claim. Whether an approach satisfies a given law needs advice from counsel in that country.
Questions about your own data? Write to [email protected]. This site holds no patient records.