There's no good reason to have personally identifiable information stored in the system. They could easily issue each patient an alphanumeric ID which is not tied to personal information yet uniquely distinguishable..
This is a system design failure to begin with. Design sensitive systems with only minimum required information. The alternative is to have a massive framework to make sure PII hadn't leaked. And then a legal and financial frameworks on top of that..
after all if a leak happens it can't be undone. Damage to the people will be long standing and cascading.
Best is to have a system that have no or minimum PII.
This is a system design failure to begin with. Design sensitive systems with only minimum required information. The alternative is to have a massive framework to make sure PII hadn't leaked. And then a legal and financial frameworks on top of that..
after all if a leak happens it can't be undone. Damage to the people will be long standing and cascading.
Best is to have a system that have no or minimum PII.