Or you could solve this issue by not having this data in the first place. This data is so private and the violation of trust by the system so complete that the trust of most of these people will never be repaired.
You don't need secure data vaults, you need LESS DATA. And anything you can't deal with seeing published, think VERY long and hard if it is absolutely necessary to have it. Even when it is necessary, is there any reason at all for not having it on a unpowered hard drive in a bank vault that requires approval from at least 2 directors to temporarily connect it to a machine that has never been connected to the internet.
Most security breaches (including ransomware events) are insider attacks. Secure data vaults that only allow "authorized persons" access to patient data are therefore never secure.
You don't need secure data vaults, you need LESS DATA. And anything you can't deal with seeing published, think VERY long and hard if it is absolutely necessary to have it. Even when it is necessary, is there any reason at all for not having it on a unpowered hard drive in a bank vault that requires approval from at least 2 directors to temporarily connect it to a machine that has never been connected to the internet.
Most security breaches (including ransomware events) are insider attacks. Secure data vaults that only allow "authorized persons" access to patient data are therefore never secure.
Secure data vaults are