An Overview of Blockchain-Based Electronic Health Record and Compliance with GDPR and HIPAA

The healthcare sector is a massive producer and a dependent user of data, making the data gathering, its treatment and sharing of big importance. Advances in technology have enabled healthcare providers to store it in a digital form called electronic medical records (EMRs). These records are shared with various stakeholders such as patients, healthcare professionals, providers, insurance companies, pharmacies, etc. In a field as sensitive as healthcare, the integration of new technologies is crucial. Blockchain technology has emerged as an immutable technology ready to support changes in the healthcare system due to its transparency and decentralized features. As healthcare information are highly sensitive, it is also highly regulated to ensure patient privacy. Regulatory frameworks such as the General Data Protection Regulation (GDPR) and the Health Insurance Portability and Accountability Act (HIPAA) are designed to help reduce the risk of health data breaches. Blockchain characteristics can improve interoperability, anonymity, and control of access to health data; however, blockchain applications must comply with the current regulatory framework to increase their viability in the real world. This paper analyzes the compliance of blockchain-based EHR systems with HIPAA and GDPR, as well as other areas for improvement.