In the case of a distributed system like Andaman7, where the changes are potentially transferred to other people (eg: your doctor, your family...) or to hospitals, the removal would create significant data consistency problems with all these partners. This is because allowing data to be completely deleted makes synchronization almost impossible and, above all, opens the door to inconsistencies between records. We cannot indeed transfer deleted data but we can transfer invalidated data. And, the integrity and traceability of data is critical for everyone to have trust in the system.
In Andaman7, no data can be changed or deleted. However, it can be marked as invalid (and hidden). This "invalidation" is also passed on to peers with the identification of who invalidated and when. It seems to us that this is the only way to guarantee the integrity of a distributed system like ours. It's a bit disturbing indeed, but it is due to the very innovative approach of Andaman7 (probably one of the first completely distributed collaborative health records system). It is similar to banking systems where the rules for modification and deletion are also very strict.
When you have invalidated data, it will no longer be visible to the people with whom you may have shared it (unless they “Show invalidated data”). To avoid seeing this invalidated data, you can, from your record, open the menu (3 dots at the top right) and choose "Hide invalidated data".
Comments
0 comments
Please sign in to leave a comment.