Or a better encryption scheme. I personally like seeing all my medical data in one place, BUT it has the obvious risks.

You could have a key encryption system such that medical data is encrypted with the public keys of the patient and relevant doctors on entry into the system. A patient could share with a doctor my encrypting with that doctor’s keys.

It could be handled transparently to the user with keys stored locally or something like a derived key from a password.