Please see my sibling comment about Translucent Databases.

Additionally, proper protection of medical records will require globally unique identifiers (aka PID, MRN).

As you know, today, medical record PII must be stored as plaintext to allow record linking across heterogenous orgs. This is bad.