I think transparancy is the answer. In Estonia, if someone's medical record is viewed, it is recorded irrevocably. If there is suspicion that this access was not authorised or out of reach, the state itself will prosecute if you don't want to.