I have recently been the victim of having my medical record tampered with by the organisation holding it. Under state law I have a legal right to submit information to be included in my medical record, but I cannot request any information to be deleted (including information I have submitted). I plan on generating a notice to be inserted advising anyone - and any other entities who might obtain access - of the tampering.
Considering the organisation is hostile and may attempt to tamper with the notice as well, I figured cryptographically signing it with my PGP key would be the perfect solution. However, the organisation exclusively uses a paper-based record system.
- must be output in paper form
- should be A4 sheets
- must be in a legible format for the content of the notice to be immediately readable (ie. easily read by non-technical persons)
- must be able to support several physical pages of plaintext at a standard font (ie. if the content of the notice were to be printed as is, it would be several physical pages long)
- must be able to be verified in the future in some manner (ie. by another entity), possibly with/without my involvement in authenticating it
- must be kept confidential, subject to the same confidentially as with the rest of my medical record (the content of the notice cannot be external to the medical record and obviously cannot exist publicly)
- must be capable of being verified after being [photo]copied in the future
- may be damaged (ie. stapling, wear-and-tear, etc...)
What issues might I run into if I generate and sign the notice?