Help
Frequently Asked Questions
Browse our most common questions about BlockMed Pro, your health data, and the products in the BlockMed Pro family.
About BlockMed Pro
What is BlockMed Pro?
BlockMed Pro is a patient-owned, consent-driven health data platform. It brings your GP, hospital and wearable data into one secure record - your One True Record - that you own, control, and can earn from.
Is BlockMed Pro live?
Yes. BlockMed Pro is live for patients. You can create your free account and start building your One True Record today.
How much does it cost to join?
Creating your account is free. You stay in control of your data and how you choose to benefit from it.
Your data, privacy and security
Is my health data private and secure?
Yes. BlockMed Pro uses consent-based access controls so that only you decide who can view your health data, which is protected with strong security and privacy safeguards.
Who owns my medical records?
You do. BlockMed Pro is built on a patient-controlled model, so you decide how your health data is accessed, shared and managed at all times.
Can I use BlockMed Pro to access my NHS records online?
Yes, our platform is designed to help you securely view and manage your available healthcare records in one place, including NHS-linked information where the relevant provider systems support it.
What standards does BlockMed Pro meet?
BlockMed Pro is built to align with UK data protection law (UK GDPR), is assured to NHS England's Digital Technology Assessment Criteria (DTAC), is certified to Cyber Essentials Plus, and is working towards ISO 27001.
Products
What is myOTR?
myOTR is your One True Record - a secure app that brings your health data into one place you own and control.
What is OTRhub?
OTRhub is our data marketplace, giving researchers and pharmaceutical partners access to consented, de-identified real-world data with blockchain-verified provenance.
What is OTRtwin?
OTRtwin is a consent-powered AI digital twin that models patients and cohorts to personalise care and accelerate discovery. It is currently in development.
What are OTRcare and OTRmeds?
OTRcare (an AI-powered EHR system for clinicians) and OTRmeds (a pharmacy PMR system) are coming soon. They are being designed as the next products in the BlockMed Pro family.
Your health, your control
How can I access my medical records through BlockMed Pro?
You can access your medical records securely through the BlockMed Pro platform using your unique login credentials that include Multi-Factor Authentication. Our user-friendly interface ensures easy navigation for viewing, managing, and sharing your health information.
Who can access my health data without my permission?
Absolutely no one. BlockMed Pro prioritises your privacy; only you have the control to grant or revoke access to your medical records to healthcare providers, pharmacies, and other entities.
How can I share my medical history with new healthcare providers within the BlockMed Pro network?
Within the BlockMed Pro ecosystem, sharing your medical history with new or existing healthcare providers is streamlined and secure. With your consent, providers can easily access your records for a comprehensive view of your health history, facilitating better-coordinated care and informed medical decisions.
How can I benefit financially from using BlockMed Pro?
BlockMed Pro offers a unique feature where you can choose to share your anonymised health data with pharmaceutical companies for research purposes. In return for contributing to medical research, you will receive remuneration, providing a financial incentive while advancing healthcare innovation.
What payment methods are accepted on BlockMed Pro?
BlockMed Pro is designed to accommodate a wide range of payment methods for its services, including traditional currencies like USD and GBP, as well as cryptocurrencies, offering flexibility and convenience to you.
Revolutionising healthcare management
How does BlockMed Pro serve as the gold standard for electronic health records?
BlockMed Pro is not just another EHR platform; it is a comprehensive solution that all clinics and pharmacies utilise as the primary, all-encompassing EHR system, ensuring uniformity, security, and efficiency in managing patient records. With advanced security, seamless integration capabilities, and a patient-centred approach, it sets a new benchmark for quality and efficiency in healthcare management.
How does BlockMed Pro ensure ease of use for clinicians?
BlockMed Pro is designed by clinicians for clinicians, featuring customisable medical templates for various specialties, simplified prescribing processes, and multiple communication methods with patients, pharmacies, and other healthcare professionals. This user-friendly interface allows for efficient record-keeping and coordination of care, all within a secure and compliant platform.
How can healthcare providers collaborate within the BlockMed Pro ecosystem?
Within the BlockMed Pro ecosystem, healthcare providers will be able to seamlessly refer patients to one another, request investigations, and share patient information securely, all with patient consent. This interoperability fosters a collaborative environment, ensuring that every healthcare touchpoint is connected and efficient.
How does BlockMed Pro cater to the needs of community pharmacies?
Community pharmacies play a crucial role in patient care, and BlockMed Pro will seamlessly integrate pharmacy operations with our EHR system. Pharmacies will be able to access prescriptions, manage medication records, and communicate with prescribers directly, ensuring accurate and efficient dispensing of medications.
What benefits does BlockMed Pro offer to pharmaceutical company users?
Pharmaceutical companies on BlockMed Pro can access a wealth of pseudonymised patient data, with consent, for research and development purposes. This data is longitudinal in nature, granular down to patient level, and our platform has built-in analytics to support business intelligence and R&D teams. This provides valuable insights into patient outcomes and medication efficacy, driving innovation while ensuring patient privacy and data security.
Innovating with blockchain in healthcare
How does blockchain technology benefit the BlockMed Pro platform?
Blockchain technology offers a decentralised, secure, and transparent way to store and manage electronic health records. It enhances data security, patient privacy, and enables the immutable recording of transactions, ensuring data integrity and trust across the healthcare ecosystem. Once information is entered into the blockchain, it cannot be altered or deleted, ensuring the accuracy and reliability of medical data.
Are Smart Contracts secure?
Yes, Smart Contracts are highly secure. They automate and enforce the execution of agreements based on predefined rules, significantly reducing the risk of data breaches and unauthorised access, while ensuring compliance with healthcare regulations. BlockMed Pro employs advanced encryption as well as Smart Contract enabled security and strict access controls to protect patient data and ensure privacy. Only authorised individuals with explicit patient consent can access specific health records, in compliance with global privacy regulations.
What are electronic health records (EHRs), and how does BlockMed Pro enhance their utility?
Electronic Health Records (EHRs) are digital versions of patients' paper charts, offering a real-time, patient-centred record accessible to authorised users. BlockMed Pro enhances EHRs by integrating blockchain for secure, immutable record-keeping and ensuring that data is accessible across the healthcare continuum with patient consent.
Your NHS data and the law
What rights do I have under GDPR regarding my NHS health data?
Under GDPR, your NHS health data (special category data) is protected by law. Your key rights include the right to be informed (clear privacy notices), right of access (Subject Access Request, or SAR), right to rectification (correct inaccuracies), right to erasure in limited cases, right to restrict processing, right to data portability, right to object (including to research and direct marketing), and rights related to automated decision-making and profiling. NHS organisations as data controllers must process your data lawfully, fairly, and transparently; keep it accurate and secure; and retain it only as long as necessary.
How can I view and download my NHS medical records?
Use the NHS App or log in at nhs.uk to view parts of your GP health record such as medications, test results, allergies, and coded entries (availability varies by practice). Some sections can be downloaded as PDFs. For a complete copy, submit a Subject Access Request (SAR) to your GP practice and to any hospitals you have attended. They must respond within one calendar month (extensions apply for complex requests) and usually provide information free of charge.
What is the NHS National Data Opt-Out and the Type 1 GP Opt-Out?
The National Data Opt-Out lets you stop your confidential patient information being used for research and planning beyond your direct care. Set or change it via the NHS App, nhs.uk, or by phone. The Type 1 GP Opt-Out prevents your GP practice from sharing identifiable data with NHS England for research and planning; you register it directly with your GP. Neither opt-out affects sharing for your direct care. Some legal or public health exceptions may apply.
Am I legally able to earn from my health data?
In the UK you cannot directly sell your identifiable NHS health records. The NHS does not sell identifiable data for commercial purposes. Anonymised or pseudonymised datasets may be used for research and planning under strict controls, but individuals do not usually receive payment. Emerging models (for example, data trusts and patient-centric platforms like BlockMed Pro) aim to return value to patients for sharing anonymised data with explicit consent and robust governance.
What does it mean to anonymise health data?
Anonymisation removes or alters identifiers and unique combinations so that a person cannot be identified, directly or indirectly. Properly anonymised data is irreversible and no longer personal data under GDPR, enabling wider use for research and planning. Pseudonymisation is different - direct identifiers are replaced with codes, but re-identification remains possible with a key, so GDPR still applies.
Can de-identified data be re-identified under GDPR?
Yes, if the data is only de-identified or pseudonymised, there remains a risk of re-identification, particularly when combined with other datasets or rare attributes. Under GDPR, such data is still personal data and must be protected with strict technical and organisational measures, minimisation, and clear legal bases. Truly anonymised data, by contrast, should not be re-identifiable and falls outside GDPR.
How is blockchain used to secure and empower your health data?
Blockchain can provide tamper-evident data lineage, cryptographic audit trails, and programmable consent. Records are time-stamped and linked in an immutable chain, improving integrity and provenance. Smart contracts can help enforce consent and access rules. Platforms like BlockMed Pro use a patient-centred model to give granular sharing controls, transparent access logs, and the option to contribute anonymised data for research.
Who currently controls my NHS health data?
Your GP practice and the hospitals or services you attend are data controllers for the records they create and hold about you. NHS England (including former NHS Digital functions) controls national collections used for planning, public health, and approved research. Accredited IT providers may act as data processors on behalf of these controllers. All must comply with UK GDPR and the Data Protection Act 2018.
Can I stop my GP or hospital from sharing my data?
You cannot opt out of data sharing for your direct care (for example, referrals or emergency care) because it is essential for safety. You can opt out of secondary uses for research and planning via the National Data Opt-Out and, at GP level, the Type 1 GP Opt-Out. These do not apply where there is a legal requirement or overriding public interest.
What is the difference between personal, pseudonymised, and anonymised data?
Personal data identifies you directly or indirectly and is fully protected by GDPR. Pseudonymised data replaces identifiers with codes but can still be linked back with a key, so GDPR applies. Anonymised data has been transformed so you cannot be identified, even indirectly; it is no longer personal data and sits outside GDPR.
How do I request a full copy of my NHS health record?
Submit a Subject Access Request (SAR) to each organisation that holds your data - your GP for primary care and each hospital trust for hospital care. Be specific about dates, specialties, or document types if you can. They must respond within one calendar month (extensions may apply) and usually provide the information free of charge.
What is the NHS Summary Care Record (SCR), and who can access it?
The SCR is a concise summary of key GP information such as medications, allergies, and adverse reactions. With your explicit consent, an Enhanced SCR can include significant history and care plans. Authorised NHS professionals may access your SCR for your direct care, usually with your permission, and all access is audited. You can opt out of having an SCR by informing your GP practice.
How do I know if my data is being used for research or commercial purposes?
Check or set your National Data Opt-Out in the NHS App or at nhs.uk. NHS England publishes Data Uses Registers describing who has accessed data, for what purpose, and under what legal basis. Your GP and hospitals should publish privacy notices explaining their uses and sharing. The NHS does not sell identifiable personal data for profit.
What happens to my data if I move GP practices or change hospitals?
When you register with a new GP, your electronic record should transfer securely via GP2GP. Hospitals create and maintain their own records; key information is shared for your direct care through referrals, discharge summaries, and increasingly via shared care records. Your Summary Care Record supports urgent or unplanned care across England.
Can my health data ever be deleted completely?
GDPR's right to erasure is limited for health records. NHS providers are subject to statutory retention periods set out in the Records Management Code of Practice. Core medical records are typically retained for defined periods (for example, GP records for life plus 10 years). After retention, records are securely destroyed. Administrative items not needed for clinical, legal, or public health purposes may be deleted sooner.
Who checks that my data is stored securely within the NHS?
Oversight includes the Information Commissioner's Office (enforcement and guidance), NHS England policies and assurance, the Data Security and Protection Toolkit (annual self-assessment), local Data Protection Officers, clinical governance structures, professional regulators, and independent review panels for research data access. Audit trails and mandatory training reinforce accountability.
How long is my medical data kept by the NHS and third parties?
Retention follows the NHS Records Management Code of Practice. GP records are usually kept for life plus 10 years. Most adult hospital records are held at least 8 years after discharge; children's records generally until age 25 (or 26 if the last entry was at 17). Certain specialties (for example, mental health, maternity) can have longer retention. Third parties with access must follow contractually defined retention and secure deletion schedules.
What are my rights under GDPR if I want my data corrected or erased?
You can request rectification of inaccurate or incomplete data from the controller (your GP or hospital). They must respond and correct or explain why not, and you can escalate to the ICO. Erasure is more limited in healthcare due to legal, public interest, and clinical safety requirements, but may apply to certain administrative or unlawfully processed data.
How do I check which organisations have accessed my medical records?
Ask your GP practice or hospital for an audit log via a Subject Access Request. Systems record who accessed your record and when. Access to your Summary Care Record is also logged and can be investigated if you raise concerns. For broader, non-identifiable data use, see NHS England's Data Uses Registers.
What is the NHS Data Opt-Out, and how do I use it?
The National Data Opt-Out lets you choose whether your confidential patient information is used for research and planning. Set or change it in the NHS App, via nhs.uk/your-nhs-data-matters, or by phone. It does not affect data sharing for your direct care and applies to future uses. For GP-level prevention of sharing for secondary uses, submit a Type 1 Opt-Out to your practice.
Can I choose to share my data only for certain types of research?
Today, controls are broad - you can opt in or opt out of secondary uses via the National Data Opt-Out, and give explicit consent for specific studies you join. Granular consent by topic or organisation is a developing area (for example, data trusts, dynamic consent), but not widely implemented across the NHS yet.
Can I see a history of every time my health data is accessed or sold?
You can request audit logs from your GP and hospital showing who accessed your records and when. The NHS does not sell identifiable personal data. For transparency on wider, non-identifiable data access for research and planning, refer to NHS England's published Data Uses Registers.
Blockchain, AI and BlockMed Pro
What makes blockchain technology ideal for securing healthcare data?
Blockchain provides a decentralised and tamper-proof way to store health information. Each transaction or data entry is encrypted and recorded across multiple nodes, meaning there is no single point of failure or risk of unauthorised tampering. This immutability ensures that once medical data is entered, it cannot be altered or deleted without detection, building trust in the accuracy and provenance of healthcare records.
How does BlockMed Pro ensure patient consent is managed transparently?
Patient consent is recorded and managed through smart contracts on the blockchain. This allows every consent action - granting, revoking, or updating permissions - to be timestamped and auditable. Patients can see exactly who accessed their data, for what reason, and when, ensuring total visibility and control over data use.
Is blockchain technology compliant with GDPR and NHS data protection requirements?
Yes. BlockMed Pro operates under UK GDPR and NHS data protection standards, ensuring lawful processing of health data. Blockchain's immutable audit trail complements GDPR principles of accountability and transparency. Personal data is never stored directly on-chain - only encrypted references or hashes - ensuring full compliance with data minimisation and patient privacy laws.
How does blockchain help prevent healthcare data breaches?
Traditional databases have central points that can be hacked. Blockchain distributes encrypted data across a network of nodes, meaning there is no single target for cyberattacks. Any attempt to alter or access records without authorisation would be detected instantly across the network, making large-scale breaches virtually impossible.
Can blockchain improve how healthcare organisations share data?
Yes. Blockchain introduces interoperability by creating a secure, standardised layer where patient records can be verified and shared across clinics, pharmacies, and hospitals with patient consent. This ensures consistent, real-time data sharing without duplication or loss, leading to faster diagnoses and better coordinated care.
How is AI integrated with blockchain in BlockMed Pro?
AI models within BlockMed Pro use anonymised, verified blockchain-backed data to produce accurate insights. Because blockchain ensures that the underlying data is authentic and traceable, AI algorithms can deliver more reliable predictions and recommendations, reducing bias and improving clinical decision support.
How does BlockMed Pro differ from traditional Electronic Health Record (EHR) systems?
Unlike traditional EHRs controlled by institutions, BlockMed Pro is decentralised and patient-owned. Individuals hold and manage their complete medical records on a blockchain ledger, granting access only when they choose. This promotes autonomy, transparency, and data integrity - something legacy systems cannot guarantee.
What ethical safeguards exist when patients monetise their health data?
BlockMed Pro enforces ethical data use through smart contract-enabled consent and anonymisation. Only aggregated or pseudonymised datasets are shared with research and pharma partners. Each transaction is logged, ensuring data is used solely for approved purposes and preventing exploitation or misuse.
Can patients withdraw their consent for data sharing after opting in?
Absolutely. Patients can revoke consent instantly through their BlockMed Pro dashboard. Once revoked, all connected smart contracts deactivate access for the requesting party, ensuring no further data transfers occur. Every consent update is recorded on the blockchain for full accountability.
What financial opportunities exist for patients using BlockMed Pro?
Patients can opt to share their anonymised data with approved pharmaceutical and research organisations. Each transaction generates a direct payment, allowing users to benefit financially while contributing to medical innovation. Payments can be received via traditional banking or secure crypto wallets linked through Web3Auth.
How will blockchain adoption impact the NHS in the future?
Blockchain could significantly enhance NHS data governance by providing real-time auditability, cross-organisational interoperability, and improved patient engagement. Over time, it could reduce administrative burdens, prevent fraud, and improve the accuracy of shared care records, all while aligning with the NHS's data security standards.
What are the main ethical and regulatory challenges of using blockchain in healthcare?
The main challenges involve balancing blockchain's immutability with GDPR's right to erasure, ensuring equitable access to technology, and maintaining trust in data monetisation models. BlockMed Pro addresses these through hybrid storage (off-chain encryption with on-chain proofs), rigorous data protection impact assessments, and transparent patient consent mechanisms.
