Skip to main content

GDPR Art. 9 (opens in a new tab) · Crisis healthcare

Crisis and displacement clinics have to triage and record patients on intermittent connectivity.

Modern Miracle built an offline-capable web app for clinical triage, with each access to patient data logged to an audit trail.

Status: Delivered in April 2025. The application code is published on GitHub under the AGPL-3.0 licence.

Operating constraint

People displaced by a crisis lose their health record each time they move between facilities or cross a border. The clinics that receive them triage more patients than their systems were built for, on intermittent connectivity.

How it was built.

The offline-capable triage application stores FHIR records while a separate hash-of-access trail records each access on-chain.
Project
LeLink
Programme
NGI Sargasso, Open Call 5
Delivered
April 2025
Setting
Crisis and displacement healthcare
Timeline
Delivered · April 2025

Decisions, and the obligation or standard each one meets.

  1. An offline-capable progressive web application.

    MeetsGDPR Art. 32(1)(b) availability. Clinicians can record and read patient data in areas with limited connectivity. (opens in a new tab)

  2. Health records in HL7 FHIR.

    MeetsA record created in LeLink can be read by other health systems that use the FHIR standard, already common practice in the sector the European Health Data Space (Regulation (EU) 2025/327) covers. Article 15 leaves the exact cross-border exchange format to implementing acts not yet adopted.

  3. Each access to patient data writes a hash of the event to a blockchain audit trail.

    MeetsGDPR Art. 5(2) accountability, and EDPB Guidelines 02/2025 v2.0 on blockchain, which treats an on-chain hash as pseudonymised personal data. No patient record is written to the chain; only a minimised, pseudonymous hash is, and the system operator cannot alter or remove an access record without it being detectable. (opens in a new tab)

Design response

LeLink has two applications. The patient app is an offline-capable progressive web app in which a person keeps their own medical history, and the health-worker dashboard covers patients, records, appointments and triage with a live view of who is waiting. Clinical data is recorded and shown as HL7 FHIR R4 resources, including observations and risk assessments, so other health systems can read it, and health workers sign in through Microsoft Entra ID. A Solidity contract writes a hash of each access to patient data to a blockchain audit trail, the patient record stays in its own store, and the dashboard shows the trail.

Result

A displaced person's health record moves with them in an application they control, and each access record the system writes to its audit trail cannot be altered by the operator without detection. LeLink was delivered under NGI Sargasso, Open Call 5, and its application and contract code are published under the AGPL-3.0 licence.

The record behind this engagement.

Funded under NGI Sargasso, Open Call 5.

View evidence — LeLink (opens in a new tab)

Licence: AGPL-3.0

Tell us what you're building and the regulation it has to meet.

You will speak with one of the two founders.