There is complexity there, because you need to "trust" externally defined, but unknown organisations.

i.e. if you are brought in to A&E unconscious, a doctor needs to be able to access your records immediately without your permission.

In the UK, our NHS (National Health Service) hold our records which we are able to access through an app or website. Moving that ownership to the individual will require a lot of thought.