The control right, tested
Does control work?
We ran three mechanism checks on our published evidence for all 198 countries and territories: can a person grant a third party access for a stated purpose, see every access, and revoke it so the next request is refused. No country's evidence passes all three. Grant passes nowhere, see passes in 30, revoke in 19.
One row per country and territory, A to Z. Pass means our published evidence shows the working mechanism; partial means it shows part of one; not in evidence means it shows none, which may mean none exists or that our research did not find it.
- Pass
- Partial
- Not in evidence
Closest: 13 countries pass see and revoke: Armenia, Belgium, Croatia, Estonia, Finland, Germany, Iceland, Italy, Latvia, Liechtenstein, Portugal, San Marino, Sweden; none passes grant. Each verdict with its note is in the table below.
| Country or territory | Grant0 pass · 37 partial | See30 pass · 25 partial | Revoke19 pass · 43 partial |
|---|---|---|---|
| Afghanistan | Not in evidence | Not in evidence | Not in evidence |
| Albania | Not in evidence | Not in evidence | Not in evidence |
| Algeria | Not in evidence | Not in evidence | Not in evidence |
| Andorra | Not in evidence | Pass | Partial |
| Angola | Not in evidence | Not in evidence | Not in evidence |
| Antigua and Barbuda | Not in evidence | Not in evidence | Not in evidence |
| Argentina | Not in evidence | Not in evidence | Partial |
| Armenia | Partial | Pass | Pass |
| Australia | Partial | Pass | Partial |
| Austria | Not in evidence | Pass | Partial |
| Azerbaijan | Partial | Partial | Partial |
| Bahamas | Not in evidence | Not in evidence | Partial |
| Bahrain | Not in evidence | Not in evidence | Not in evidence |
| Bangladesh | Not in evidence | Partial | Partial |
| Barbados | Partial | Not in evidence | Not in evidence |
| Belarus | Partial | Not in evidence | Partial |
| Belgium | Not in evidence | Pass | Pass |
| Belize | Not in evidence | Not in evidence | Not in evidence |
| Benin | Not in evidence | Not in evidence | Not in evidence |
| Bhutan | Not in evidence | Not in evidence | Not in evidence |
| Bolivia | Not in evidence | Not in evidence | Not in evidence |
| Bosnia and Herzegovina | Not in evidence | Not in evidence | Not in evidence |
| Botswana | Not in evidence | Not in evidence | Not in evidence |
| Brazil | Not in evidence | Not in evidence | Not in evidence |
| Brunei | Partial | Not in evidence | Not in evidence |
| Bulgaria | Partial | Partial | Pass |
| Burkina Faso | Not in evidence | Not in evidence | Not in evidence |
| Burundi | Not in evidence | Not in evidence | Not in evidence |
| Cambodia | Not in evidence | Not in evidence | Not in evidence |
| Cameroon | Not in evidence | Not in evidence | Not in evidence |
| Canada | Not in evidence | Partial | Partial |
| Cape Verde | Not in evidence | Not in evidence | Not in evidence |
| Central African Republic | Not in evidence | Not in evidence | Not in evidence |
| Chad | Not in evidence | Not in evidence | Not in evidence |
| Chile | Not in evidence | Not in evidence | Not in evidence |
| China | Not in evidence | Not in evidence | Not in evidence |
| Colombia | Not in evidence | Not in evidence | Not in evidence |
| Comoros | Not in evidence | Not in evidence | Not in evidence |
| Costa Rica | Partial | Pass | Not in evidence |
| Côte d'Ivoire | Not in evidence | Not in evidence | Not in evidence |
| Croatia | Partial | Pass | Pass |
| Cuba | Not in evidence | Not in evidence | Not in evidence |
| Cyprus | Not in evidence | Partial | Not in evidence |
| Czechia | Partial | Partial | Pass |
| Democratic Republic of the Congo | Not in evidence | Not in evidence | Not in evidence |
| Denmark | Not in evidence | Pass | Partial |
| Djibouti | Not in evidence | Not in evidence | Not in evidence |
| Dominica | Not in evidence | Not in evidence | Not in evidence |
| Dominican Republic | Not in evidence | Not in evidence | Not in evidence |
| Ecuador | Not in evidence | Not in evidence | Not in evidence |
| Egypt | Not in evidence | Not in evidence | Not in evidence |
| El Salvador | Not in evidence | Partial | Not in evidence |
| Equatorial Guinea | Not in evidence | Not in evidence | Not in evidence |
| Eritrea | Not in evidence | Not in evidence | Not in evidence |
| Estonia | Partial | Pass | Pass |
| Eswatini | Not in evidence | Partial | Not in evidence |
| Ethiopia | Not in evidence | Not in evidence | Not in evidence |
| Fiji | Not in evidence | Not in evidence | Not in evidence |
| Finland | Not in evidence | Pass | Pass |
| France | Not in evidence | Pass | Partial |
| Gabon | Not in evidence | Not in evidence | Not in evidence |
| Georgia | Not in evidence | Partial | Partial |
| Germany | Not in evidence | Pass | Pass |
| Ghana | Not in evidence | Not in evidence | Not in evidence |
| Greece | Not in evidence | Pass | Not in evidence |
| Greenland | Not in evidence | Not in evidence | Partial |
| Grenada | Not in evidence | Not in evidence | Not in evidence |
| Guatemala | Not in evidence | Not in evidence | Not in evidence |
| Guinea | Not in evidence | Not in evidence | Not in evidence |
| Guinea-Bissau | Not in evidence | Not in evidence | Not in evidence |
| Guyana | Not in evidence | Not in evidence | Not in evidence |
| Haiti | Not in evidence | Not in evidence | Not in evidence |
| Honduras | Not in evidence | Not in evidence | Not in evidence |
| Hungary | Not in evidence | Pass | Partial |
| Iceland | Not in evidence | Pass | Pass |
| India | Partial | Not in evidence | Pass |
| Indonesia | Not in evidence | Partial | Partial |
| Iran | Not in evidence | Not in evidence | Not in evidence |
| Iraq | Not in evidence | Not in evidence | Not in evidence |
| Ireland | Not in evidence | Not in evidence | Not in evidence |
| Israel | Not in evidence | Not in evidence | Partial |
| Italy | Not in evidence | Pass | Pass |
| Jamaica | Not in evidence | Not in evidence | Not in evidence |
| Japan | Partial | Pass | Partial |
| Jordan | Not in evidence | Not in evidence | Not in evidence |
| Kazakhstan | Not in evidence | Partial | Partial |
| Kenya | Partial | Partial | Partial |
| Kiribati | Not in evidence | Not in evidence | Not in evidence |
| Kosovo | Partial | Not in evidence | Not in evidence |
| Kuwait | Not in evidence | Not in evidence | Not in evidence |
| Kyrgyzstan | Not in evidence | Not in evidence | Not in evidence |
| Laos | Not in evidence | Not in evidence | Not in evidence |
| Latvia | Partial | Pass | Pass |
| Lebanon | Partial | Not in evidence | Not in evidence |
| Lesotho | Not in evidence | Not in evidence | Not in evidence |
| Liberia | Not in evidence | Not in evidence | Not in evidence |
| Libya | Not in evidence | Not in evidence | Not in evidence |
| Liechtenstein | Not in evidence | Pass | Pass |
| Lithuania | Not in evidence | Pass | Partial |
| Luxembourg | Not in evidence | Pass | Partial |
| Madagascar | Not in evidence | Not in evidence | Not in evidence |
| Malawi | Not in evidence | Not in evidence | Not in evidence |
| Malaysia | Not in evidence | Not in evidence | Partial |
| Maldives | Not in evidence | Not in evidence | Not in evidence |
| Mali | Not in evidence | Not in evidence | Not in evidence |
| Malta | Partial | Not in evidence | Partial |
| Marshall Islands | Not in evidence | Not in evidence | Not in evidence |
| Mauritania | Partial | Not in evidence | Not in evidence |
| Mauritius | Not in evidence | Not in evidence | Not in evidence |
| Mexico | Not in evidence | Not in evidence | Not in evidence |
| Micronesia | Not in evidence | Not in evidence | Not in evidence |
| Moldova | Not in evidence | Not in evidence | Not in evidence |
| Monaco | Not in evidence | Not in evidence | Not in evidence |
| Mongolia | Partial | Partial | Partial |
| Montenegro | Partial | Not in evidence | Not in evidence |
| Morocco | Not in evidence | Not in evidence | Not in evidence |
| Mozambique | Not in evidence | Not in evidence | Not in evidence |
| Myanmar | Not in evidence | Not in evidence | Not in evidence |
| Namibia | Partial | Not in evidence | Not in evidence |
| Nauru | Not in evidence | Not in evidence | Not in evidence |
| Nepal | Not in evidence | Not in evidence | Not in evidence |
| Netherlands | Partial | Partial | Pass |
| New Zealand | Not in evidence | Partial | Partial |
| Nicaragua | Not in evidence | Not in evidence | Not in evidence |
| Niger | Not in evidence | Not in evidence | Not in evidence |
| Nigeria | Not in evidence | Not in evidence | Not in evidence |
| North Korea | Not in evidence | Not in evidence | Not in evidence |
| North Macedonia | Not in evidence | Not in evidence | Not in evidence |
| Norway | Not in evidence | Pass | Partial |
| Oman | Not in evidence | Not in evidence | Not in evidence |
| Pakistan | Not in evidence | Not in evidence | Not in evidence |
| Palau | Not in evidence | Not in evidence | Not in evidence |
| Palestine | Not in evidence | Not in evidence | Not in evidence |
| Panama | Not in evidence | Not in evidence | Not in evidence |
| Papua New Guinea | Not in evidence | Not in evidence | Not in evidence |
| Paraguay | Not in evidence | Not in evidence | Not in evidence |
| Peru | Partial | Not in evidence | Partial |
| Philippines | Not in evidence | Partial | Not in evidence |
| Poland | Partial | Partial | Partial |
| Portugal | Partial | Pass | Pass |
| Qatar | Not in evidence | Not in evidence | Not in evidence |
| Republic of the Congo | Not in evidence | Not in evidence | Not in evidence |
| Romania | Partial | Not in evidence | Partial |
| Russia | Not in evidence | Not in evidence | Partial |
| Rwanda | Not in evidence | Not in evidence | Not in evidence |
| Saint Kitts and Nevis | Not in evidence | Partial | Not in evidence |
| Saint Lucia | Not in evidence | Not in evidence | Partial |
| Saint Vincent and the Grenadines | Not in evidence | Not in evidence | Not in evidence |
| Samoa | Not in evidence | Not in evidence | Not in evidence |
| San Marino | Not in evidence | Pass | Pass |
| Sao Tome and Principe | Not in evidence | Not in evidence | Not in evidence |
| Saudi Arabia | Not in evidence | Partial | Not in evidence |
| Senegal | Not in evidence | Not in evidence | Not in evidence |
| Serbia | Partial | Pass | Partial |
| Seychelles | Not in evidence | Partial | Not in evidence |
| Sierra Leone | Not in evidence | Not in evidence | Not in evidence |
| Singapore | Not in evidence | Partial | Partial |
| Slovakia | Partial | Pass | Partial |
| Slovenia | Not in evidence | Partial | Partial |
| Solomon Islands | Not in evidence | Not in evidence | Not in evidence |
| Somalia | Not in evidence | Not in evidence | Not in evidence |
| South Africa | Not in evidence | Not in evidence | Partial |
| South Korea | Partial | Not in evidence | Partial |
| South Sudan | Not in evidence | Not in evidence | Not in evidence |
| Spain | Partial | Partial | Partial |
| Sri Lanka | Not in evidence | Not in evidence | Not in evidence |
| Sudan | Not in evidence | Not in evidence | Not in evidence |
| Suriname | Not in evidence | Not in evidence | Not in evidence |
| Sweden | Not in evidence | Pass | Pass |
| Switzerland | Partial | Partial | Pass |
| Syria | Not in evidence | Not in evidence | Not in evidence |
| Taiwan | Not in evidence | Not in evidence | Pass |
| Tajikistan | Not in evidence | Not in evidence | Not in evidence |
| Tanzania | Not in evidence | Not in evidence | Not in evidence |
| Thailand | Partial | Not in evidence | Partial |
| The Gambia | Not in evidence | Not in evidence | Not in evidence |
| Timor-Leste | Not in evidence | Not in evidence | Not in evidence |
| Togo | Not in evidence | Not in evidence | Not in evidence |
| Tonga | Not in evidence | Not in evidence | Partial |
| Trinidad and Tobago | Not in evidence | Not in evidence | Not in evidence |
| Tunisia | Not in evidence | Not in evidence | Not in evidence |
| Turkey | Not in evidence | Pass | Partial |
| Turkmenistan | Not in evidence | Not in evidence | Not in evidence |
| Tuvalu | Not in evidence | Not in evidence | Not in evidence |
| Uganda | Not in evidence | Not in evidence | Not in evidence |
| Ukraine | Partial | Not in evidence | Not in evidence |
| United Arab Emirates | Not in evidence | Not in evidence | Not in evidence |
| United Kingdom | Partial | Pass | Partial |
| United States | Not in evidence | Partial | Not in evidence |
| Uruguay | Partial | Pass | Partial |
| Uzbekistan | Partial | Not in evidence | Not in evidence |
| Vanuatu | Not in evidence | Not in evidence | Not in evidence |
| Vatican City | Not in evidence | Not in evidence | Not in evidence |
| Venezuela | Not in evidence | Not in evidence | Not in evidence |
| Vietnam | Not in evidence | Not in evidence | Not in evidence |
| Yemen | Not in evidence | Not in evidence | Not in evidence |
| Zambia | Not in evidence | Not in evidence | Not in evidence |
| Zimbabwe | Not in evidence | Not in evidence | Not in evidence |
- Pass
- Partial
- Not in evidence
Our verdicts over data 1.2 (Zenodo record), read 11 Oct 2026. Control scores and the control model are unchanged; these checks sit beside them.
13 countries pass see and revoke; none passes all three
| Country or territory | Grant | See | Revoke |
|---|---|---|---|
| Afghanistan | Not in evidence | Not in evidence | Not in evidence |
| Albania | Not in evidence | Not in evidence | Not in evidence |
| Algeria | Not in evidence | Not in evidence | Not in evidence |
| Andorra | Not in evidence | Passlog of every access within 15 working days, on request | Partialblanket denial; leaving not shown to work |
| Angola | Not in evidence | Not in evidence | Not in evidence |
| Antigua and Barbuda | Not in evidence | Not in evidence | Not in evidence |
| Argentina | Not in evidence | Not in evidence | Partialrefusal right; opt-out use unverified |
| Armenia | Partialper-request approval with chosen scope; purpose is the case | Passevery viewing logged, visible in page or app | Passrevocable consent gates every wider-history request |
| Australia | Partialaccess codes given to chosen providers; purpose is care | Passaccess history for every access, with alerts | Partialcancel deletes; codes; emergency override |
| Austria | Not in evidence | Passfull access log: who viewed which documents and when | Partialopt-out deletes ELGA data; e-vaccination and e-prescriptions excluded |
| Azerbaijan | Partialper-company consent to pull data; purpose unstated; health coverage unverified | Partialevery-request history for company pulls; clinical record none verified | Partialcancel company-pull consent; clinical record n/a |
| Bahamas | Not in evidence | Not in evidence | Partialconsent for new-provider sharing; thin evidence |
| Bahrain | Not in evidence | Not in evidence | Not in evidence |
| Bangladesh | Not in evidence | Partialshared-with list on request; no live log | Partialwithdrawal right; treatment and state uses exempt |
| Barbados | Partialsigned authorisation before QEH releases records; thin evidence | Not in evidence | Not in evidence |
| Belarus | Partialname people who may or may not be told about their health | Not in evidence | Partialrefuse central entry; records otherwise flow |
| Belgium | Not in evidence | Passhistory of consultations | Passwithdraw any time; access needs consent |
| Belize | Not in evidence | Not in evidence | Not in evidence |
| Benin | Not in evidence | Not in evidence | Not in evidence |
| Bhutan | Not in evidence | Not in evidence | Not in evidence |
| Bolivia | Not in evidence | Not in evidence | Not in evidence |
| Bosnia and Herzegovina | Not in evidence | Not in evidence | Not in evidence |
| Botswana | Not in evidence | Not in evidence | Not in evidence |
| Brazil | Not in evidence | Not in evidence | Not in evidence |
| Brunei | PartialBruHealth app permissions; health-data scope unclear | Not in evidence | Not in evidence |
| Bulgaria | Partialconsent limited to chosen records or providers; purpose unstated | PartialGP views confirmed; wider coverage unclear | Passwithdraw any time; providers then lose access |
| Burkina Faso | Not in evidence | Not in evidence | Not in evidence |
| Burundi | Not in evidence | Not in evidence | Not in evidence |
| Cambodia | Not in evidence | Not in evidence | Not in evidence |
| Cameroon | Not in evidence | Not in evidence | Not in evidence |
| Canada | Not in evidence | PartialQuebec portal; Ontario request only; others unreviewed | PartialQuebec restricts; Ontario whole-repository blocks with override |
| Cape Verde | Not in evidence | Not in evidence | Not in evidence |
| Central African Republic | Not in evidence | Not in evidence | Not in evidence |
| Chad | Not in evidence | Not in evidence | Not in evidence |
| Chile | Not in evidence | Not in evidence | Not in evidence |
| China | Not in evidence | Not in evidence | Not in evidence |
| Colombia | Not in evidence | Not in evidence | Not in evidence |
| Comoros | Not in evidence | Not in evidence | Not in evidence |
| Costa Rica | PartialCompartir code gives an outside provider temporary limited access | Passcertified access record on request at the clinic | Not in evidence |
| Côte d'Ivoire | Not in evidence | Not in evidence | Not in evidence |
| Croatia | Partialallow or deny by clinician category; purpose is care | Passportal shows who viewed which data and when | Passallow or deny by clinician category |
| Cuba | Not in evidence | Not in evidence | Not in evidence |
| Cyprus | Not in evidence | Partiallaw rights attach to an unbuilt record bank | Not in evidence |
| Czechia | Partialallow named doctors on the medication record; shared record unverified | Partialmedication log yes; shared record unverified | Passobject any time, held in a national register |
| Democratic Republic of the Congo | Not in evidence | Not in evidence | Not in evidence |
| Denmark | Not in evidence | Passlog shows who looked; exact time not shown | Partialrefusals yield to overriding interests |
| Djibouti | Not in evidence | Not in evidence | Not in evidence |
| Dominica | Not in evidence | Not in evidence | Not in evidence |
| Dominican Republic | Not in evidence | Not in evidence | Not in evidence |
| Ecuador | Not in evidence | Not in evidence | Not in evidence |
| Egypt | Not in evidence | Not in evidence | Not in evidence |
| El Salvador | Not in evidence | Partiallearn who consulted; practice unverified | Not in evidence |
| Equatorial Guinea | Not in evidence | Not in evidence | Not in evidence |
| Eritrea | Not in evidence | Not in evidence | Not in evidence |
| Estonia | Partialnamed representatives with chosen rights; purpose unstated | Passlogbook per document; prescriptions on eesti.ee | Passforbid access; close record or documents |
| Eswatini | Not in evidence | Partiallaw right to learn who accessed; unverified | Not in evidence |
| Ethiopia | Not in evidence | Not in evidence | Not in evidence |
| Fiji | Not in evidence | Not in evidence | Not in evidence |
| Finland | Not in evidence | Passunits in OmaKanta; staff names need per-provider requests | Passpermit valid until revoked; no permit, no sharing |
| France | Not in evidence | Passactivity history plus connection notifications | Partialclose the space any time; emergency open unless objected |
| Gabon | Not in evidence | Not in evidence | Not in evidence |
| Georgia | Not in evidence | Partiallogs required; live portal unverified | Partialhide or share episodes; emergency once with reason; unverified live |
| Germany | Not in evidence | Passaccess log in the app | Passobject to the record, uses, or named providers |
| Ghana | Not in evidence | Not in evidence | Not in evidence |
| Greece | Not in evidence | Passtold who looked and when, by entry, email or SMS | Not in evidence |
| Greenland | Not in evidence | Not in evidence | Partialrefuse passing data on; use in the record unverified |
| Grenada | Not in evidence | Not in evidence | Not in evidence |
| Guatemala | Not in evidence | Not in evidence | Not in evidence |
| Guinea | Not in evidence | Not in evidence | Not in evidence |
| Guinea-Bissau | Not in evidence | Not in evidence | Not in evidence |
| Guyana | Not in evidence | Not in evidence | Not in evidence |
| Haiti | Not in evidence | Not in evidence | Not in evidence |
| Honduras | Not in evidence | Not in evidence | Not in evidence |
| Hungary | Not in evidence | Passlog of every query | Partialblocks; open prescriptions and referrals unblockable |
| Iceland | Not in evidence | Passright to learn who accessed, where, when and why; on request | Passban sharing by provider, department or named party |
| India | Partialper-access revocable time-bound consent; no scope choice | Not in evidence | Passrevocable time-bound consent nationwide |
| Indonesia | Not in evidence | PartialRME app history at a few facilities; elsewhere unverified | Partialper-access code at RME facilities; no ministry opt-out |
| Iran | Not in evidence | Not in evidence | Not in evidence |
| Iraq | Not in evidence | Not in evidence | Not in evidence |
| Ireland | Not in evidence | Not in evidence | Not in evidence |
| Israel | Not in evidence | Not in evidence | Partialfull exit from the exchange; health fund keeps own data |
| Italy | Not in evidence | Passlog of every upload, masking and consultation | Passrevoking disables consultation |
| Jamaica | Not in evidence | Not in evidence | Not in evidence |
| Japan | Partialper-visit item choice for the treating clinic; purpose is care | Passseven-year provision history plus emergency views | Partialper-visit choice; emergency viewing without consent |
| Jordan | Not in evidence | Not in evidence | Not in evidence |
| Kazakhstan | Not in evidence | Partialevery-use notices required; working log unverified | Partialconsent withdrawal service; central collection exempt; unverified |
| Kenya | Partialper-pull client authorisation; reliability unverified | Partiallog and alerts required; May 2026 case shows unreliable | Partialwithdrawal right; prompts unverified |
| Kiribati | Not in evidence | Not in evidence | Not in evidence |
| Kosovo | Partial2004 law lets patients name who may learn of the illness; unverified | Not in evidence | Not in evidence |
| Kuwait | Not in evidence | Not in evidence | Not in evidence |
| Kyrgyzstan | Not in evidence | Not in evidence | Not in evidence |
| Laos | Not in evidence | Not in evidence | Not in evidence |
| Latvia | Partialdelegate held rights to another person; purpose unstated | Passaudit log for any chosen period | Passdeny all access or restrict chosen providers and data |
| Lebanon | Partialviewing only at the patient request; ethics law, no tool | Not in evidence | Not in evidence |
| Lesotho | Not in evidence | Not in evidence | Not in evidence |
| Liberia | Not in evidence | Not in evidence | Not in evidence |
| Libya | Not in evidence | Not in evidence | Not in evidence |
| Liechtenstein | Not in evidence | Passaccess log, kept three years | Passopt out any time; dossier deleted |
| Lithuania | Not in evidence | Passper-document view history with name, time and reason | Partialrestrict documents; emergency, primary care and representatives exempt |
| Luxembourg | Not in evidence | Passlog of every access | Partialoppose any time; referring doctor unblockable |
| Madagascar | Not in evidence | Not in evidence | Not in evidence |
| Malawi | Not in evidence | Not in evidence | Not in evidence |
| Malaysia | Not in evidence | Not in evidence | Partialwritten withdrawal; implied-consent base |
| Maldives | Not in evidence | Not in evidence | Not in evidence |
| Mali | Not in evidence | Not in evidence | Not in evidence |
| Malta | Partiallink chosen doctors; cross-border choice is country level for emergencies | Not in evidence | Partialremove a doctor link, access ends; hospital sharing separate |
| Marshall Islands | Not in evidence | Not in evidence | Not in evidence |
| Mauritania | Partialexplicit permission for telemedicine sharing only | Not in evidence | Not in evidence |
| Mauritius | Not in evidence | Not in evidence | Not in evidence |
| Mexico | Not in evidence | Not in evidence | Not in evidence |
| Micronesia | Not in evidence | Not in evidence | Not in evidence |
| Moldova | Not in evidence | Not in evidence | Not in evidence |
| Monaco | Not in evidence | Not in evidence | Not in evidence |
| Mongolia | Partialconsent before passing data to another controller; withdrawal unstated | Partialtransfer and access notices required; delivery unverified | Partialconsent-gated passing; withdrawal unstated |
| Montenegro | Partialname who may be told about the illness; no tool | Not in evidence | Not in evidence |
| Morocco | Not in evidence | Not in evidence | Not in evidence |
| Mozambique | Not in evidence | Not in evidence | Not in evidence |
| Myanmar | Not in evidence | Not in evidence | Not in evidence |
| Namibia | Partialpermission before sharing with spouses, partners or relatives | Not in evidence | Not in evidence |
| Nauru | Not in evidence | Not in evidence | Not in evidence |
| Nepal | Not in evidence | Not in evidence | Not in evidence |
| Netherlands | PartialMitz consent for all, one, or a group of providers; purpose is care, unstated per grant | PartialVolgjezorg covers the national switch point only | Passrefuse all sharing in Mitz; sharing needs consent |
| New Zealand | Not in evidence | Partialregional logs on request; national choices not live | Partialimmunisation restriction; regional opt-outs; national future |
| Nicaragua | Not in evidence | Not in evidence | Not in evidence |
| Niger | Not in evidence | Not in evidence | Not in evidence |
| Nigeria | Not in evidence | Not in evidence | Not in evidence |
| North Korea | Not in evidence | Not in evidence | Not in evidence |
| North Macedonia | Not in evidence | Not in evidence | Not in evidence |
| Norway | Not in evidence | Passlog of who looked; 2026 law adds disclosure log | Partialopt-out deletes; general blocks yield in acute danger |
| Oman | Not in evidence | Not in evidence | Not in evidence |
| Pakistan | Not in evidence | Not in evidence | Not in evidence |
| Palau | Not in evidence | Not in evidence | Not in evidence |
| Palestine | Not in evidence | Not in evidence | Not in evidence |
| Panama | Not in evidence | Not in evidence | Not in evidence |
| Papua New Guinea | Not in evidence | Not in evidence | Not in evidence |
| Paraguay | Not in evidence | Not in evidence | Not in evidence |
| Peru | Partialauthorised-professionals gate; unverified in practice | Not in evidence | Partialauthorised-professionals gate; unverified |
| Philippines | Not in evidence | Partialaccess record on request; honoring unverified | Not in evidence |
| Poland | Partialgrant named professionals, facilities or pharmacies access, time and subject stated | Partialask Centrum e-Zdrowia; self-service unverified | Partialwithdraw any time; broad listed exceptions |
| Portugal | Partialgrant or refuse access by sector in SNS 24; purpose unstated | Passnotified of any access; years of views in SNS 24 | Passrefuse access; May 2026 case shows limits |
| Qatar | Not in evidence | Not in evidence | Not in evidence |
| Republic of the Congo | Not in evidence | Not in evidence | Not in evidence |
| Romania | Partiallaw lets patients choose doctors; new portal unverified | Not in evidence | Partialrefuse the record, data anonymised; portal unverified |
| Russia | Not in evidence | Not in evidence | Partialwritten refusal honored, per regulator; thin evidence |
| Rwanda | Not in evidence | Not in evidence | Not in evidence |
| Saint Kitts and Nevis | Not in evidence | Partialportal claims a view; unverified in use | Not in evidence |
| Saint Lucia | Not in evidence | Not in evidence | Partialrevoke for compelling reason |
| Saint Vincent and the Grenadines | Not in evidence | Not in evidence | Not in evidence |
| Samoa | Not in evidence | Not in evidence | Not in evidence |
| San Marino | Not in evidence | Passevery access logged, checkable by the owner | Passrevoke FSE consent through the ISS |
| Sao Tome and Principe | Not in evidence | Not in evidence | Not in evidence |
| Saudi Arabia | Not in evidence | Partialdisclosure report on request; unverified; app log is admin only | Not in evidence |
| Senegal | Not in evidence | Not in evidence | Not in evidence |
| Serbia | Partialgrant contacts, doctors and pharmacists permissions, time limited, off by default | Passhistory with date, time, worker and legal basis | Partialpermissions off by default, time limited; chosen doctor unblockable |
| Seychelles | Not in evidence | Partialsix-month recipient list on request; unverified | Not in evidence |
| Sierra Leone | Not in evidence | Not in evidence | Not in evidence |
| Singapore | Not in evidence | Partialone-year log of institutions, not staff | Partialblock all access; break-glass override |
| Slovakia | Partialgive a clinician or another person access, withdraw any time | Passwho, when, role and records for every access and attempt | Partialwithdraw extra access; treating access unblockable |
| Slovenia | Not in evidence | Partialinstitutions named, not staff | Partialprohibit viewing per or all providers; identifiers stay visible |
| Solomon Islands | Not in evidence | Not in evidence | Not in evidence |
| Somalia | Not in evidence | Not in evidence | Not in evidence |
| South Africa | Not in evidence | Not in evidence | Partialrevoke scheme-app consent; members only |
| South Korea | Partialsend records to chosen places, apps and firms; purpose unstated | Not in evidence | PartialHighway consent and withdrawal; claims flow by law |
| South Sudan | Not in evidence | Not in evidence | Not in evidence |
| Spain | Partialnon-treating access needs patient authorisation | Partialnational layer complete; regional logs vary | Partialhide national-layer reports; regional treating access by law |
| Sri Lanka | Not in evidence | Not in evidence | Not in evidence |
| Sudan | Not in evidence | Not in evidence | Not in evidence |
| Suriname | Not in evidence | Not in evidence | Not in evidence |
| Sweden | Not in evidence | Passtold on request; portal in some regions | Passobjection blocks sharing at once |
| Switzerland | Partialgrant rights to individuals or groups, time limited; EPD only, few holders | PartialEPD log only; most patients outside the EPD | Passrevoke any time; dossier closes |
| Syria | Not in evidence | Not in evidence | Not in evidence |
| Taiwan | Not in evidence | Not in evidence | Passcard password stops all queries; set in person |
| Tajikistan | Not in evidence | Not in evidence | Not in evidence |
| Tanzania | Not in evidence | Not in evidence | Not in evidence |
| Thailand | Partialchoose which hospitals may share; Health Link only | Not in evidence | Partialwithdraw Health Link consent; ministry cloud unverified |
| The Gambia | Not in evidence | Not in evidence | Not in evidence |
| Timor-Leste | Not in evidence | Not in evidence | Not in evidence |
| Togo | Not in evidence | Not in evidence | Not in evidence |
| Tonga | Not in evidence | Not in evidence | Partialrevoke and flag; care sharing on implied consent |
| Trinidad and Tobago | Not in evidence | Not in evidence | Not in evidence |
| Tunisia | Not in evidence | Not in evidence | Not in evidence |
| Turkey | Not in evidence | Passevery profile listed with date and time | PartialSMS code gate; family and emergency keep access; no deletion |
| Turkmenistan | Not in evidence | Not in evidence | Not in evidence |
| Tuvalu | Not in evidence | Not in evidence | Not in evidence |
| Uganda | Not in evidence | Not in evidence | Not in evidence |
| Ukraine | Partialother clinicians request permission, confirmed by SMS code | Not in evidence | Not in evidence |
| United Arab Emirates | Not in evidence | Not in evidence | Not in evidence |
| United Kingdom | Partialstaff ask permission before viewing the Summary Care Record | Passaudit trail via subject access request | PartialSummary Care Record opt-out; Federated Data Platform none |
| United States | Not in evidence | Partialsix-year log minus treatment, payment and operations | Not in evidence |
| Uruguay | Partialallow selected providers for a limited period; purpose unstated | Passeveryone who accessed, visible at any time | Partialobjection blocks access; ministry keeps its right |
| Uzbekistan | Partialchoose who may be told about their health; tool unstated | Not in evidence | Not in evidence |
| Vanuatu | Not in evidence | Not in evidence | Not in evidence |
| Vatican City | Not in evidence | Not in evidence | Not in evidence |
| Venezuela | Not in evidence | Not in evidence | Not in evidence |
| Vietnam | Not in evidence | Not in evidence | Not in evidence |
| Yemen | Not in evidence | Not in evidence | Not in evidence |
| Zambia | Not in evidence | Not in evidence | Not in evidence |
| Zimbabwe | Not in evidence | Not in evidence | Not in evidence |
How we graded the mechanism
- Grant. Pass needs a working mechanism where the person directs access, or a copy, to a party they choose, for a stated or approved purpose. Partial covers chosen recipients without a stated purpose, per-request or per-access approvals, naming rights, and mechanisms with thin or unverified evidence.
- See. Pass needs a complete log, history, journal, audit trail or notification record the person can obtain, self-serve or on request, with no category of access excluded. Retention windows and request friction are noted, never failing. Partial covers logs with stated exclusions, unverified practice, or partial coverage.
- Revoke. Pass needs stated refusal, deletion or blocking semantics, or access gated on consent plus stated revocation. Partial covers revocation with stated exceptions, carve-outs, narrow scope, or an unverified consequence.
A paper right with no working mechanism in evidence never passes: that is the mechanism test. We found every candidate with word nets over the control texts (grant, delegate, authorise and permit language; log, history and audit language; revoke, withdraw and opt-out language) and read every match in context. A ten-country full-read sample moved five verdicts and added one net; every pass verdict was re-read before it shipped. The full method with the exact nets ships in the repo as analysis/mechanism/METHOD.md. These checks are candidates for the next version of our scoring rules; they change no score in this one.
The empty box has a reference design
No country's evidence passes the grant check, and no national system puts the person alone in charge (the Individual control model is empty in all 198). One worked design shows what that box would take: the LifeCare preprint by Raphael Gernot (Enbarca Inc.), Zenodo DOI 10.5281/zenodo.22855810, explained at lifecare.id/paper.
- A consent receipt for every grant, shaped to ISO/IEC TS 27560, approved by a passkey assertion over the grant.
- A patient-held authorization server on the UMA pattern: purpose-bound, single-scope tokens, validated by introspection, dead within half a second of revocation.
- Raw values that never leave the node that holds them; only interpreted outputs cross to apps.
What it is not: a preprint, not a peer-reviewed paper; one production node, not a national system; a wellness system, not clinical care; attestation not yet hardware-rooted. All limits as the paper states them. It is cited as a reference implementation, never scored. The AI half of this exhibit cites the same design for running the model where the data lives.
Built by SuperTruth, which checks whether a record can be trusted before an AI acts on it. About SuperTruth · How we used AI · Follow changes