PHASE 01
Living personal-data map
Discovery linked clinical, billing, and research records to individual patients — including unstructured notes and scans.
Case Studies / Healthcare
NovaCare Health: cross-border patient data, finally compliant
12 regions, one consent model Rights requests in 3 days Research timelines untouched
The challenge
Twelve regions, twelve rulebooks
NovaCare Health runs hospitals and research programs in twelve regions, each with its own consent and residency requirements. Patient data flowed into shared research datasets with no systematic check on purpose or place — and every new study began with a six-week legal review.
Rights requests were worse: locating one patient's records across clinical, billing, and research systems took the privacy team over a month per request.
The approach
Consent that travels with the data
PHASE 02
Regional rules, automated
Residency and purpose rules for all twelve regions were codified once; transfers and study cohorts are checked automatically.
PHASE 03
Requests in days
Access and deletion requests now assemble from the live map and complete in three days on average — with full documentation.
"Twelve regions, one consent model, zero research delays. Hushgate Privacy gave our privacy team the map they'd been asking for for years."
Data Protection Officer, NovaCare Health