[h1fra]

oh I forgot about that indeed. I guess the proposed solution in the article would not even be useful since a filtering on a encrypted boolean would not work and there is no way to "hide" this value.

Is it okay if everything is plaintext but the name? In that case you have a row of sensitive data without anything to link to the actual patient if it leaks.

[e12e]

Sometimes the fact that someone is a patient is sensitive. Eg an abortion clinic.