How secure is your system if the patient allows researchers to access their data? Is there any standard amount of rewards that will be given to patients?
maybe the researchers is only on statistics and graphs on what is the common diagnoses and as you say, they are researchers and the security is not problem with regards to healthcare records.
Security is of course a great problem since these data are very intimate and private to patients. That is why there is what you call doctor and patient confidentiality.
Insurance is one of the reasons that is should be secure. These info can be used against a patient.
