Symplicured

Back to Blog
Product Updates

Share Your Health Passport: Secure Links, QR Codes, and GDPR-Compliant Consent

Symplicured Team9 min read
Share Your Health Passport: Secure Links, QR Codes, and GDPR-Compliant Consent

Your Health Data, Shared on Your Terms

Your Health Passport contains some of the most personal information you have: diagnoses, lab results, medications, vitals, and symptom history. Sharing it should be as secure as it is simple.

Symplicured now lets you share your Health Passport with a secure link or QR code — with full GDPR compliance, explicit consent workflows, and automatic expiry built in.

How Sharing Works

Step 1: Initiate Sharing

On your Health Passport page, you will see a Share Health Passport button alongside the download option. Tapping it opens the consent flow.

Before any data leaves your profile, you see a clear consent dialog that explains:

  • What will be shared — A complete list of data categories included in your shared passport (diagnoses, medications, lab results, vitals, symptom history, visit summaries)
  • Legal basis — The share operates under GDPR Article 9(2)(a) — explicit consent for processing special category health data
  • Duration — Your shared link expires automatically after 5 days
  • Your rights — You can revoke access at any time

You must explicitly check a consent checkbox before the share link is generated. This is not a formality — it is a legal safeguard that ensures you have genuinely understood and agreed to share your health data.

Once you consent, two things are generated instantly:

  • A secure URL — A unique link you can copy and send via any messaging app, email, or text
  • A QR code — A scannable code that opens the same link, perfect for in-person sharing at a doctor's office

The link contains a unique, cryptographically generated token. It cannot be guessed, and it expires after 5 days.

The Viewer Experience

When someone opens your shared Health Passport link, they see a carefully designed viewer page:

Before seeing any data, the viewer is asked to acknowledge that they are accessing personal health information. This ensures:

  • The viewer understands the sensitivity of the data
  • Accidental or unauthorised viewing is prevented
  • A clear record exists that consent was obtained on both sides

If the viewer declines, no data is shown. They simply see a notice that access was declined.

Professional Health Data Display

If the viewer consents, they see your health data presented in a clean, professional format:

  • Diagnoses and assessments — With confidence scores and status badges
  • Lab results — Colour-coded by status (normal, high, low) with reference ranges
  • Medications — Current medications with dosage and frequency
  • Vitals — Blood pressure, heart rate, temperature, SpO2, and BMI
  • Symptom trends — A chronological view of reported symptoms
  • Visit summaries — Complete clinical notes from your assessments

The viewer page is responsive and works on any device — phone, tablet, or desktop. Tables are formatted for readability, and trend badges provide quick visual context.

No Account Required

The viewer does not need a Symplicured account to access your shared passport. The link works for anyone — your doctor, a family member, an emergency contact, or a specialist you are seeing for the first time.

Security and Privacy Architecture

Token-Based Access

Each shared passport uses a unique token stored in a shared_passports table with:

  • patient_id — Links the share to your account
  • report_data — A JSONB snapshot of your health data at the time of sharing
  • consent_timestamp — When you gave explicit consent
  • consent_type — Records that GDPR Article 9(2)(a) consent was obtained
  • expires_at — Automatic expiry after 5 days (TTL-based)

Data Snapshot

When you share your passport, the system creates a point-in-time snapshot of your health data. This means:

  • Changes you make after sharing do not affect the shared view
  • The viewer sees exactly what your health profile looked like when you chose to share
  • Your live data remains private and under your control

Automatic Expiry

Shared links expire automatically after 5 days. After expiry, the link shows a clear notice that the passport is no longer available. This prevents stale health data from remaining accessible indefinitely.

Expired and Error States

The viewer page gracefully handles:

  • Expired tokens — A clear message that the shared passport has expired
  • Invalid tokens — A notice that the link is not valid
  • Declined consent — A message confirming that access was declined by the viewer

Use Cases

Doctor Consultations

Share your Health Passport before an appointment so your doctor can review your history in advance. Or show the QR code at reception and let the clinic pull up your data on their screen.

Emergency Situations

In an emergency, having a QR code that reveals your medications, allergies, and recent diagnoses can provide critical context for first responders or emergency department staff.

Second Opinions

Seeking a second opinion from a specialist? Share your complete health record without the hassle of requesting paper records from your primary care provider.

Family Caregivers

If you are caring for a parent or family member, they can share their Health Passport with you so you have full visibility into their health data when coordinating their care.

Travel

When travelling internationally and needing medical attention, a shared Health Passport provides a doctor who has never seen you before with everything they need — in a language they can read.

How to Share Your Health Passport

  1. Log in to symplicured.com
  2. Go to your Profile and select the Health Passport tab
  3. Click Share Health Passport
  4. Review the data categories and GDPR consent notice
  5. Check the consent checkbox and confirm
  6. Copy the secure link or show the QR code to your recipient

Your health data. Your decision. Your control.


Symplicured's Health Passport sharing lets you send a secure, GDPR-compliant link or QR code to anyone — doctors, family, or caregivers. Auto-expires after 5 days, requires viewer consent, and no account needed to view. Share your passport.

product updatehealth passportshareGDPRQR codeprivacydata sharingconsent

Share this article