INTRODUCTION
The healthcare systems of all countries are experiencing an increasing pressure to provide their patients with a timely and personal care as well as ensure the security of their personal medical data1. There is a growing trend of having more people survive longer with chronic diseases such as diabetes, heart disorders and high blood pressure2. Hospitals and doctors require new data within one minute so that they can identify the problem and cure it fast. Here is where Internet of Things (IoT) devices come in. They are mini wearables, smart sensors and connected machines that patients wear or have at home. They constantly monitor the vital signs: heart rate, blood sugar, the amount of oxygen in the blood, and even sleep patterns and transmit the data immediately to a doctor or a nurse. When these IoT devices are connected to blockchain, the data is entered into some special digital notebook, which no one is allowed to edit or delete3. Blockchain is a shared and encrypted journal of hundreds of computers. It provides complete visibility, high level of security and allows the patient to remain in complete control of access to his/her records. In combination, IoT and blockchain will result in a smart patient monitoring system in real-time that can save lives and reduce the number of unnecessary visits to the hospital.
Already, this combination of IoT and blockchain is promising a lot. It can be used to have a better management of chronic diseases because it sends alerts automatically when something is off. It also lowers readmissions in the hospitals since the physicians are able to monitor the patients even when the patients are miles away. During an emergency, it can accelerate the response process as the correct information can reach the correct individual within a few seconds. This is a potential that is felt in the business world. According to recent market research, the healthcare IoT industry in the world is expanding rapidly – in 2025, the market is approximately USD 112 billion, and by 2035, the industry has developed to approximately USD 429 billion4. These solutions are being tested in real homes and hospitals by the companies and governments and are used to monitor the safety and share data remotely5. Numerous pilot projects are already operating successfully and it demonstrates that the technology can be effective under the condition of the right set-ups. However, the actual work is not the creation of the tools. It is ensuring that they get on the right side of clear rules such that patients can feel secure and the doctors trust the system to work on a daily basis.
Law wise, smart healthcare governance is far beyond the new gadgets. It implies the formulation of concrete legislations regarding ownership of the data, the true consent of the patients, cross-border safety of information, payment in the case of malfunction, and liability in case computer recommendations influence medical decisions6. Nations are doing this differently, with the experience of each other. Since 2016, Estonia has been a pioneer due to the use of blockchain-protected health records and the X-Road system which allows various services to exchange data safely7. Almost all health records in Estonia are digitalized and controlled by patients as early as 2026. The Smart Nation programme in Singapore incorporates IoT sensors with blockchain within the hospitals and home care of the population, particularly older adults8. The United States is implementing blockchain to enhance electronic health records through its old HIPAA privacy regulations9. In India, the Ayushman Bharat Digital Mission has already developed more than 870 million Ayushman Bharat Health Accounts by March 202610. It is in tandem with the Digital Personal Data Protection Act 2023 and the Rules which will be published in November 2025 and which consider health data extremely sensitive and requiring severe protection11. These various strategies demonstrate that good governance can transform new technology as a reliable instrument of enhanced health in all locations.
A. Research Gap
The majority of research regarding blockchain and IoT in healthcare is limited to the technical aspect. The literature released in 2025-2026 outlines how the systems gather real-time data on the patient, how the smart contracts handle consent, and how edge computing reduces time. Such papers discuss such convenient features as immutable records and improved information exchange among hospitals. Nonetheless, very few of them examine the legal and regulatory issues that accompany such technologies. They seldom talk about the actual operation of the data protection laws in the context of decentralised systems that continue running 24 hours a day.
This leaves very crucial questions unanswered. A close comparison of the application of major legislations, including the EU GDPR, the HIPAA of America, rules on DPDP in India, or the Personal Data Protection Act in Singapore, to blockchain-IoT applications in live patient monitoring is virtually non-existent12. The problem of patient consent on ongoing data flow, the question of the person in charge in case a device does not send an alert, and the security of data transfer across the borders is not studied to a large extent. As of the beginning of 2026, no significant research has been done to compare the governance of Estonia, Singapore, the United States, and India to extract the lessons that can be used by the rest of the world13. This is a significant gap since ambiguous laws constitute the greatest obstacle to broader usage. In the absence of solid rules, hospitals are fined a lot, patients lose their confidence and new ideas are not going ahead. The given article addresses that gap by offering a straightforward, law-oriented comparison according to the most recent 2025-2026 developments.
B. Research Questions
1. How do current data protection and health privacy laws in leading jurisdictions support or constrain the integration of blockchain and IoT for real-time patient monitoring?
2. What legal governance models best balance innovation, patient rights, and regulatory compliance in blockchain-IoT healthcare systems?
3. What policy and legislative lessons can countries like India draw from global leaders such as Estonia and Singapore to strengthen smart healthcare governance?
C. Research Objectives
The primary goal of the paper is to review legal frameworks under which blockchain and Internet of Things (IoT) technologies are deployed to monitor patients in real time regardless of various countries. It takes a close examination of the application of the laws on data privacy, consent, security, and accountability in major jurisdictions including Estonia, Singapore, United States, and India14. The research will focus on identifying weaknesses and strengths of the existing systems of governance and will also enable the identification of the best practices in order to develop superior systems. Particular focus is put on the way in which these frameworks strike the balance between the rights of the patients and the necessity to innovate in the sphere of smart healthcare. Lastly, the study aims to include practical and straightforward recommendations to the establishment of a balanced regulatory approach. This moderate approach would guarantee the privacy and the data of patients and promote the adoption of blockchain and IoT technologies in medicine across the world on the basis of safety and efficiency. The article, through this analysis, hopes to inform policymakers, lawmakers and health care providers to come up with more robust and more credible smart healthcare governance.
D. Research Methodology
This paper applies the doctrinal and comparative legal research approaches. The main laws that have been analyzed in the doctrinal review are the DPDP Act 2023 and 2025 Rules of India, the US HIPAA, the EU GDPR, and the Singapore data protection laws, as well as the government reports and recent papers of 2025-202615. The paper discusses different governance in Estonia, Singapore, the United States, and India through comparative analysis in terms of consent, data security, liability, and interoperability16. The analysis is conducted exclusively on a qualitative level in order to define legal patterns and policy loopholes.
E. Scope and Limitations
This research focuses exclusively on the legal and regulatory aspects of integrating blockchain and Internet of Things (IoT) for real-time patient monitoring. It explores major governance issues such as data privacy, patient consent, system security, liability for failures, and rules for cross-border data sharing. Technical details about system functioning are discussed only where they directly affect legal requirements. The study examines four key jurisdictions Estonia, Singapore, the United States, and India to present a balanced global perspective between established leaders and a rapidly growing emerging economy. The analysis covers developments up to March 2026.
The main limitations arise from reliance on secondary sources such as statutes, government reports, and recent articles. Technology and regulations evolve quickly, making some findings time-sensitive. In India, the DPDP Rules 2025 are in early implementation, with full compliance extending until 2027, so long-term judicial interpretations are not yet available. Topics like blockchain scalability and emerging AI regulations are noted but not examined in depth. Despite these constraints, the comparative legal method offers valuable and practical insights for policymakers, healthcare administrators, and legal experts shaping smart healthcare governance.
F. Conceptual Framework: Blockchain and IoT in Smart Healthcare Governance
The Internet of Things (IoT) devices are the core of the modern healthcare because they can gather real-time physiological data of the patients. These devices encompass wearables i.e. smart watches, body sensors on the skin and connected medical apparatuses worn either in the home or hospitals. They constantly monitor key indicators, which can be discussed as the heart rate, blood glucose levels, oxygen saturation, blood pressure, breathing rate, and sleep patterns. Then the data gathered is relayed to cloud servers or edge computing devices that are near to the patient to be processed faster. This system enables the doctors and nurses to keep track of the patient remotely in real time and get automatic alerts in case any vital sign falls outside the normal range.
G. The use of Blockchain with IoT.
A blockchain is a decentralised digital registry, or book, that documents this health information or at least secure fingerprints of it in digital form usually referred to as hashes in a manner that cannot be then altered or erased. Blockchain is distributed among a large number of computers as opposed to traditional central databases that are managed by a single organisation. This increases the security and transparency of the system. The automation of important tasks is achieved with the help of smart contracts which are self-executing computer codes on the blockchain. They are also in charge of patient consent, are able to control access to the data, and keep clear audit records of all the actions performed without the involvement of a middleman such as hospital administrator.
This combination in the terms of governance forms a system of trustlessness. Patients will take the actual control of their data. Only the information accessible to the healthcare providers can be accessed. The transparent and immutable logs can easily be verified by regulators and auditors on compliance. This will minimise chances of data manipulation, unauthorised access, or records loss that is common in centralised systems.
RECENT DEVELOPMENTS: THE FIB-MOBA-EAFG FRAMEWORK.
In 2026, recent studies have put forward practical frameworks that can ensure this integration is made even better without compromising on privacy17. A good example is the FiB-MOBA-EAFG framework, created by researchers and posted in the journal Electronics in early 202618. This is an artificial intelligence and blockchain hybrid system. It employs the fuzzy logic in dealing with uncertain conditions, multi-objective optimisation in dealing with balancing various objectives and emergency-conscious feasibility filtering when dealing with critical situations.
The framework is implementation in tiers. Raw health information of the IoT devices remains off-chain (not stored on the blockchain) to maintain privacy and minimize storage expenses. Record on-chain only the consent events, access permissions and hashed traces of decisions to be accountable. This isolation makes the system fast and scalable and makes sure that all the actions are audited in the future. It covers trade-offs among privacy, speed (latency), energy consumption, and robustness in particular in cases of medical emergencies when time of decision is critical.
Key Governance Pillars:
The general management of blockchain and IoT in smart healthcare is based on four significant pillars which follow the global privacy principles19:
1. Patient-centered consent: Patients need to provide direct, informed and continuous consent to the collection and sharing of their data. This is dynamically and revocably done in real-time with smart contracts20.
2. Limitation on minimisation of data and limitation of its purpose: The data to be collected must be the minimum data; they must be used only to the purpose stated which is that to serve a specified medical use. This keeps aside needless storage of sensitive information21.
3. Security and integrity: The blockchain guarantees that there is no possibility of altering the information, and data is available only to authorized individuals and not to hackers with the help of powerful encryption and access controls. The IoT devices must be connected in a way that is secure to prevent the sources of vulnerability22.
4. Responsibility and remedies: All the access or change should be recorded in an evident manner. Patients must be given easy means of complaining and seeking remedies in case something is not going well23.
These pillars provide fundamental privacy principles that are observed in the global context, including purpose limitation and security principles. But they encounter true practical problems in real time monitoring. There is constant movement of data and changes every minute and therefore the old one-time consent forms do not work anymore. It is still challenging to balance speed (low latency in dealing with emergencies) and high levels of privacy protection. Another problem is that, in cases of millions of IoT devices generating bulk data, scalability becomes a problem. Hurdles are also brought about by energy consumption of certain blockchain networks and compatibility with old systems in hospitals.
Irrespective of all these, the IoT and blockchain underlying conceptual framework also provides an excellent platform in the development of credible smart healthcare systems. It gives patients power, enhances clinical decision making, minimizes fraud and aids in management of chronic diseases. Countries such as Estonia, Singapore, United States and India are in the process of creating digital health programmes and this structure assists in informing the legal and policy decisions. It is probable that in the future, the work on such systems will be aimed at increasing their usability, energy efficiency, and full compliance with the changing legislation in data protection.
LEGAL AND REGULATORY FRAMEWORKS: A GLOBAL OVERVIEW.
Nations of the world have developed various rules and regulations to govern the use of blockchain and Internet of Things (IoT) in healthcare. These policies are to defend the privacy of the patients and enable novel technologies to enhance care. Even though the fundamental concepts are the same like securing information and obtaining consent of the patient, the implementation process of each nation differs depending on their requirements and the governmental form.
A. European Union and Estonia: Strong Privacy with Patient Control.
The General Data Protection Regulation (GDPR) is adhered to in the European Union24. This legislation demands clear patient permission when collecting and using patient data. It also requires minimisation of data – only one should gather what is needed – and “privacy by design” that means systems should be constructed in a safe way. By integrating GDPR with its very own innovative tools, Estonia has become a leader in the world25. Since the year 2016, the nation has been employing blockchain to secure electronic health records. Its X-Road system is a safe bridge that allows sharing of data between various government and health services in a safe manner without centralising anything26.
Towards the beginning of 2026, Estonia has been digitised in almost 99 percent of health data. Control of patient record access is administered by the use of a national electronic ID. Whenever an individual views or shares information, it is saved in the blockchain so that it can be transparent. This patient-centred model has seen Estonia become a worldwide model of decentralised healthcare management. The nation is still advancing in terms of its digital health and even assists other countries, including the NHS in the UK, to follow its example27.
B. United States: Sector-Specific Rules and Market Leadership.
The Health Insurance Portability and Accountability Act (HIPAA) is the primary law in the United States to safeguard the so-called protected health information28. It establishes high privacy, security and patient right standards. The blockchain projects can assist in addressing these requirements by providing explicit audit records on who accessed information and when. One famous instance is the MedRec project created at MIT that operates on blockchain to control permissions and follow the access to electronic health records29. It was tested at Beth Israel Deaconess Medical Center and demonstrated excellent outcomes in enhancing the exchange of data between systems.
The country of North America still dominates the blockchain-IoT healthcare market30. Citing Mordor Intelligence reports on early 2026, robust investment, venture funding and good regulatory clarity have contributed to the region becoming the market leader in the corresponding blockchain and IoT with about 35-37% market share31. Blockchain solutions are being tested by many hospitals and companies and remain within the HIPAA32. Nevertheless, the system is more sectoral and involves innovation of the private-sector.
C. Singapore: Innovative and with a High Cybersecurity.
Singapore adheres to the Personal Data Protection Act (PDPA)33, which is a compromise between the utilization of data and the rights of people. The Smart Nation 2.0 programme in the country has incorporated the use of IoT sensors and blockchain into the healthcare provision 34to the population. It concentrates on the trusted digital platforms to share data securely in hospitals and home care, more so among the elderly. The programme has good cybersecurity as well. In 2025, Singapore was creating the Digital Infrastructure Act that would enhance the resiliency of digital systems to attacks35. Smart Nation 2.0 promotes telemedicine, health monitoring apps, and AI-based personalised care with a high level of trust towards citizens. This is an innovation receptive method, which promotes the use of technology without jeopardizing safety.
D. India: Consent-Focused and Rapidly Maturing.
The Digital Personal Data Protection (DPDP) Act 2023 and the DPDP Rules notified on 14 November 2025 is a great step by India36. Such rules define health data as sensitive and protection of such data is to be taken seriously. India The Data Protection Board of India is currently in operation. Implementation of full compliance is being introduced in stages, with big deadlines of May 202737. Ayushman Bharat Digital Mission (ABDM) propagates the countrywide interoperability by encouraging Ayushman Bharat Health Accounts (ABHA)38 digit identification numbers that assist patients in storing and sharing information securely.
By the beginning of 2026, ABDM has achieved a lot in the establishment of a universal digital health ecosystem39. It endorses blockchain pilots of secure health records and is consistent with international standards of consent and privacy. India has a structure that is heavy on consent and strongly supervised by governments, which fits its huge and diverse population. It is however still developing, and the private hospitals are getting increased time to implement the standards.
E. Major Principles and Differences in Enforcement.
The four models have significant similar principles: the safety of patient information, the necessity of appropriate consent, the security, and accountability. Yet they differ in style. Estonia is decentralised and offers more power at the direct level to patients. The United States is sector-specific and specializes in healthcare with HIPAA and promotes innovation privately. Singapore is an innovation welcoming country with good cybersecurity. India employs a more centralised model whereby there is strong government intervention to control scale and that there is similarity in protection.
In general, these models demonstrate that the new technologies such as blockchain and IoT may be implemented with the help of good governance and keep patients safe40. Nations can also benefit through the experience of other nations to develop equal regulations that promote innovation without being a threat to privacy or trust.
ROLE OF BLOCKCHAIN IN GOVERNANCE FOR REAL-TIME MONITORING.
Blockchain technology is a major contributor to strengthening and enhancing the trust of smart healthcare governance. It produces unalterable records of consent, thereby implying that once a patient consents to the usage of their data, the record is not edible or removable. This provides good evidence that, consent was duly obtained. Smart contracts are automated agreements, which operate automatically. They determine who is allowed access to patient data and at what time in what circumstance. Available audit trails capture each and every action including who accessed the data, time and reason, in a clear manner. These characteristics are useful to fulfil harsh legal mandates of accountability without having a central force that can be hacked or abused.
Things are fluid in real time IoT. The wearable device of a patient, e.g., a smartwatch or glucose monitor, gathers the vital signs continuously and transmits the information to an edge node (local processing unit that must be nearer to a patient to respond faster). The unprocessed sensitive information remains not on the blockchain in order to ensure privacy and conserve space. Rather, blockchain documents significant changes in consent, access permissions and hash summaries of the data. This will meet regulatory audit requirements of legislation such as GDPR, HIPAA, or India DPDP Rules41. A compliance check is easily carried out by the regulators or hospitals since all entries are tamper-proof. The most recent 2025-2026 research, such as one published in Scientific Reports and Electronics, demonstrates systems, according to which IoT devices provide data into blockchain to transmit it safely and monitor chronic diseases in real-time.
A. Value in Fraud Prevention and International Application.
Profitable gains are mentioned in studies published in 2025 and the first half of 202642. Blockchain is also useful in decreasing fraud in the processing of health insurance claims by developing cross-share records that cannot be altered. Smart contracts will be able to automatically verify claims with medical records, thus reducing fraudulent or duplicate claims. According to some estimates, blockchain-based systems might reduce claims due to fraud by billions to the benefit of insurers and governments combined. It also facilitates health records cross-border portability. The patients who have to travel abroad or find treatment there can safely transfer their information to the doctors in a different country without losing control. Blockchains are favoured in healthcare, as compared to Bitcoin, because they are preferred due to their preference to be faster, consume less energy, and are easier to comply with privacy regulations. Only approved hospitals, doctors and regulators are allowed to join the network.
B. Challenges Facing Blockchain Integration.
Although these strengths are there, there are some difficulties. Some blockchain networks consume a lot of energy, but permissioned versions do not require a lot of power. Another problem is scalability, as it is hard to process data of millions of IoT devices global and not to slow down. The implementation of blockchain with the ancient hospital computer systems (legacy systems) also consumes time and money. In 2026, researchers still are working on the hybrid solutions that would integrate edge computing with blockchain to minimize delays in real-time monitoring.
C. IoT and Blockchain Benefits for Drug Supply Chains.
The combination of blockchain and IoT can also be applied in case of temperature-sensitive drug management43. Drugs such as insulin, vaccines, biologic drugs, and some drugs used in the treatment of cancer require precise cold storage and transportation. IoT sensors on the shipments or stored goods constantly monitor temperature, humidity, position, and vibration. In case of eventualities such as when a refrigerator malfunctions during delivery, the system will provide immediate alerts to prevent spoilage.
Each step of the journey is documented on an unalterable ledger by blockchain. This provides evidence that is impeccable and cannot be tampered with, that the drug was safe throughout the factory all the way to the patient. Smart contracts are capable of identifying and preventing batches that have been compromised automatically, accelerating recalls and minimizing waste. The cold chain monitoring market has a high growth potential in 2025-2026, as it is projected to reach and exceed USD 45 billion in 202544, and even more by 2030-2034 due to the need in biologics and new regulations, such as Good Distribution Practice (GDP)45. Pharmaceutical cold chain logistics industry is also growing rapidly following increased demands of vaccines and insulin in the world46.
This integration has definite benefits of governance. It will guarantee adherence to regulation, decrease counterfeit medicines, establish confidence within the supply chain, and safeguard patient welfare. The complete journey can be audited by hospitals and regulators without any difficulties. To nations such as India that are scaffolding the Ayushman Bharat Digital Mission, patient monitoring combined with safe drug tracking can form a complete, trustworthy digital health ecosystem47.
In general, blockchain enhances the governance with the real-time monitoring providing the security, transparency, and control over the patients. Combined with the IoT in patient data and drug supply chains, it can facilitate safer and more efficient healthcare and address the legal requirements of each country. The existing challenges will be overcome with the further development of research and authorized blockchain models that will promote the further adoption in 2026 and the future48.
D. IoT Integration: Technical Benefits and Legal Challenges.
The IoT devices provide real-time patient monitoring and this is done through constant monitoring of vital signs like blood glucose level, oxygen saturation, heart rate, and blood pressure. These sensors and wearables transmit real-time information to health professionals enabling the early prevention of issues, the improved management of chronic diseases, and emergency reactions. IoT, together with blockchain, forms secure environments in which data is secured by immutable records and accessed by the patient. The work of edge computing with privacy-preserving frameworks in the recent 2025-2026 demonstrates better speed, less latency, and enhanced data integrity and retains raw sensitive data off-chain.
E. Technical Benefits
IoT offers predictive notifications- such as alerting the doctors to the fact that the patient is about to get worse. Edge computing makes decisions nearer to the patient at a faster rate. Blockchain provides tamper resistant audit trails and automated consent and access control smart contracts. Articles released in 2025 and early 2026 point to hybrid models that would compromise privacy, speed, and reliability, in favour of remote monitoring and credible digital health systems.
LEGAL AND REGULATORY CONCERNS
A number of legal complications are involved with this integration.
The Continuous Data Flows Consent: The conventional consent is challenging in the case of data flows that continue continuously. Legal regulations such as the GDPR of the EU and DPDP Rules 2025 of India need meaningful and continuing permission, which is difficult to control in real-time systems49.
Failure Liability: In case some critical event is not detected by an IoT sensor, one will be left wondering who takes responsibility, the manufacturer of the device, the hospital, the software vendor, or the doctor? There are still no explicit rules of liability.
Data Localisation and Cross-Border Transfers: India data protection (DP): DPDP Rules (notified November 2025) and GDPR limit the movement of sensitive health data50. In India, full compliance is till May, 2027, and this poses a challenge to international data sharing.
Security Risks: IoT devices can be hacked on an endpoint. Although blockchain offers a high level of encryption and logs, it is not able to remove every threat at the device level. In 2026, the specialists emphasize the principles of privacy-by-design and edge computing to address the compliance requirements51.
A. Benefits for Drug Supply Chains.
Pharmaceutical supply chains, in particular cold storage drugs such as insulin, vaccines, and biologics, are also beneficiaries of IoT and blockchain52. Sensors in the IoT constantly measure the temperature, humidity, and location in storage and transportation. Immediately alerted in case of failure in the condition. The blockchain generates an unalterable track of the whole process, and it offers undisputable evidence of adherence to the Good Distribution Practices (GDP)53.
The cold chain monitoring industry worldwide is currently developing at a very high-speed considering that its market value is estimated to be approximately USD 8.31 billion in 2025 and a project of more in 203054 due to the demand of temperature-sensitive drugs. Such integration eliminates wastage, accelerates the process of recall, combats fake drugs, and the assurance that insulin and vaccines can still be effective once they reach their targets. Smart contracts will automatically draw attention to compromised batches, which will enhance regulatory and patient safety.
Overall, the IoT-blockchain implementation has strong technical potential in terms of real-time monitoring and supply chains, and legal aspects such as consent, liability, data flows, and security can be addressed through a balanced approach to governance. Privacy-by-design solutions and more transparent rules will assist such nations as India, Estonia, Singapore, and the US to implement such technologies safely.
CASE STUDIES
Blockchain and IoT technologies are tested or implemented to monitor patients in real time and provide healthcare governance; different countries have already managed to do it. These practical cases demonstrate how legislation either facilitates or restricts adoption and protect the rights of patients.
A. Estonia: A Model of Patient Data Sovereignty.
Estonia is a digital health pioneer in the world55. It has followed up on blockchain since 2016 to ensure electronic health records are secured, enabling patients to access their full medical history via a secure online portal. The X-Road infrastructure facilitates the sharing of data among various healthcare providers and government services in a safe manner with their consent56. The laboratory results now can be sent real time eliminating the waiting lines. Pilots of real-time monitoring are the ones who seamlessly incorporate wearables and sensors, which allow doctors to monitor vital signs in real-time57. The success will be achieved through a deep legalization of patient data sovereignty that uses national electronic ID to give control to citizens over access to their data and logs each activity in an unalterable blockchain. Almost all providers are already involved in the system by early 2026 and this is why Estonia is ranked among the best in health data exchange across the globe.
B. Singapore: Smart Nation for Home-Based Care.
The Smart Nation program in Singapore incorporates the IoT and blockchain into daily healthcare58. The programme involves the IoT sensors in monitoring homes, particularly among the elderly citizens with the help of systems such as the Government Assisted Living Ecosystem (GALE)59. These gadgets can monitor essential condition and falls and connect the elderly to 24-hour services. Blockchain provides a secure access to clinicians to the data, but provides high levels of cybersecurity60. High citizen trust and clear laws have facilitated adoption. Smart Nation 2.0 is still growing telemedicine, health monitoring apps, and electronic records. These integrated technologies are projected to grow the healthcare information system market in Singapore to more than 12% CAGR in 2026.
C. United States: Blockchain for EHR Interoperability.
Blockchain pilots in the United States aim to enhance the interoperability of electronic health records (EHR) and meet the HIPAA privacy regulations. On-chain audit logs are used by the Department of Veterans Affairs (VA) to monitor the data access and ensure the compliance. Even though the primary federal rollout of EHR (Oracle Cerner system) was delayed, the VA is still expected to implement it at 13 new locations in 202661, beginning in April, as part of a strategy to enhance data sharing between VA and Department of Defense institutions. Blockchain can also be tested by pilots in the private-sector to exchange records securely. Innovation is still driven by the large size of the market and the high rate of investment, but it is difficult to scale throughout the country and comply with the high-security standards of HIPAA of protected health information.
D. India: Rapid Scaling Through ABDM and DPDP Rules.
India is rapidly developing an Ayushman Bharat Digital Mission (ABDM) that has developed millions of Ayushman Bharat Health Accounts (ABHA), or unique 14-digit IDs which store and share health records62. ABDM blockchain pilots will focus on data protection of ABHA and enhance interoperability63. The Digital Personal Data Protection (DPDP) Rules, which took effect on 14 November 2025, now require breaches to be reported to the affected persons and the Data Protection Board (commonly in 72 hours) in a timely manner and consent managers must be registered64. These regulations consider health information as sensitive and provide a gradual compliance until May 202765. India has seen a rapid upward scaling because it has a massive population, however, India needs to increase the capacity of enforcing and aligning the ABDM with the DPDP requirement to have proper governance.
IOT AND BLOCKCHAIN BENEFITS IN DRUG SUPPLY CHAINS.
In addition to the monitoring of patients, IoT and blockchain have significant benefits in terms of temperature-sensitive medicines, such as insulin, vaccines, and biologics. IoT sensors are used to constantly check the temperature, humidity and position during storage and transportation. In case of failure of the cold chain conditions, automatic alerts ensure spoilage is avoided. Blockchain gives a permanent register of the whole voyage offering unaltered evidence of adherence to Good Distribution Practices (GDP)66.
The cold chain monitoring of the world is expanding at a rapid rate, the current figures are estimated at approximately USD 8.31 billion in 2025 and moving up to USD 15 billion or even more by 2030, and wider estimates are projected to reach very high points in 2034 as a result of increased demand in pharmaceuticals. This integration helps cut down on waste, quicken the recall, combat counterfeit medications and assure that medicines such as insulin do not go to waste once they reach the patients. Smart contracts have the ability to intuitively alert of compromised batches, enhancing the principled governance, regulatory, and patient safety along monitoring or supply chains.
As shown in these case studies, effective legal support and workable technology can create trustful smart healthcare systems. Every nation has insights into how to balance governance to safeguard rights and promote innovation.
COMPARATIVE ANALYSIS
An analytical examination of the governance model in Estonia, Singapore, United States, and India demonstrates the strengths and general difficulties in incorporating blockchain and IoT in real-time patient monitoring67. The legal approach of each country is based on their own priorities, resources, and size to give valuable lessons about good smart healthcare governance.
Estonia is a model of mature, patient-centered character. By early 2026, almost 99 percent of health data is digitised using blockchain-secured electronic health records based on the X-Road platform, which was accomplished since 201668. Access is regulated by the national electronic ID of a patient, and any action is registered irreversibly69. This decentralised approach establishes a world standard of transparency, control of consent and safe real-time information dissemination.
Singapore uses a moderate strategy that is friendly to innovation with Smart Nation 2.0 programme70. The IoT sensors and blockchain can be used to perform successful monitoring of the home, particularly concerning the elderly and robust cybersecurity regulations and the Personal Data Protection Act assure the population of their safety. The model has been able to incorporate technology in the community healthcare services without affecting the safety.
There is the power of scale and innovation of the United States in the private sector71. HIPAA has offered an excellent base of privacy and blockchain pilots enhance audit trails and electronic health record interoperability. Continuous modernisation in 2026 is a sign of consistent advancement, but the healthcare system is not uniform throughout the country because of the fragmented system.
India demonstrates impressive ambition on the population level. Ayushman Bharat Digital Mission (ABDM) has established hundreds of millions of Ayushman Bharat Health Account (ABHA)72. ABDM pilots under blockchain are designed to ensure such records, backed by the Digital Personal Data Protection (DPDP) Act 2023 and Rules that will be notified in November 2025 that consider health data sensitive data and impose stringent requirement on consent and notification of breaches. One strength is rapid scaling, and consistent enforcement in different states remains an issue73.
Although they vary, these four jurisdictions have shared gaps, particularly when it comes to the liability provisions in the case of an AI-IoT decision and the standardised mechanisms of cross-border data. Tamper-proof logs and automated consent aid in these problems with the help of blockchain.
Pharmaceutical supply chains are also helped by the integration of IoT and blockchain. The sensors keep track of temperature-sensitive medicines such as insulin and vaccines in real-time and blockchain generates records of the supply path that cannot be altered. This prevents wastages, fastens recalls and good distribution practices. By the year 2025, the global cold chain monitoring market is expected to go up by USD 8.31 billion and by the year 2030, its value is anticipated to be USD 15.04 billion74.
Finally, as much as every nation might have its own areas of strength, there is an acute need to have more legal harmonisation on consent, liability, and cross-border transfers. The harmonization of these standards would facilitate more secure cross-border collaboration and expediency of responsible global implementation of blockchain-IoT technologies in the governance of smart healthcare.
POLICY RECOMMENDATIONS
These are some of the practical actions that governments may undertake to establish trustworthy smart healthcare governance with blockchain and IoT to track patients in real-time. To start with, incorporate privacy-by-design requirements wherein the degree of privacy is high in all of the IoT-blockchain health projects75. Second, create standardised consent models founded upon dynamic smart contracts in which patients can offer consent with simplification, cut or revoke consent to continued data undertakings76.
Thirdly, develop international level interoperability standards by using the successful example of Estonia X-Road that will enable the sharing of data across the borders safely77. Fourth, give an explanation of the liability in a form of a tiered responsibility model that will explicitly articulate the activities of both the device manufacturers as well as the healthcare providers and the software developers and the patients.
It is important to accelerate the schedule of the introduction of the DPDP Rules in November 2025 (fully executed by May 2027) in India, to introduce blockchain standards to ABDM 2.0, and to establish regulatory sandboxes in order to test the new options safely78. By March 2026, over 870 million Ayushman Bharat Health Accounts (ABHA) have been developed by ABDM79.
Finally, the international organizations like WHO and ITU should come up with a method of identifying compatible systems that will facilitate safe international interchange of information80. These will not only protect the rights of the patients but will also facilitate responsible innovation in monitoring of patients and pharmaceutical distribution of such drugs like insulin and vaccines.
CONCLUSION
Blockchain and Internet of Things (IoT) can change the real-time patient monitoring system radically, as it is now possible to monitor vital signs, send emergency notifications instantly, manage chronic diseases, and transmit health data safely. These technologies have the ability to decrease the number of hospital visits, enhance the effectiveness of therapy, and provide a more significant level of control of the medical information to the patients. Nevertheless, such transformation will only succeed through effective and moderate legal governance. Most powerful nations have already demonstrated successful ways. Estonia has also created a patient-controlled system that is globally considered to be world leading with close to 99 percent of digitised health records which are secured using blockchain. Singapore has been able to embrace IoT and blockchain under the Smart Nation programme particularly when it comes to elderly care. In the US, massive innovation is being led by HIPAA, and India is pioneering at a rapid pace with the Ayushman Bharat Digital Mission, which had over 870 million Ayushman Bharat Health Accounts (ABHA) crossed by March 2026, supported by the DPDP Act 2023 and Rules notified in November 202581. These cases demonstrate that open and patient-focused systems can speed up the implementation and safeguard interests.
*****
Footnotes
1. World Health Organization, Global Strategy on Digital Health 2020–2025 (2021).
2. World Health Organization, Noncommunicable Diseases Progress Monitor 2022 (2022).
3. Satoshi Nakamoto, Bitcoin: A Peer-to-Peer Electronic Cash System (2008).
4. Precedence Research, Healthcare IoT Market Size Report 2025–2035 (2025).
5. Deloitte, IoT in Healthcare: Opportunities and Challenges (2023).
6. European Commission, Ethics Guidelines for Trustworthy AI (2019).
7. Estonia e-Governance Academy, e-Estonia: Digital Health System Overview (2023).
8. Singapore Gov’t, Smart Nation Initiative Annual Report (2024).
9. Health Insurance Portability and Accountability Act of 1996 (HIPAA), 42 U.S.C. § 1320d.
10. National Health Authority (India), Ayushman Bharat Digital Mission Dashboard (2026).
11. Digital Personal Data Protection Act, No. 22 of 2023, India Code (2023).
12. Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation), 2016 O.J. (L 119) 1; Health Insurance Portability and Accountability Act of 1996, 42 U.S.C. § 1320d; Digital Personal Data Protection Act, No. 22 of 2023, India Code (2023); Personal Data Protection Act 2012 (Singapore).
13. OECD, Health Data Governance for Digital Health (2021).
14. Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation), 2016 O.J. (L 119) 1; Health Insurance Portability and Accountability Act of 1996, 42 U.S.C. § 1320d; Digital Personal Data Protection Act, No. 22 of 2023, India Code (2023); Personal Data Protection Act 2012 (Singapore).
15. Digital Personal Data Protection Act, No. 22 of 2023, India Code (2023); Draft Digital Personal Data Protection Rules, 2025 (India); Health Insurance Portability and Accountability Act of 1996, 42 U.S.C. § 1320d; Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation), 2016 O.J. (L 119) 1; Personal Data Protection Act 2012 (Singapore).
16. OECD, Health Data Governance for Digital Health (2021); Estonia e-Governance Academy, e-Estonia Digital Society Reports (2023); Singapore Gov’t, Smart Nation Initiative Reports (2024).
17. IEEE, Emerging Trends in Blockchain Healthcare Systems (2026).
18. X. Liu et al., FiB-MOBA-EAFG: A Hybrid Blockchain Framework for Smart Healthcare, 2026 Electronics 1 (2026).
19. OECD, Health Data Governance for Digital Health (2021).
20. Regulation (EU) 2016/679 (General Data Protection Regulation), art. 7.
21. Id. art. 5.
22. Id. art. 32.
23. Digital Personal Data Protection Act, No. 22 of 2023, India Code (2023).
24. Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation), 2016 O.J. (L 119) 1.
25. Estonia e-Governance Academy, e-Estonia Digital Society Reports (2023).
26. Estonia Information System Authority, X-Road Factsheet (2022).
27. NHS England, International Digital Health Partnerships Report (2023).
28. Health Insurance Portability and Accountability Act of 1996 (HIPAA), 42 U.S.C. § 1320d.
29. I. Azaria et al., MedRec: Using Blockchain for Medical Data Access and Permission Management, 2016 2d Int’l Conf. on Open & Big Data 25 (2016).
30. Deloitte, Blockchain in Healthcare Market Trends (2023).
31. Mordor Intelligence, Healthcare Blockchain Market Report (2026).
32. U.S. Dep’t of Health & Human Servs., Blockchain in Healthcare Guidance (2022).
33. Personal Data Protection Act 2012 (Singapore).
34. Singapore Gov’t, Smart Nation 2.0 Strategy (2024).
35. Singapore Ministry of Communications, Digital Infrastructure Act Proposal (2025).
36. Digital Personal Data Protection Act, No. 22 of 2023, India Code (2023); Digital Personal Data Protection Rules, 2025 (India).
37. Ministry of Electronics & IT, Data Protection Board Notifications (2025).
38. National Health Authority (India), ABDM Framework (2025).
39. National Health Authority, ABDM Dashboard (2026).
40. World Economic Forum, Blockchain for Healthcare (2022).
41. GDPR, supra note 3; HIPAA, 42 U.S.C. § 1320d; Digital Personal Data Protection Act, No. 22 of 2023 (India).
42. Deloitte, Blockchain in Healthcare Report (2025).
43. WHO, Pharmaceutical Cold Chain Management (2021).
44. MarketsandMarkets, Cold Chain Monitoring Market Report (2025).
45. European Commission, Guidelines on Good Distribution Practice of Medicinal Products for Human Use, 2013 O.J. (C 343) 1; MarketsandMarkets, Cold Chain Monitoring Market Report (2025).
46. World Health Organization, Pharmaceutical Cold Chain Management (2021).
47. National Health Authority (India), Ayushman Bharat Digital Mission Reports (2026).
48. IEEE, Hybrid Blockchain Systems in Healthcare (2026).
49. Regulation (EU) 2016/679 (General Data Protection Regulation), arts. 6–7; Digital Personal Data Protection Rules, 2025 (India).
50. Digital Personal Data Protection Act, No. 22 of 2023, India Code (2023); Regulation (EU) 2016/679, arts. 44–50.
51. IEEE, Privacy-by-Design in Blockchain-IoT Systems (2026).
52. World Health Organization, Pharmaceutical Cold Chain Management (2021).
53. European Commission, Guidelines on Good Distribution Practice of Medicinal Products for Human Use, 2013 O.J. (C 343) 1.
54. Fortune Business Insights, Cold Chain Monitoring Market Size Report (2025).
55. Estonia e-Governance Academy, e-Estonia Digital Society Reports (2023).
56. Estonia Information System Authority, X-Road Overview (2022).
57. OECD, Health Data Governance for Digital Health (2021).
58. Singapore Gov’t, Smart Nation Initiative Reports (2024).
59. Singapore Ministry of Health, Government Assisted Living Ecosystem (GALE) Programme Overview (2023)
60. Personal Data Protection Act 2012 (Singapore).
61. Statista, Healthcare IT Market in Singapore Forecast (2026).
62. National Health Authority (India), Ayushman Bharat Digital Mission (ABDM) Framework (2025).
63. National Health Authority (India), ABDM Sandbox & Blockchain Pilot Reports (2026).
64. Digital Personal Data Protection Act, No. 22 of 2023, India Code (2023); Digital Personal Data Protection Rules, 2025 (India).
65. Ministry of Electronics & Information Technology, DPDP Rules Notification (Nov. 14, 2025).
66. European Commission, Guidelines on Good Distribution Practice of Medicinal Products for Human U Fortune Business Insights, Cold Chain Monitoring Market Size Report (2025).se, 2013 O.J. (C 343) 1.
67. OECD, Health Data Governance for Digital Health (2021).
68. Andres Kütt, Estonian Health Information System and Blockchain, 12 Health Pol’y & Tech. 100 (2021).
69. Estonia Information System Authority, X-Road Overview (2022).
70. Singapore Gov’t, Smart Nation 2.0 Strategy (2024).
71. Deloitte, Blockchain in Healthcare Market Trends (2023).
72. National Health Authority (India), ABDM Dashboard (2026).
73. Digital Personal Data Protection Act, No. 22 of 2023, India Code (2023); Digital Personal Data Protection Rules, 2025 (India).
74. Fortune Business Insights, Cold Chain Monitoring Market Report (2025).
75. Regulation (EU) 2016/679 (General Data Protection Regulation), art. 25 (privacy by design).
76. European Data Protection Board, Guidelines on Consent Under Regulation 2016/679 (2020); Nick Szabo, Smart Contracts: Building Blocks for Digital Markets (1996).
77. Estonia Information System Authority, X-Road Overview (2022).
78. Digital Personal Data Protection Act, No. 22 of 2023, India Code (2023); Digital Personal Data Protection Rules, 2025 (India); Ministry of Electronics & Information Technology, DPDP Rules Notification (Nov. 14, 2025).
79. National Health Authority (India), ABDM Dashboard (2026).
80. World Health Organization, Global Strategy on Digital Health 2020–2025 (2021); International Telecommunication Union, Digital Health Interoperability Guidelines (2022).
81. National Health Authority (India), ABDM Dashboard (2026); Digital Personal Data Protection Act, No. 22 of 2023, India Code (2023); Digital Personal Data Protection Rules, 2025 (India).