So in this use-case there is no distributed network in the first place. And never will be.
EDIT: I guess I could request the whitepaper from IBM and read it, I mean what's yet one more tech giant sending me spam and selling my info to advertisers going to hurt? But I don't see any way for the entire thing to work and avoid people making up fraudulent test results/vax records without trust. I mean even with trust a clinic could feasibly fake that stuff, but without trust pretty much anyone could do it.
EDIT2: Requested the whitepaper from IBM and it's literally just an 11 page marketing PowerPoint. Mentions blockchain a few times but doesn't explain how it solves anything that a normal RDBMS (or even some fancy distributed one with immutable records etc. where all parties are trusted) couldn't do.
>special emphasis has been placed on the protection of an individual's privacy. Secure technologies, like blockchain and encryption, are woven throughout Excelsior Pass to help protect the data, making it verifiable and trusted. No private health data is stored or tracked within the apps. Excelsior Pass can be used to voluntarily show a QR code as proof of COVID-19 vaccination or negative test result via a digital smartphone wallet or printed credential without sharing underlying personal health details.
https://www.governor.ny.gov/news/governor-cuomo-announces-la...