An organization, such as a doctor or an insurance company, may be given access to the stored record of medical information or data for certain predefined purposes, wherein access to the data is granted by area and with respect to predetermined topics as specified by the person/owner of the data.