. "Once the individual's identity is established, data such as a medical record may be access from the electronic information carrier." . . .