Patients no longer need to depend on their primary care physicians to maintain or request their health data. Healthcare providers must protect PHI by strictly controlling to whom medical records are released.