Privacy Firewalls for Access Control

A system for controlling access to private medical information, the system comprising:

• at least one processor configured to:
• receive a request to access a content of an element, the content of the element includes at least a first portion and a second portion, the first portion includes identifiable information and the second portion does not include identifiable information;
• access a permission record corresponding to the element;
• and
• provide full, partial or no access, based on a value in the permission record, to the content of the element, wherein full access includes access to the first portion and the second portion of the content of the element, and wherein partial access includes access to the second portion of the content of the element and excludes access to the first portion of the content of the element.

A method for controlling access to private medical information, the method comprising:

• receiving a request to access a content of an element, the content of the element includes at least a first portion and a second portion, the first portion includes identifiable information and the second portion does not include identifiable information;
• accessing a permission record corresponding to the element;
• and
• providing full, partial or no access, based on a value in the permission record, to the content of the element, wherein full access includes access to the first portion and the second portion of the content of the element, and wherein partial access includes access to the second portion of the content of the element and excludes access to the first portion of the content of the element.