Personal Health records is just that-personal. Only those who truly need to know for the care of the person should be allowed access to the information. It is not for the purpose of marketing; or for curiosity. All persons who have had their PHR breached should be notified as to who and why it was breached. There should be civil repercussion also. There is no reason for any entity to access the information without just cause and the person is to be notified that the information was accessed in a timely manner. As a critical care nurse I am held to the HIPPA standards as should all public employees who can access this information. Thank you-Patricia Graefe, RN,C CCRN