US20040199765A1 - System and method for providing personal control of access to confidential records over a public network