Abstract: The present invention provides a medical record management system and method capable of providing patients and CDOs with secure access to medical information. In one embodiment, medical records are created, maintained and stored in one or more databases. In one embodiment, the database(s) are located apart from participating CDOs such that electronic data may pass between them through one or more computer networks. The present invention further provides a Health Employer Data and Information Set (HEDIS) rules engine capable of cataloging, retrieving and storing recommended treatments and/or procedures for individual patients. The present invention is capable of accessing this information in order to remind the physician, nurse, administrator and/or patient of recommended treatments and/or procedures.