Abstract: The invention provides a method and system for a health care provider to obtain personal health data relating to a consumer. The system comprises a secure repository for the storage of a consumer's personal health data, and further comprises a template or the like enabling the consumer to select items of personal health data that are to be shared with a health care provider. The template also enables the consumer to identify the health care provider, or class of health care providers, to whom access will be provided for those selected items of personal health data. The system authenticates the identity of health care providers and provides access to the selected items of personal health data of the consumer for which the authenticated health care provider has been identified as having permission to access. The system further allows the health care provider to record details of the consultation in the consumer's secure repository of health data.