Abstract: The present invention relates to electronic medical forms and, in particular, to a method of and system for security and privacy protection in medical forms. The invention provides a medical form system and method that allows clients dealing with highly sensitive data to ensure that particular data entered is never accessible to certain other parties (or all other parties). In the preferred embodiment, this is done by encrypting and decrypting certain data only on the client and preventing decryption of the data on the server-side. Other systems do provide security in the form of SSL connections from the client to the server and enforce good security practices, but they do not provide client-side encryption.