Personalized access control for a personally controlled health record