Probably the latter scenario. Its a hypothetical - but it could happen if health records move increasingly online and if enough patients demand that level of control.