It follows that, even in times of a pandemic, access to personal data stored in patient-controlled health records should be used as a last resort only.