A computer implemented method for managing a person's medical information includes receiving a first request to access a first tier of medical information of a given person. The request includes first security information associated with a portable secure medium associated with the given person. Access to the first tier information associated with the medical information of the given person is provided upon authenticating the first request. A second request to access a second tier of the medical information of the given person is received. The second request includes second security information provided to a medical professional or center by a medical record management center. Access to the second tier of information associated with the medical information of the given person is granted upon authenticating the second request.