The system and method for portable medical records provides an electronic medical record that is stored in a key fob-sized portable device. A user can purchase the portable device and upload his/her medical record to the device over the Internet, after which the device is sent to the user. The user accesses the device for information in the portable electronic medical record and adds information when necessary. An encryption system controls health provider access to the information stored in the device. The ability to read, write or modify information can be made specific to a particular group of health care providers. Access to the portable electronic medical record can be limited to an individual patient and his/her designated authorized healthcare provider(s). Medical record information transfer is done via secure communication between a computer and the portable electronic device to assure compliance with applicable medical record privacy laws.