Described herein are ways to establish a secure online health record for storing health information of one of a plurality of patients in a multi-user repository established on a server computer system and accessible via a client computer. Authorized users of the server computer systems may read and update a patient's health information based on authority given to them by the patient. Scope of such authorization may be determined by an authorization key that the authorized user provides to the server computer system, which may also allow access to the patient's health information in case of a medical emergency.