"A PHR is a record controlled by the individual and may include health information from a variety of sources, including multiple healthcare providers and the patients themselves." . . . .