Personally controlled electronic health records act