Privacy advocates urge people who want to set up a personal health record online to read the fine print. Deven McGraw, director of the health privacy project at the Washington-based Center for Democracy and Technology, said sites like the Mayo Clinic Health Manager aren't currently covered by national laws that specify cases in which health care systems can access and share information without patients' consent.