This paper presents an electronic patient record (EPR) security scheme that covers the privacy of patients and health care practitioners (HCPs). The scheme is designed such that it provides HCP’s privacy towards another HCP but revealable in disputes. Forward signature and encryption schemes are used to provide EPR integrity and confidentiality respectively. Furthermore, forward group signatures are used to provide privacy between HCPs.