Patient-Controlled Health IT Act

Patient-Controlled Health IT Act - Requires the Secretary of Health and Human Services to establish a demonstration program to provide financial incentives to providers and health information exchange networks for the use of qualifying personal health records (QPHRs).

Requires the Secretary to provide for activities to educate qualifying providers about the patient, provider, and overall health care benefits of using QPHRs and participating in electronic health information exchange networks.

Requires access to the record to be controlled solely by the patient. Authorizes the patient to add personal health information to the record, but not alter information entered by any qualifying provider.

Limits access to the record to only: (1) a health care provider who is authorized by the patient to access the record; and (2) the minimum data set specified by the patient.

Deems the patient to have provided authorization for health care providers to access a limited information set concerning the patient for emergency response purposes, unless the patient specifies that such information may not be so accessed.

Provides for: (1) the use of de-identified data for public health analysis, postmarket safety surveillance of prescription drugs, and research purposes; and (2) a messaging system to send messages to patients, including education messages, reminders, and messages concerning health care or benefits from federal agencies.

Sets forth security and privacy standards, policies, and practices for the demonstration program.

Requires the Secretary to establish a PHR Incentive Fund to receive contributions from Fund partners, such as health care payers, drug and device manufacturers, and government agencies, including the Medicare program.