diff --git a/htdocs/RoutePatientDetail.vue b/htdocs/RoutePatientDetail.vue
index d973e2c..5d9c7c4 100644
--- a/htdocs/RoutePatientDetail.vue
+++ b/htdocs/RoutePatientDetail.vue
@@ -1,4 +1,9 @@
 <template>
+	<div v-if="(sensitive) && (!info)" class="alert alert-danger text-center mb-3 shadow" role="alert">
+		<h1>Warning: Restricted Record</h1>
+		<p>This record is protected by the Privacy Act of 1974 and the Health Insurance Portability and Accountability Act of 1996. If you elect to proceed, you will be required to prove you have a need to know. Accessing this patient is tracked, and your station Security Officer will contact you for your justification.</p>
+		<router-link class="btn btn-danger" :to="'/patient/' + dfn + '?viewsensitive'">Proceed</router-link>
+	</div>
 	<div v-if="info">
 		<div class="card mb-3 shadow">
 			<div class="card-header">{{info.name}} <span :title="info.pid">{{info.pid.slice(-4)}}</span> #{{dfn}}</div>
@@ -52,6 +57,7 @@
 		data() {
 			return {
 				dfn: null,
+				sensitive: false,
 				info: null,
 				report_date: now,
 				report_date_begin: now,
@@ -66,7 +72,12 @@
 			}
 		},
 		methods: {
-			strptime_vista
+			strptime_vista,
+			async loadinfo(dfn, viewsensitive) {
+				this.dfn = dfn;
+				this.sensitive = viewsensitive ? false : await this.client.ORWPT_SELCHK(dfn);
+				this.info = this.sensitive ? null : await this.client.ORWPT16_ID_INFO(dfn);
+			}
 		},
 		async mounted() {
 			if(this.$route.params.id.startsWith('$')) {
@@ -82,14 +93,10 @@
 						break;
 					}
 				}
-			} else {
-				this.dfn = this.$route.params.id;
-				this.info = await this.client.ORWPT16_ID_INFO(this.$route.params.id);
-			}
+			} else this.loadinfo(this.$route.params.id, this.$route.query.hasOwnProperty('viewsensitive'));
 		},
 		async beforeRouteUpdate(to, from, next) {
-			this.dfn = to.params.id;
-			this.info = await this.client.ORWPT16_ID_INFO(to.params.id);
+			this.loadinfo(to.params.id, to.query.hasOwnProperty('viewsensitive'));
 			next();
 		}
 	};
diff --git a/htdocs/vistax.mjs b/htdocs/vistax.mjs
index d49e4fc..21d2da7 100644
--- a/htdocs/vistax.mjs
+++ b/htdocs/vistax.mjs
@@ -48,6 +48,12 @@ export function memoized(fn) {
 	}
 }
 
+export function converted_boolean(fn, columns=null) {
+	return async function(...args) {
+		return await fn(...args) == '1';
+	}
+}
+
 export function caretseparated(fn, columns=null) {
 	return async function(...args) {
 		if(columns) return (await fn(...args)).map(function(row) {
@@ -142,6 +148,7 @@ export function Client(cid, secret) {
 	this.ORWPT_FULLSSN = memoized(caretseparated(unwrapped(logged((...args) => this.callctx(['OR CPRS GUI CHART'], 'ORWPT_FULLSSN', ...args), 'ORWPT_FULLSSN')), ['dfn', 'name', 'date', 'pid']));
 	this.ORWPT_LAST5 = memoized(caretseparated(unwrapped(logged((...args) => this.callctx(['OR CPRS GUI CHART'], 'ORWPT_LAST5', ...args), 'ORWPT_LAST5')), ['dfn', 'name', 'date', 'pid']));
 	this.ORWPT_ID_INFO = memoized(caretseparated1(unwrapped(logged((...args) => this.callctx(['OR CPRS GUI CHART'], 'ORWPT_ID_INFO', ...args), 'ORWPT_ID_INFO')), ['pid', 'dob', 'sex', 'vet', 'sc_percentage', 'ward', 'room_bed', 'name']));
+	this.ORWPT_SELCHK = memoized(converted_boolean(unwrapped(logged((...args) => this.callctx(['OR CPRS GUI CHART'], 'ORWPT_SELCHK', ...args), 'ORWPT_SELCHK'))));
 	this.ORWPT16_LOOKUP = memoized(caretseparated(unwrapped(logged((...args) => this.callctx(['OR CPRS GUI CHART'], 'ORWPT16_LOOKUP', ...args), 'ORWPT16_LOOKUP')), ['dfn', 'name', 'pid']));
 	this.ORWPT16_ID_INFO = memoized(caretseparated1(unwrapped(logged((...args) => this.callctx(['OR CPRS GUI CHART'], 'ORWPT16_ID_INFO', ...args), 'ORWPT16_ID_INFO')), ['pid', 'dob', 'age', 'sex', 'sc_percentage', 'type', 'ward', 'room_bed', 'name']));