Hmm… Sounds awkward. You can use a person’s body to conduct medical tests on that person but the entity which conducted the medical tests on the person has the rights to deny that person to view that person’s medical reports.
The person’s health records are “private” to whom? The entity or the person who was used to conduct medical tests?