In an emergency there are many stages of Medical response. This paper focuses on the first response stage of an emergency medical incident, for example, a sporting accident. Today's Information Technology together with mobile devices now permits vital medical information regarding an individual to be available at the scene. Those first in attendance are often not medically trained. The literature shows the importance of appropriate first response in minimising harm and the significant investments being made to educate the public in this regard. It also highlights the privacy concerns that arise from the provision of sensitive health information in electronic form. The method utilised is a Privacy Impact Assessment to ascertain the suitability and compliance of the proposed technology. This approach follows the privacy guidelines specified by the Australian government to include information flow mapping, evaluation, compliance analysis, risk analysis and recommendations to management. The resultant output is a list of specific questions and a set of commendations and recommendations that are matched against the National Privacy Principles. The paper concludes that: the approach is both technical and pragmatically viable; it can meet all the reasonableness tests for privacy concerns; it can adopt standard security measures, and; it discusses its potential to be integrated into Personally Controlled Electronic Health Records.