A method for providing a client system access to confidential information of a person stored at a source system, the client system being configured to access the confidential information using a resource identifier, the client system and the source system comprising an encryption module for executing an encryption algorithm, the method comprising: the source system generating the resource identifier, preferably the resource identifier comprising a URL, the resource identifier being indicative of a data storage location at the source system, the data storage location comprising the confidential information of the person, the person being identified by a person identifier; the source system obtaining, for example generating or receiving, a first code; the source system using the encryption algorithm for generating a second code based on the first code and based on the person identifier; the source system transmitting a message to a server system, the message comprising at least part of the resource identifier, the message instructing the server system to store the first code or the second code as an encrypted person identifier in association with the at least part of the resource identifier; the source system providing the second code or the first code respectively as authorization code to a trusted communication path for delivery of the authorization code to the client system; the source system receiving from a client system a request to access the confidential information associated with the person identifier, wherein the client system is adapted to receive the authorization code via the trusted communication path and to receive the person identifier in order to generate the encrypted person identifier based on the received authorization code and based on the received person identifier using the encryption algorithm; and to retrieve the at least part of the resource identifier from the server system on the basis of the generated encrypted person identifier; and, to use the at least part of the resource identifier for sending the request to the source system; the source system providing the client system access to the confidential information on the basis of the request received from the client system, wherein providing access includes retrieving the confidential information from the data storage location and transmitting at least part of the confidential information to the client system. the source system generating the resource identifier, preferably the resource identifier comprising a URL, the resource identifier being indicative of a data storage location at the source system, the data storage location comprising the confidential information of the person, the person being identified by a person identifier; the source system obtaining, for example generating or receiving, a first code; the source system using the encryption algorithm for generating a second code based on the first code and based on the person identifier; the source system transmitting a message to a server system, the message comprising at least part of the resource identifier, the message instructing the server system to store the first code or the second code as an encrypted person identifier in association with the at least part of the resource identifier; the source system providing the second code or the first code respectively as authorization code to a trusted communication path for delivery of the authorization code to the client system; the source system receiving from a client system a request to access the confidential information associated with the person identifier, wherein the client system is adapted to receive the authorization code via the trusted communication path and to receive the person identifier in order to generate the encrypted person identifier based on the received authorization code and based on the received person identifier using the encryption algorithm; and to retrieve the at least part of the resource identifier from the server system on the basis of the generated encrypted person identifier; and, to use the at least part of the resource identifier for sending the request to the source system; the source system providing the client system access to the confidential information on the basis of the request received from the client system, wherein providing access includes retrieving the confidential information from the data storage location and transmitting at least part of the confidential information to the client system.