Development of web based CMS & EMR system

Our client is in the process of developing a complex database to maintain patient records. The project will be a web based system that will allow patients to update and monitor their personal profile and their own medical history. There will be several levels of access so the data will be presented in several different views, each level being more secure based on the authorization of the user. There will be several hundred patients. There will be approximately 100 other users (admins, clinics, doctors, etc). There needs to be a secure method to communicate to all users. There needs to be a secure method to send documents to all users. Requirements: 1. Developer must show that he/she/or the organization has completed a similar project within the industry. 2. The developer must have at least 5 years of experience with complex database development, MySQL, php, AJAX scripting. 3. Database administration skills are a must - There will be extensive data mapping. 4. Due to the nature of the data, site must be designed with security in mind so please detail experience in web security and what recommendations you would make for maximum security.