1. A method for controlling access to electronic data, comprising: (a) receiving an access request on a server machine for electronic data, wherein the request includes an identifier identifying a user and an associated client machine; (b) establishing a secured link between the server machine and the client machine associated with the user; (c) validating the user according to the identifier; (d) sending an authentication message to the client machine when the user is validated, wherein the authentication message includes a user key and a link to the requested electronic data; (e) formatting the electronic data to include a header portion and an encrypted data portion; (f) controlling access to the encrypted data portion of the electronic data by constructing the header portion to contain a signature signifying that the electronic data is secured, encrypted security information with access rules controlling access to the data portion, and a key that can be retrieved to decrypt the encrypted data portion; (g) determining if user access to the electronic data is permitted by the access rules; and (h) decrypting the encrypted security information with the user key when the determining in step (g) determines that the user is permitted to access the electronic data.