Pharmaceutical companies and researchers need a huge collection of health records for an epidemiological study where spread and control of diseases are investigated. Huge collection is not only the requirement in an epidemiological study, but the collection of health records must be from diverse geographical area to perform unbiased experimentation. This requirement is currently addressed through the health record exchange which results in delay and extra communication overhead because of per record negotiation. This paper presents a cloud-based architecture for the federation of entities from healthcare ecosystem and provides an economical and scalable solution. The paper also investigates the security issues on federated health records to maintain patients’ privacy. It finally proposes EMR federation access control model (EMR-FACM) to authorise subjects over objects through the companion identity and label space model (ILSM) and federation services. The theoretical study attempts to prove the correctness of proposed EMR-FACM.