Personal information is understood as the property of individuals, but this way of thinking about information raises questions about the ethics of information sharing, particularly in relation to medical research and the management of risk in healthcare.