 The moral significance attached to medical privacy is reflected in data protection and security laws adopted by local and national authorities around the world. The point of these laws is to regulate the collection, quality, storing, sharing and retention of health data, including the electronic health record (EHR) (CDT 2009, in  Other Internet Resources).  Health privacy statutes limit disclosure in the absence of informed consent; but typical statutes recognize numerous exceptions for routine uses, research, public health reporting, and legal process and law enforcement. The policy consensus seems to be that, while medical privacy is important, patients’ medical information may be disclosed to third-parties for socially important purposes unrelated to their own care. Electronically stored and produced medical information is by its very nature mobile. Those with access can transmit EHR data across town or across state and national borders. Patients today have unprecedented access to their own health information. Patients may transmit medical data over email, entrust it to third party cloud data storage providers, or collect health data via apps and wearable devices with little attention to third part access and use.