Replying to @StewDuff
Good point! I feel that legal and medical are two areas that could relatively easily (in the sense that they're already regulated) have some sort of Article 40/regulator-approved boundaries for this sharing.
How do you handle Article 14?