Traditionally, debates about confidentiality and privacy of sensitive patient information have focused on who should have access to the information. There is another dimension: the purpose for which access is sought. This article proposes a two dimensional people-purpose privacy matrix.