Artificial intelligence has transformed what we can learn and decipher from the brain. Are we mistaken to refer to our personal information as “ours” or to claim individual privacy rights to those multifarious details being scooped up by data miners and aggregators? Might there be better, more apt ways to think about individual privacy and personal information—perhaps as collective or public goods? What level of privacy risk is acceptable in trying to use health care data for discovery in the framework of de-identified yet still potentially discoverable information? What is the actual risk from “discoverability”—individual re-identification from de-identified sources?