Individuals can no longer manage their own personal information privacy. Rather, organizations with which individuals interact must recognize vulnerabilities and actively manage their data to guarantee known data sharing and to prevent data leakages. A more complete model of consumers’ personal information privacy that includes not only data gathering, but also data sharing and data leakage is presented and defended here.