Whose data is it anyway?

If everyone’s understanding of data ownership is up for interpretation and different, how do we safeguard and ensure the ethical use of non-medical information?