When is a lot still not enough? health information, the public good and privacy rights