Patient safety organizations (PSOs) provide a protected avenue for sharing adverse incident information to support large-scale learning across health care organizations. This legal discussion highlights the complexity of the data protections and highlights the need for flexibility given different jurisdictions and entities involved.