abstract Three case studies provide practical strategies for revising access restrictions to legally and ethically protected records at public institutions.