1. A method of defining a policy for the sharing of information between a requester organization and an information owner organization, wherein information held by the information owner organization is checked against the identity of an agent of the requester organization, and the definition of permitted access to particular types of information is represented by one or more Boolean functions.