The Privacy and Security gaps in Information Exchanges