This chapter explores ethical and legal issues that need to be considered by health information professionals when using Web 2.0 technologies. It reviews how the Internet and the Web have affected standards of professional behaviour, and highlights the problems that result when legal frameworks lag behind a rapidly developing technology. It discusses the need for appropriate forms of risk assessment with particular reference to issues of defamation, data protection, and intellectual property rights. A bibliography of further reading is appended.