They own the document but they don’t control the “information” release... you are the one who controls the information release according to the privacy laws in effect and who they say has a right to the “information”...
Wiki
A fiduciary duty is a legal or ethical relationship of confidence or trust between two or more parties, most commonly a fiduciary or trustee and a principal or beneficiary.
One party, for example a corporate trust company or the trust department of a bank, holds a fiduciary relation or acts in a fiduciary capacity to another, such as one whose funds are entrusted to it for investment. In a fiduciary relation one person justifiably reposes confidence, good faith, reliance and trust in another whose aid, advice or protection is sought in some matter. In such a relation good conscience requires one to act at all times for the sole benefit and interests of another, with loyalty to those interests.
“ A fiduciary is someone who has undertaken to act for and on behalf of another in a particular matter in circumstances which give rise to a relationship of trust and confidence.[1] ”
A fiduciary duty[1] is the highest standard of care at either equity or law. A fiduciary (abbreviation fid) is expected to be extremely loyal to the person to whom he owes the duty (the "principal"): he must not put his personal interests before the duty, and must not profit from his position as a fiduciary, unless the principal consents. The word itself comes originally from the Latin fides, meaning faith, and fiducia, trust.
In English common law the fiduciary relation is arguably the most important concept within the portion of the legal system known as equity