Handing NHS data over to Google really isn’t a healthy move

We should all be questioning the willingness and ability of the NHS to manage a relationship with a global IT company

In the flood of other news, you may have missed the announcement that DeepMind's Streams app is being taken over by Google itself. DeepMind is part of the Alphabet group of companies, which includes Google, and Streams was developed to help health professionals get clinical alerts about kidney disease. To test this, the Royal Free NHS Foundation Trust gave DeepMind a bunch of patient data.

Advertisement - Article continues below

This proved a tad contentious. In July 2017, the Information Commissioner's Office ruled that the Royal Free NHS Foundation Trust had provided the personal data of around 1.6 million patients without complying with the relevant data protection law. In essence, the patients weren't adequately informed that their health records had been handed over to DeepMind. The data transfer hadn't been fair, transparent, lawful, necessary or proportionate. Now you might assume that someone went to jail for this? Oh, please stop before the laughing starts to hurt. Perhaps there was a landmark fine then? Oh, please stop before the... you get the idea.

That would have been too much for the NHS and DeepMind. No, instead the Royal Free NHS Trust was asked - I repeat, "asked" - to "commit to changes ensuring it is acting in line with the law by signing an agreement".

And there's more. Please could it "establish a proper legal basis under the Data Protection Act for the Google DeepMind project and for any future trials; set out how it will comply with its duty of confidence to patients in any future trial involving personal data; complete a privacy impact assessment, including specific steps to ensure transparency; and commission an audit of the trial, the results of which will be shared with the Information Commissioner, and which the Commissioner will have the right to publish as she sees appropriate."

Advertisement
Advertisement - Article continues below
Advertisement - Article continues below

Well strap me to an oil rig and whip me with seaweed. 1.6 million health records handed over to DeepMind, and that's all that happened.

Roll forward to today. Streams is now being handed over to the wider Google platform. "Our vision is for Streams to now become an AI-powered assistant for nurses and doctors everywhere - combining the best algorithms with intuitive design, all backed up by rigorous evidence. The team working within Google, alongside brilliant colleagues from across the organisation, will help make this vision a reality."

There's more: "We'll be working closely with them as we plan for the team's transition, and information governance and safety remain our top priorities. Patient data remains under our partners' strict control, and all decisions about its use will continue to lie with them." Which sounds just fine, except that the NHS, in the form of the Royal Free, has shown itself to be wholly unreliable in just such a role. It wasn't able to control and maintain governance of the data in the past. Why should we believe that it can do so now?

Advertisement - Article continues below

Underlying this is the wider dilemma. Big Data has a huge role to play in the future of healthcare. That isn't in question. What is in question is the willingness and ability of the NHS to manage a relationship with a global IT company, based in the USA, even if the Streams team remains in London. So far, the track record has looked nothing less than shockingly bad. Why will it get better?

And here is the issue. The NHS thinks that all the patient data belongs to it, and ultimately the Secretary of State for Health. My health record isn't mine. Yours isn't yours. It's theirs. And we're starting to see the first movements by the big three companies (Microsoft, Google, Amazon) in making inroads into that space. They have the data centres, they have the AI processing power, they can deliver huge benefits to the NHS.

We have seen in the past how these companies have been prepared to buy their way into industry sectors. In October 2013, Microsoft announced Student Advantage: "Any academic institution that licenses Office for staff and faculty can provide Office 365 ProPlus for students at no additional cost," it promised. "Combined with Office 365 for Education plan A2, which is free for schools, Student Advantage gives students access to the same set of world-class productivity tools and services used by Fortune 500 companies all over the world."

Advertisement - Article continues below

Just wait until Google, Amazon or Microsoft lines up just such a deal for patient health records for the NHS. The Secretary of State for Health will sign the cheque, because it will be cheapest solution around, and money is tight. The NHS will hand over the data, because it believes it owns it anyway. And the large American corporations involved will data mine it to the moon. Why wouldn't they? Who will stop them? Clearly not the Information Commissioner.

Featured Resources

Preparing for long-term remote working after COVID-19

Learn how to safely and securely enable your remote workforce

Download now

Cloud vs on-premise storage: What’s right for you?

Key considerations driving document storage decisions for businesses

Download now

Staying ahead of the game in the world of data

Create successful marketing campaigns by understanding your customers better

Download now

Transforming productivity

Solutions that facilitate work at full speed

Download now
Advertisement
Advertisement

Recommended

Visit/policy-legislation/general-data-protection-regulation-gdpr/355337/ico-will-reduce-gdpr-fines-due-to
General Data Protection Regulation (GDPR)

ICO to relax GDPR enforcement during coronavirus economic downturn

16 Apr 2020
Visit/security/privacy/355304/nhs-working-with-apple-google-coronavirus-tracking-app
privacy

The NHS teams up with Apple and Google on coronavirus tracking app

14 Apr 2020
Visit/policy-legislation/data-protection/355250/health-sites-sharing-users-medical-data-with-major-tech
data protection

Health sites are 'unlawfully' sharing medical data with Facebook and Google

7 Apr 2020
Visit/policy-legislation/data-protection/355184/supreme-court-finds-morrisons-was-not-liable-for-2014
data protection

Supreme Court rules Morrisons was not liable for 2014 data breach

1 Apr 2020

Most Popular

Visit/business/business-operations/356395/nvidia-overtakes-intel-as-most-valuable-us-chipmaker
Business operations

Nvidia overtakes Intel as most valuable US chipmaker

9 Jul 2020
Visit/laptops/29190/how-to-find-ram-speed-size-and-type
Laptops

How to find RAM speed, size and type

24 Jun 2020
Visit/server-storage/servers/356083/the-best-server-solution-for-your-smb
Sponsored

The best server solution for your SMB

26 Jun 2020