Google DeepMind Buys NHS Data, but is it Legal?

With everything they touch, the current cohort of Artificial Intelligence and Machine Learning vendors promise to solve some of the world's biggest and most pressing issues and bring unparalleled positive changes to communities. Yet some of those communities are expected to feel some strain as automation is set to lead to obsolescence in a national quest for greater value for money. With that much at stake, it is perhaps no surprise the field holding the greatest promise to improve the lives of UK residents is healthcare.


Google Deepmind Buys NHS Data, but is it Legal?

Earlier this year, Google DeepMind began publishing its work with London's Royal Free Hospital. With an initial focus on delivering cost-effective healthcare operations, analysis , alerting and monitoring to NHS clinicians, this is seen as a stepping stone to directing DeepMind's considerable number crunching power to medical discovery and treatment.

"UK NHS and medical services are still very manual, even when computers are involved" Said Ethar Alali, Director of Axelisys, one of Manchester's many innovation and HealthTech startups.

"The NHS delivers an amazing level of service in the context of mounting financial pressures, staff shortages and the increased demand or an aging population. A workforce of nearly 2 million staff is a lot of people! Even saving £1 per employee, per day has the potential to save the NHS up to £2 billion a year during working hours. That time can then be ploughed back to patient care and shortening what are increasingly long waiting times."

Yet, like any analysis, comes the need to examine raw data. Google's data collection mechanisms are being put under the spotlight.

"Patterns in data can only be found when you look at data. We can 'theorise' as much as we like, but if the data isn't available, we simply can't prove our conclusions are robust, if come to any conclusions at all, let along come to a surprising conclusion. Indeed, many pharmaceutical discoveries came about by accident. It's simply a universal truth that finding the necessary healthcare signals, we have to look at patient records.

This naturally leads us to several ethical and privacy dilemmas in collecting and processing that data. The very reason the Data Protection Act was created to address all those years ago."

These problems hit Google this week, with the surprising referral of its work at the Royal Free Hospital to the ICO, by the hospital's own medical director, Prof Stephen Powis, who argues Google's alleged gathering of patient information through "implied consent" isn't permitted in this context.

Ethar, who also acts as the chief data protection officer for Axelisys, considers there to be a case to determine.

"Implied consent allows an organisation to collect unprotected information, usually information that cannot identify individuals, through the act of using of a resource. For example, people may now be familiar with cookie popups exclaiming that 'by using this web site, you consent to the gathering of information for the purposes of improving the browsing experience'. All the individual visitor information is typically pooled together to decide on website improvements, as a cohort.

The problem is, visiting Accident and Emergency is not like visiting a website. You cannot collect sensitive information through implied consent and it is this the ICO will have to determine."

Google has fallen foul of EU data protection regulations before. In 2014 the European Court of Justice ruled on the now infamous "Right to be forgotten" case, ordering Google and other search engines provide users with a mechanism allowing the removal of personally identifiable information from search results.

"This particular case isn't necessarily that clear cut. Not every piece of data available is necessarily personally identifiable. For example, optimising cleaning rotas or the amount of chemicals used in each mopping exercise. Such data doesn't require the use of explicit consent, nor any consent at all, like stock-taking in companies, they never reference a customer's personal information.

However, DeepMind is searching for a kind of overall, global optima. This means looking at data which bridges both contexts, identifiable and unidentifiable. What the ICO is being asked to consider are the edges where one starts and the other ends. Things get a bit fuzzy around these edges and create conditions that legislators haven't necessarily considered before. The case will set a precedent, so it is important, we at Axelisys will be watching. With the new General Data Protection Regulations set to supersede the Data Protection Act in May 2018, the resulting case potentially shapes part of the acquis once the UK leaves the EU. This case creates an important baseline we'll have to live with for a very long time."

Google appear to be happy at the referral stating they will be glad of the clarity. The ICO is due to report its findings very soon and a lot of UK and European companies will be watching.


Source: JournoLink



Google Deepmind Buys NHS Data, but is it Legal?

About The Operating Theatre Journal

The Operating Theatre Journal, OTJ, is published monthly and distributed to every hospital operating theatre department in the UK. The distribution includes both the National Health Service and the Private Sector.

More »
Follow & Share

Follow The Operating Theatre Journal on Facebook Follow The Operating Theatre Journal on Twitter Follow The Operating Theatre Journal on LinkedIn Follow The Operating Theatre Journal RSS Feed

Help & Support

Problems with, or comments about, this website may be emailed to:

Get in touch

Telephone: +44 (0)2921 680068
Skype: Lawrand Ltd
Email: admin@lawrand.com