4 ms·

It's an interesting issue. My start up is in the healthcare space, primarily in the USA although I'm currently based in London. Theres definitely a group here w

by oakmad 7y ago

It's an interesting issue. My start up is in the healthcare space, primarily in the USA although I'm currently based in London. Theres definitely a group here who think that NHS users just need to accept that their data is going be fed into models and its part of the price of universal coverage as it will help outcomes and costs etc. I'm still on the fence about it, but having seen some of the results that AI is catching out in the field I'm tending towards universal good over personal privacy - though I may regret that... Im thankfully that at least the data cant be used to adjust individual insurance premiums. As an aside, it is not just Deepmind/Google, all the players are trying to get all the EHR data around the world. The NHS is particularly attractive due to the volume of historical data of course. Its no secret IBM Watson is working with NHS Wales although I don't know what data sharing agreement is in place.

NeedMoreTea 7y ago
> NHS users just need to accept that their data is going be fed into models That's fine so long as it goes nowhere else - it's perfectly reasonable for the NHS to have AI models to do their thing, just as the Met Office and others do. Remember years ago Google had a Search Appliance? A rack mount server to put in your business. The NHS should be doing the same with IBM, Deepmind and other models - figure a way to licence and use the technology without sharing any data back whatsoever. Data for training, helping IBM et al building better models should be 120 years old or more - guaranteed not to contain anyone alive. The restrictions on medical privacy are there for very good reasons, though I tend to the view they don't go nearly far enough for the modern world.
- bpfrh 7y ago
  Some things are genetic, so even if it is the data of your parents, it will still influence you. Only way is to completly anonymize data, which is way harder than it sounds.
  - OnlineGladiator 7y ago
    > Only way is to completly anonymize data, which is way harder than it sounds. What's complicated about it? So long as it's not attached to a name, social security number, or some other personally identifiable marker - how would anybody know it's you? You're just an anonymous collection of data points. I understand whatever fingerprint they use for your data is almost definitely completely unique, but that doesn't mean it can be associated with the corresponding person unless you allow that to happen. I mean I get that it's obviously not trivial from a security perspective, but what's the main blockade here?
    - NeedMoreTea 7y ago
      For most people in the last 10 or 15 years, search and Wikipedia very often (probably almost always barring casualty treatment) presages what they later go to their doctor about. What's complicated is Google and others are extreme data hoarders. Google can get the anonymous health records and run a fuzzy match of model records against Home, URL and gmail records. Find high confidence correlations against multiple conditions across the years, where the search preceded new medical entries for those conditions within x time. Now they're in this data set for condition y and oh lookie, they searched condition y related topics multiple times last year. Anonymous record i1389541 is Alice Smith of Wimbledon, set her adwords flags to condition y snake oil, sell record to UK life insurance consortium. [repeat]. No personal data was released, but you're fully de-anonymised. With enough data and history it becomes absurdly easy to decloak the majority with high or complete confidence. Welcome to the future. The alternative is find a way to prevent those uniquely identifying correlations at any point in the future, using techniques we haven't yet thought of. Which is probably impossible without diverging the anonymous medical record some considerable distance from reality. Faked enough to remain anonymous might not be helpful for research into a condition or its diagnosis...
      - OnlineGladiator 7y ago
        The obvious solution to this problem, assuming it is as pervasive as you describe (I feel you are slightly exaggerating, but it's really not the important part), is to regulate the data hoarders. That said, that's completely different from what I implied in my original comment, so point taken.
- avh02 7y ago
  being fed anonymized vs with full details is where I'd draw a line
noelsusman 7y ago
If you've ever been to a hospital in the US then your health data has definitely been sent to a third party to be fed into models. It's standard practice pretty much everywhere. With that said, the third parties are (generally) subject to all of the same HIPAA regulations that providers are. They sign contracts that effectively make them covered entities under HIPAA.

by oakmad 7y ago

NeedMoreTea 7y ago

> NHS users just need to accept that their data is going be fed into models That's fine so long as it goes nowhere else - it's perfectly reasonable for the NHS to have AI models to do their thing, just as the Met Office and others do. Remember years ago Google had a Search Appliance? A rack mount server to put in your business. The NHS should be doing the same with IBM, Deepmind and other models - figure a way to licence and use the technology without sharing any data back whatsoever. Data for training, helping IBM et al building better models should be 120 years old or more - guaranteed not to contain anyone alive. The restrictions on medical privacy are there for very good reasons, though I tend to the view they don't go nearly far enough for the modern world.

bpfrh 7y ago
Some things are genetic, so even if it is the data of your parents, it will still influence you. Only way is to completly anonymize data, which is way harder than it sounds.
- OnlineGladiator 7y ago
  > Only way is to completly anonymize data, which is way harder than it sounds. What's complicated about it? So long as it's not attached to a name, social security number, or some other personally identifiable marker - how would anybody know it's you? You're just an anonymous collection of data points. I understand whatever fingerprint they use for your data is almost definitely completely unique, but that doesn't mean it can be associated with the corresponding person unless you allow that to happen. I mean I get that it's obviously not trivial from a security perspective, but what's the main blockade here?
  - NeedMoreTea 7y ago
    For most people in the last 10 or 15 years, search and Wikipedia very often (probably almost always barring casualty treatment) presages what they later go to their doctor about. What's complicated is Google and others are extreme data hoarders. Google can get the anonymous health records and run a fuzzy match of model records against Home, URL and gmail records. Find high confidence correlations against multiple conditions across the years, where the search preceded new medical entries for those conditions within x time. Now they're in this data set for condition y and oh lookie, they searched condition y related topics multiple times last year. Anonymous record i1389541 is Alice Smith of Wimbledon, set her adwords flags to condition y snake oil, sell record to UK life insurance consortium. [repeat]. No personal data was released, but you're fully de-anonymised. With enough data and history it becomes absurdly easy to decloak the majority with high or complete confidence. Welcome to the future. The alternative is find a way to prevent those uniquely identifying correlations at any point in the future, using techniques we haven't yet thought of. Which is probably impossible without diverging the anonymous medical record some considerable distance from reality. Faked enough to remain anonymous might not be helpful for research into a condition or its diagnosis...
    - OnlineGladiator 7y ago
      The obvious solution to this problem, assuming it is as pervasive as you describe (I feel you are slightly exaggerating, but it's really not the important part), is to regulate the data hoarders. That said, that's completely different from what I implied in my original comment, so point taken.
avh02 7y ago
being fed anonymized vs with full details is where I'd draw a line

noelsusman 7y ago

If you've ever been to a hospital in the US then your health data has definitely been sent to a third party to be fed into models. It's standard practice pretty much everywhere. With that said, the third parties are (generally) subject to all of the same HIPAA regulations that providers are. They sign contracts that effectively make them covered entities under HIPAA.