4 ms·

Do not allow PII! Be very careful about what you gather as publicly sourced data. Think about what can happen if false data is entered. Consider both malicious

Do not allow PII! Be very careful about what you gather as publicly sourced data. Think about what can happen if false data is entered. Consider both malicious and ignorant cases.

wenc 7y ago
Yes. I think in times like this, one of the things we need to guard against is misinformation. Transparency is important but it must exist alongside trust -- if the latter is compromised, the implementation of correct actions may be compromised. Crowdsourced systems have an implicit assumption that the downside of acting on incorrect information is small. I'm not sure if this assumption holds here. Imagine someone entering large swaths of data that are false but plausible, and then less scrupulous news reporters pick it up, arrive at the wrong conclusion and then fast feedback loops inadvertently propagate it without fact checks (you know how the news cycle works). With Wikipedia, there's at least the mechanism of curation (flawed as it may be) and citations. With an open patient database, there's no means of verification. There's also the assumption that people are good at entering data without constraints correctly. I see this assumption violated all the time.
rayhendricks 7y ago
Locate the servers outside the USA/EU them all for whatever you want. Hippa is outdated and designed for a pre Internet Age. We could have our whole health history running in Apple health yet visible to researchers if allowed. This is technically possible but the present healthcare industry/government does not allow this.
- toomuchtodo 7y ago
  Please do not give bad legal advice in a public forum. This could have grave consequences for someone who naively follows such guidance. Whether you agree with a law is not relevant to whether you reside or operate within a jurisdiction it applies to.
- probinso 7y ago
  You can put lives at risk by sharing bad or the wrong type of information. People who are scared often make bad decisions. In the wrong environment, sharing someone's identity can be equivalent to swatting them and their community. There are deep ethics involved with the decisions that structured many of these laws. Anytime you are dealing with personally identifiable information, you have to consider the consequences of trivializing privacy. Always consider and know the laws for your domain and also take seriously the ethics. If you aren't ready to do this, choose to contribute by a different way. There are many ways to develop resources that can reduce harm, and currently large online communities brainstorming those ways.

Do not allow PII! Be very careful about what you gather as publicly sourced data. Think about what can happen if false data is entered. Consider both malicious and ignorant cases.

wenc 7y ago

Yes. I think in times like this, one of the things we need to guard against is misinformation. Transparency is important but it must exist alongside trust -- if the latter is compromised, the implementation of correct actions may be compromised. Crowdsourced systems have an implicit assumption that the downside of acting on incorrect information is small. I'm not sure if this assumption holds here. Imagine someone entering large swaths of data that are false but plausible, and then less scrupulous news reporters pick it up, arrive at the wrong conclusion and then fast feedback loops inadvertently propagate it without fact checks (you know how the news cycle works). With Wikipedia, there's at least the mechanism of curation (flawed as it may be) and citations. With an open patient database, there's no means of verification. There's also the assumption that people are good at entering data without constraints correctly. I see this assumption violated all the time.

rayhendricks 7y ago

Locate the servers outside the USA/EU them all for whatever you want. Hippa is outdated and designed for a pre Internet Age. We could have our whole health history running in Apple health yet visible to researchers if allowed. This is technically possible but the present healthcare industry/government does not allow this.

toomuchtodo 7y ago
Please do not give bad legal advice in a public forum. This could have grave consequences for someone who naively follows such guidance. Whether you agree with a law is not relevant to whether you reside or operate within a jurisdiction it applies to.
probinso 7y ago
You can put lives at risk by sharing bad or the wrong type of information. People who are scared often make bad decisions. In the wrong environment, sharing someone's identity can be equivalent to swatting them and their community. There are deep ethics involved with the decisions that structured many of these laws. Anytime you are dealing with personally identifiable information, you have to consider the consequences of trivializing privacy. Always consider and know the laws for your domain and also take seriously the ethics. If you aren't ready to do this, choose to contribute by a different way. There are many ways to develop resources that can reduce harm, and currently large online communities brainstorming those ways.