2 ms·
Consider whether affiliated people on Twitter are the sort of people you'd feel comfortable being able to anonymously browse your medical history without any lo
by motohagiography 6y ago
Consider whether affiliated people on Twitter are the sort of people you'd feel comfortable being able to anonymously browse your medical history without any log of the action because it was classified as research on a data set. Researchers are people like anyone else, except they're just as awful, with more access, fewer adult incentives and boundaries, and almost no personal accountability for privacy. If you have doubts about whether you would trust U.S. college IT people to run facebook, pornhub, reddit, or tinder on your behalf, I recommend paying attention to what this new national data guardian has to say.
The risk I think she will need to manage is the pressure universities apply to health agencies for data. There is a perfect storm brewing where privacy for outsiders isn't a big cultural norm in some reserach communities, but using data for social political purposes is. Reserach ethics boards are nice, but they're like the police investigating themseves.
The question isn't so much whether we could cure cancer with just this bit more data without oversight, and more whether the people demanding it are above using a perceived crisis to squeeze the toothpaste out of the tube. She has a very interesting job ahead of her.
- antxxxx 6y agoThere are strict guidelines about what data can be shared for research purposes and researchers only get access to the data they need - not your full medical history. Access is audited and you can request information on where and for what purposes your data is shared. You can also easily opt out of your data being shared for research purposes.
- motohagiography 6y agoDepends on what jurisdiction, and if you are familiar with privacy law in different regions, the exceptions to that are often sweeping, with the additional issue in some systems that regulations can be made by lower level authorities without the same level of public scrutiny or debate. It's the wild west for data, and privacy people have done what they could over the last 20 years, but the tech has accelerated so much in the last 10 that those prior assurances aren't what we think they are.
- antxxxx 6y agoAll health and social care organizations in England must comply with this by September 2021 (delayed from original date due to the pandemic). This was based on a recommendation from the previous National Data Guardian. Scotland, Wales and Northern Ireland have different policies.
- motohagiography 6y agoMassive data sets were mobilized for covid-19, and I advise anyone politically exposed that it would be unwise to consider their health records a secure secret, and to challenge the security controls on any private electronic information. If you really have a privacy risk, you already know how to avoid these issues, but everyone should understand and always assert their privacy rights, because there are a lot of parties interested in taking them.
- m463 6y ago> opt out and there is the crux of the matter.