Google Wants Your Medical Records

Google's DeepMind has moved on from playing Go to more serious matters - attempting to solve some of the world's biggest health problems.

Projects include a tie-up with London Moorfields eye hospital, which will see it using one million eye scans to train its artificial intelligence system to diagnose potential sight issues, and development of an app to help doctors spot kidney disease.

Google's entry on to the healthcare scene has been welcomed by some, notably doctors who are desperate to apply some cutting-edge technology to antiquated NHS systems.

But less so by privacy groups and some patients, who have been surprised and concerned that their data - in some cases not anonymised - can be shared with the tech giant.So what does Google want with our health data and should we be worried?

What's caused the row?

In May it was revealed that Google's DeepMind, had been given access to the healthcare data of up to 1.6 million patients from three hospitals run by London's Royal Free Trust in order to develop an app, called Streams, that would notify doctors should someone be at risk of developing acute kidney injury (AKI).

The deal had been announced in February but at the time got little press attention. The biggest question mark was over why so much data was being shared, especially as only a tiny percentage of people would actually benefit from the app.

Some were also bemused when it became apparent that the deal with Google's AI firm would not actually involve any artificial intelligence.The reality, explained Mustafa Suleyman, DeepMind co-founder, is that AI is simply not yet ready for direct patient care. "Finding a fit between an algorithm and training data is difficult. People expect the algorithm to do too much," he said.

But, he added, DeepMind wanted to do the project because it wanted to try to make a difference in the NHS, particularly when it came to one of the most fundamental issues it faces - sharing and storing data. "The system is crying out for more innovation and hopefully that is something we can pioneer," he said. And, he noted, it was the hospital that sought out DeepMind rather than the other way round. Dr Chris Lang, a kidney doctor, approached the firm to see if a collaboration was possible.

"We went for coffee and ended up chatting for four hours."

So is this deal with Google unusual?

Although it has got far more publicity than any others, in fact this deal is a pretty standard one in the NHS. It emerged that the organisation has similar deals with 1,500 different third parties. The NHS claims that it would not be practical to ask every patient to consent to every one of these arrangements. In the tie-up with Moorfield’s, the data was anonymised and the rules here are that data can be shared for "ethically approved projects".

Patients can opt out of any data-sharing system by emailing their NHS Trust's data protection officer. In the case of the Royal Free, the BBC understands that 148 people have withdrawn their consent, a tiny fraction of the patients involved.

Is this Google's first foray into healthcare?

For DeepMind, yes but Google has been looking at healthcare for much longer.From Calico, Alphabet's research and development company whose mission is to "tackle ageing", to Verily which is currently developing a smart contact lens that can help diabetics monitor glucose levels, the search giant is investing heavily in healthcare.According to Mr. Suleyman, "making the world a better place" has always been part of DeepMind's somewhat lofty ambition to "solve intelligence".

Two years ago he decided that it was a good time to "make good the second part of that mission" and set about looking for ways where the company could make a difference.

"We looked at nano-materials, synthetic biology, renewable energy, transport trying to figure out how tech could make a difference and I realised that healthcare - it we could get it right - then the margin for beneficial impact was enormous."

Has Google got it right?

The firm seemed genuinely surprised when the announcement created some negative headlines and often reminded journalists that the point of the project was to help save lives. On reflection, Mr. Suleyman realises, that there was bound to be a backlash.

"I can completely understand why there was surprise about what we were doing. We have learned a lot and there is a lot we can do to improve - we take that feedback," he said.

DeepMind had already been in the process of setting up a panel of independent reviewers, nine technical and clinical experts who have the right to scrutinise what the firm is doing and interview members of the team.

"We recognise there is still more that we can do," said Mr. Suleyman and so the firm has decided to host a patient engagement forum.

It will be held on 25 September and will be streamed on YouTube with a Twitter Q&A. It plans to host four such meetings every year. Although Google has always loved experimenting with projects that benefit humankind, it is ultimately in the business of making money and its healthcare work is no exception.

It is currently in discussion with the NHS about how to do that and will remain doing so for "several years", said Mr. Suleyman. "Right now it is about building the tools and systems that are useful and once users are engaged then we can figure out how to monetise them," he said.

The firm has some radical ideas about how it can shake up the commercial relationships between the NHS and third parties.

"The vast majority of payments made to suppliers in healthcare systems are not often as connected to outcomes as we would like....Ultimately we want to get paid when we deliver concrete clinical benefits. We want to get paid to change the system and improve patient outcomes."

Governments Googling Google

Google has also published its latest “Transparency Report”, the disclosure in which it reveals how many times governments asked it to cough data on users. And this time around there's mixed news.

Notable is the fact that Governments asked Google for data 40,677 times between July 1 and December 31st of 2015, and asked for data from 81,311 accounts. Also, the fact that Google delivered data in 64 per cent of cases, up a single point compared to the previous half year.

In contrast, Google's long-term average for coughing data is on a downward trend: the company's first transparency report from 2010 saw it hand over data 76 per cent of the time. The current 64 per cent response rate is still lower than the rate at which Google coughed data until late 2012.

Google seems unconcerned by those rises, with legal director for law enforcement and information security Richard Salgado blogging that “We’re pleased with some of the improvements we’ve seen in surveillance laws.”

Salgado praises the new EU/USA Privacy Shield and welcomes the US Judicial Redress Act, but also calls for efforts that “improve diplomatic processes to promote a robust, principled, and transparent framework for legitimate cross-border investigations.”

The Register

« US Defense Intelligence Agency Is Researching Employee Social Media Histories
The Future Of Big Data Science »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

Perimeter 81 / How to Select the Right ZTNA Solution

Perimeter 81 / How to Select the Right ZTNA Solution

Gartner insights into How to Select the Right ZTNA offering. Download this FREE report for a limited time only.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

Resecurity, Inc.

Resecurity, Inc.

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

Cyberis

Cyberis

Cyberis are pioneers in customer-focussed information security. Since 2011, we’ve been helping businesses protect their brands, customers and reputation.

Link11 GmbH

Link11 GmbH

Link11 provides DDoS protection solutions to protect websites and complete server infrastructures from DDoS attacks.

Titus

Titus

Titus is a global leader in enterprise-grade data protection solutions.

TNO Cyber Security Lab

TNO Cyber Security Lab

TNO Cyber Security Lab is a dedicated facility for innovative and experimental research with the goal of a safe and resilient cyberspace.

Deep Identity

Deep Identity

Deep Identity is a boutique system integrator, with expertise in tailored identity governance & administration (IGA) and identity access management (IAM) solutions.

Proficio

Proficio

Proficio is a world-class Managed Security Service Provider providing managed detection and response solutions, 24×7 security monitoring and advanced data breach prevention services worldwide.

Cyberhaven

Cyberhaven

Cyberhaven provides rapid enablement for GDPR and CCPA compliance, streamlined data security and modern risk management.

TeskaLabs

TeskaLabs

TeskaLabs is a software vendor of cybersecurity and data privacy products.

AUTOCRYPT

AUTOCRYPT

AUTOCRYPT is a mobility security provider dedicated to the safety of future transportation

Tracepoint

Tracepoint

Tracepoint provide full-service cyber incident response, remediation and recovery solutions for the most time-sensitive situation your company may ever face.

Canopius Group

Canopius Group

Canopius is a global specialty lines insurance and reinsurance company and one of the top 10 insurers in the Lloyd’s insurance market.

Toothpic

Toothpic

ToothPic has invented, designed, developed and patented a solution to enable companies to turn every smartphone into a secure key for a user-friendly online authentication.

Com Olho

Com Olho

Com Olho provides the measurement, analytics, quality assurance, and fraud protection technologies brands need for their business and customers.

Network Perception

Network Perception

Network Perception proactively and continuously assures the security of critical OT assets with intuitive network segmentation verification and visualization.

Global Market Innovators (GMI)

Global Market Innovators (GMI)

Global Market Innovators (GMI) delivers secure technology solutions to organizations in need.

Riot Security

Riot Security

In today's world, most successful cyberattacks start by a human failure. Riot have developed a platform that makes it easy to prepare your employees for cyberattacks, in a way they love.