Google Wants Your Medical Records

Google's DeepMind has moved on from playing Go to more serious matters - attempting to solve some of the world's biggest health problems.

Projects include a tie-up with London Moorfields eye hospital, which will see it using one million eye scans to train its artificial intelligence system to diagnose potential sight issues, and development of an app to help doctors spot kidney disease.

Google's entry on to the healthcare scene has been welcomed by some, notably doctors who are desperate to apply some cutting-edge technology to antiquated NHS systems.

But less so by privacy groups and some patients, who have been surprised and concerned that their data - in some cases not anonymised - can be shared with the tech giant.So what does Google want with our health data and should we be worried?

What's caused the row?

In May it was revealed that Google's DeepMind, had been given access to the healthcare data of up to 1.6 million patients from three hospitals run by London's Royal Free Trust in order to develop an app, called Streams, that would notify doctors should someone be at risk of developing acute kidney injury (AKI).

The deal had been announced in February but at the time got little press attention. The biggest question mark was over why so much data was being shared, especially as only a tiny percentage of people would actually benefit from the app.

Some were also bemused when it became apparent that the deal with Google's AI firm would not actually involve any artificial intelligence.The reality, explained Mustafa Suleyman, DeepMind co-founder, is that AI is simply not yet ready for direct patient care. "Finding a fit between an algorithm and training data is difficult. People expect the algorithm to do too much," he said.

But, he added, DeepMind wanted to do the project because it wanted to try to make a difference in the NHS, particularly when it came to one of the most fundamental issues it faces - sharing and storing data. "The system is crying out for more innovation and hopefully that is something we can pioneer," he said. And, he noted, it was the hospital that sought out DeepMind rather than the other way round. Dr Chris Lang, a kidney doctor, approached the firm to see if a collaboration was possible.

"We went for coffee and ended up chatting for four hours."

So is this deal with Google unusual?

Although it has got far more publicity than any others, in fact this deal is a pretty standard one in the NHS. It emerged that the organisation has similar deals with 1,500 different third parties. The NHS claims that it would not be practical to ask every patient to consent to every one of these arrangements. In the tie-up with Moorfield’s, the data was anonymised and the rules here are that data can be shared for "ethically approved projects".

Patients can opt out of any data-sharing system by emailing their NHS Trust's data protection officer. In the case of the Royal Free, the BBC understands that 148 people have withdrawn their consent, a tiny fraction of the patients involved.

Is this Google's first foray into healthcare?

For DeepMind, yes but Google has been looking at healthcare for much longer.From Calico, Alphabet's research and development company whose mission is to "tackle ageing", to Verily which is currently developing a smart contact lens that can help diabetics monitor glucose levels, the search giant is investing heavily in healthcare.According to Mr. Suleyman, "making the world a better place" has always been part of DeepMind's somewhat lofty ambition to "solve intelligence".

Two years ago he decided that it was a good time to "make good the second part of that mission" and set about looking for ways where the company could make a difference.

"We looked at nano-materials, synthetic biology, renewable energy, transport trying to figure out how tech could make a difference and I realised that healthcare - it we could get it right - then the margin for beneficial impact was enormous."

Has Google got it right?

The firm seemed genuinely surprised when the announcement created some negative headlines and often reminded journalists that the point of the project was to help save lives. On reflection, Mr. Suleyman realises, that there was bound to be a backlash.

"I can completely understand why there was surprise about what we were doing. We have learned a lot and there is a lot we can do to improve - we take that feedback," he said.

DeepMind had already been in the process of setting up a panel of independent reviewers, nine technical and clinical experts who have the right to scrutinise what the firm is doing and interview members of the team.

"We recognise there is still more that we can do," said Mr. Suleyman and so the firm has decided to host a patient engagement forum.

It will be held on 25 September and will be streamed on YouTube with a Twitter Q&A. It plans to host four such meetings every year. Although Google has always loved experimenting with projects that benefit humankind, it is ultimately in the business of making money and its healthcare work is no exception.

It is currently in discussion with the NHS about how to do that and will remain doing so for "several years", said Mr. Suleyman. "Right now it is about building the tools and systems that are useful and once users are engaged then we can figure out how to monetise them," he said.

The firm has some radical ideas about how it can shake up the commercial relationships between the NHS and third parties.

"The vast majority of payments made to suppliers in healthcare systems are not often as connected to outcomes as we would like....Ultimately we want to get paid when we deliver concrete clinical benefits. We want to get paid to change the system and improve patient outcomes."

Governments Googling Google

Google has also published its latest “Transparency Report”, the disclosure in which it reveals how many times governments asked it to cough data on users. And this time around there's mixed news.

Notable is the fact that Governments asked Google for data 40,677 times between July 1 and December 31st of 2015, and asked for data from 81,311 accounts. Also, the fact that Google delivered data in 64 per cent of cases, up a single point compared to the previous half year.

In contrast, Google's long-term average for coughing data is on a downward trend: the company's first transparency report from 2010 saw it hand over data 76 per cent of the time. The current 64 per cent response rate is still lower than the rate at which Google coughed data until late 2012.

Google seems unconcerned by those rises, with legal director for law enforcement and information security Richard Salgado blogging that “We’re pleased with some of the improvements we’ve seen in surveillance laws.”

Salgado praises the new EU/USA Privacy Shield and welcomes the US Judicial Redress Act, but also calls for efforts that “improve diplomatic processes to promote a robust, principled, and transparent framework for legitimate cross-border investigations.”

The Register

« US Defense Intelligence Agency Is Researching Employee Social Media Histories
The Future Of Big Data Science »

CyberSecurity Jobsite
Check Point

Directory of Suppliers

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

Tines

Tines

The Tines security automation platform helps security teams automate manual tasks, making them more effective and efficient.

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

Rapid7

Rapid7

Rapid7 unites cloud risk management and threat detection to deliver results that secure your business and ensure you’re always ready for what comes next.

DeviceLock

DeviceLock

DeviceLock is a leading provider of endpoint device/port control and data leak prevention software.

X-act Forensics

X-act Forensics

X-act forensics are computer forensic experts with experience in cases of computer fraud, intellectual property theft, and social networking cases.

Guidewire

Guidewire

Guidewire Cyence™ Risk Analytics is a cloud-native economic cyber risk modeling solution built to help the insurance industry quantify cyber risk exposures.

BehavioSec

BehavioSec

BehavioSec uses the way your customers type, swipe, and hold their devices, and enables them to authenticate themselves through their own behavior patterns.

Fraud.com

Fraud.com

Fraud.com ensures trust at every step of the customer's digital journey; this complete end-to-end protection delivers unified identity, authentication and fraud detection and prevention.

Evanston Technology Partners (ETP)

Evanston Technology Partners (ETP)

ETP provides services and solutions to enable and transform businesses in the areas of cybersecurity, data protection, and efficient operations practices.

Amadeus Capital Partners

Amadeus Capital Partners

Amadeus Capital Partners offers over 20 years’ experience in technology investment. Our areas of focus include AI & machine learning and cyber security.

Automox

Automox

Remediate vulnerabilities 30X faster than the industry norm – and dramatically reduce your risk with simple, fast, and cloud-native endpoint hardening from Automox.

LTIMindtree

LTIMindtree

LTIMindtree is a new kind of technology consulting firm. We help businesses transform – from core to experience – to thrive in the marketplace of the future.

Cyber Security Authority (CSA) - Ghana

Cyber Security Authority (CSA) - Ghana

The Cyber Security Authority has been established to regulate cybersecurity activities in Ghana.

Ampcus Cyber

Ampcus Cyber

Ampcus Cyber specialize in providing comprehensive security solutions and services that are tailored to safeguard our clients' networks, infrastructure, and valuable assets.

CyFlare

CyFlare

CyFlare’s security platform integrates your tools with ours – delivering true positives, automated remediation, and interactive analytics built for security management teams.

ReachOut Technology

ReachOut Technology

ReachOut is a transformative approach to IT Security, Support, and Guidance. But we’re more than that. We’re passionate IT experts driven to make solutions to your problems.

ZEST Security

ZEST Security

The ZEST platform natively integrates into your technology stack to make efficient risk remediation possible.

Bastion Security Group

Bastion Security Group

Bastion Security combines the skills, expertise and leadership from Quantum Security, ZX Security, Helix Security and Cassini.