Google Wants Your Medical Records

Google's DeepMind has moved on from playing Go to more serious matters - attempting to solve some of the world's biggest health problems.

Projects include a tie-up with London Moorfields eye hospital, which will see it using one million eye scans to train its artificial intelligence system to diagnose potential sight issues, and development of an app to help doctors spot kidney disease.

Google's entry on to the healthcare scene has been welcomed by some, notably doctors who are desperate to apply some cutting-edge technology to antiquated NHS systems.

But less so by privacy groups and some patients, who have been surprised and concerned that their data - in some cases not anonymised - can be shared with the tech giant.So what does Google want with our health data and should we be worried?

What's caused the row?

In May it was revealed that Google's DeepMind, had been given access to the healthcare data of up to 1.6 million patients from three hospitals run by London's Royal Free Trust in order to develop an app, called Streams, that would notify doctors should someone be at risk of developing acute kidney injury (AKI).

The deal had been announced in February but at the time got little press attention. The biggest question mark was over why so much data was being shared, especially as only a tiny percentage of people would actually benefit from the app.

Some were also bemused when it became apparent that the deal with Google's AI firm would not actually involve any artificial intelligence.The reality, explained Mustafa Suleyman, DeepMind co-founder, is that AI is simply not yet ready for direct patient care. "Finding a fit between an algorithm and training data is difficult. People expect the algorithm to do too much," he said.

But, he added, DeepMind wanted to do the project because it wanted to try to make a difference in the NHS, particularly when it came to one of the most fundamental issues it faces - sharing and storing data. "The system is crying out for more innovation and hopefully that is something we can pioneer," he said. And, he noted, it was the hospital that sought out DeepMind rather than the other way round. Dr Chris Lang, a kidney doctor, approached the firm to see if a collaboration was possible.

"We went for coffee and ended up chatting for four hours."

So is this deal with Google unusual?

Although it has got far more publicity than any others, in fact this deal is a pretty standard one in the NHS. It emerged that the organisation has similar deals with 1,500 different third parties. The NHS claims that it would not be practical to ask every patient to consent to every one of these arrangements. In the tie-up with Moorfield’s, the data was anonymised and the rules here are that data can be shared for "ethically approved projects".

Patients can opt out of any data-sharing system by emailing their NHS Trust's data protection officer. In the case of the Royal Free, the BBC understands that 148 people have withdrawn their consent, a tiny fraction of the patients involved.

Is this Google's first foray into healthcare?

For DeepMind, yes but Google has been looking at healthcare for much longer.From Calico, Alphabet's research and development company whose mission is to "tackle ageing", to Verily which is currently developing a smart contact lens that can help diabetics monitor glucose levels, the search giant is investing heavily in healthcare.According to Mr. Suleyman, "making the world a better place" has always been part of DeepMind's somewhat lofty ambition to "solve intelligence".

Two years ago he decided that it was a good time to "make good the second part of that mission" and set about looking for ways where the company could make a difference.

"We looked at nano-materials, synthetic biology, renewable energy, transport trying to figure out how tech could make a difference and I realised that healthcare - it we could get it right - then the margin for beneficial impact was enormous."

Has Google got it right?

The firm seemed genuinely surprised when the announcement created some negative headlines and often reminded journalists that the point of the project was to help save lives. On reflection, Mr. Suleyman realises, that there was bound to be a backlash.

"I can completely understand why there was surprise about what we were doing. We have learned a lot and there is a lot we can do to improve - we take that feedback," he said.

DeepMind had already been in the process of setting up a panel of independent reviewers, nine technical and clinical experts who have the right to scrutinise what the firm is doing and interview members of the team.

"We recognise there is still more that we can do," said Mr. Suleyman and so the firm has decided to host a patient engagement forum.

It will be held on 25 September and will be streamed on YouTube with a Twitter Q&A. It plans to host four such meetings every year. Although Google has always loved experimenting with projects that benefit humankind, it is ultimately in the business of making money and its healthcare work is no exception.

It is currently in discussion with the NHS about how to do that and will remain doing so for "several years", said Mr. Suleyman. "Right now it is about building the tools and systems that are useful and once users are engaged then we can figure out how to monetise them," he said.

The firm has some radical ideas about how it can shake up the commercial relationships between the NHS and third parties.

"The vast majority of payments made to suppliers in healthcare systems are not often as connected to outcomes as we would like....Ultimately we want to get paid when we deliver concrete clinical benefits. We want to get paid to change the system and improve patient outcomes."

Governments Googling Google

Google has also published its latest “Transparency Report”, the disclosure in which it reveals how many times governments asked it to cough data on users. And this time around there's mixed news.

Notable is the fact that Governments asked Google for data 40,677 times between July 1 and December 31st of 2015, and asked for data from 81,311 accounts. Also, the fact that Google delivered data in 64 per cent of cases, up a single point compared to the previous half year.

In contrast, Google's long-term average for coughing data is on a downward trend: the company's first transparency report from 2010 saw it hand over data 76 per cent of the time. The current 64 per cent response rate is still lower than the rate at which Google coughed data until late 2012.

Google seems unconcerned by those rises, with legal director for law enforcement and information security Richard Salgado blogging that “We’re pleased with some of the improvements we’ve seen in surveillance laws.”

Salgado praises the new EU/USA Privacy Shield and welcomes the US Judicial Redress Act, but also calls for efforts that “improve diplomatic processes to promote a robust, principled, and transparent framework for legitimate cross-border investigations.”

The Register

« US Defense Intelligence Agency Is Researching Employee Social Media Histories
The Future Of Big Data Science »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

Watch this webinar to hear security experts from Amazon Web Services (AWS) and SANS break down the myths and realities of what an NGFW is, how to use one, and what it can do for your security posture.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

WireX Systems

WireX Systems

WireX is an innovative network intelligence and forensics company that is changing the way businesses resolve cyber-attacks.

Commissum

Commissum

Commissum specialise in information assurance and security testing services.

macmon secure

macmon secure

macmon secure develops network security software, focussing on Network Access Control.

SBD Automotive

SBD Automotive

SBD Automotive are specialists in automotive technology providing independent research and consultancy to help create smarter, more secure, better connected, and increasingly autonomous cars.

The Cyber AB

The Cyber AB

The Cyber AB is the official accreditation body of the Cybersecurity Maturity Model Certification (CMMC) Ecosystem.

GBT Technologies

GBT Technologies

GBT Technologies is a technology company focused on chip design and software to enable IoT, global mesh networks, and for applications relating to artificial intelligence.

DoControl

DoControl

DoControl gives organizations the automated, self-service tools they need for SaaS applications data access monitoring, orchestration, and remediation.

Suresecure

Suresecure

Suresecure are a specialised consulting company providing Strategic IT security consulting, Managed Security Services, and Incident Response Management.

Incognia

Incognia

Incognia have created a ubiquitous private identity based on location behavior, that enables a personalized frictionless experience with mobile apps and connected devices.

Exalens

Exalens

With deep roots in AI-driven cyber-physical security research and intrusion detection, at Exalens, we are enhancing operational resilience for cyber-physical systems at the OT edge.

The CyberWire

The CyberWire

The CyberWire gets people up to speed on cyber quickly and keeps them a step ahead in a continually changing industry.

Cydea

Cydea

Cydea are an optimistic cyber security consultancy of experts in security, data, technology and design that want to build a safer, more secure world where more things go right.

BARR Advisory

BARR Advisory

At BARR Advisory, we build trust through cyber resilience. We help protect the world’s data, people, and information networks through a human-first approach to cybersecurity and compliance.

Xcede

Xcede

Xcede are global technology recruitment specialists. We connect companies with exceptional professionals who empower growth.

SSL2BUY

SSL2BUY

SSL2BUY is a leading SSL certificate provider, authorized to sell top CA brands like Comodo, DigiCert, GlobalSign, Thawte, GeoTrust and more.

AC3

AC3

AC3 is a leading secure cloud services provider, focused on turning your technology challenges into real results.