Live data from Hacker News

The NHS is selling your private data – here's the price list [pdf]

hscic.gov.uk

71–80 of 122 posts

Re: The NHS is selling your private data – here's the price list [pdf]

#71
post #44

Earlier quoted context omitted.

How exactly would you 'de-identify' a NHS number?

Since that number is meaningless in the U.S., I guess you wouldn't care.

My New Zealand address is meaningless in the US unless you want to find my house. I see patient numbers on things displayed from time to time and wince - interesting case studies etc. I most certainly could find out who the person is. A distinct pathology is probably enough to identify someone in New Zealand if you tried hard enough.

Re: The NHS is selling your private data – here's the price list [pdf]

#72
post #37

Earlier quoted context omitted.

That sort of data can be included in de-identified health data in the U.S. if it can be shown statistically that the individual cannot be re-identified.

How exactly would you 'de-identify' a NHS number?

The data available won't include that those personal identifiers. At time of extraction, the patient record in the database is assigned a new unique identifier which has nothing to do with the NHS number.

Re: The NHS is selling your private data – here's the price list [pdf]

#73
post #2

A good explanation of the scheme, from Dr Neil Bhatia can be found at http://care-data.info/ It includes details of how to opt-out.

It's a long site so I'd just like to highlight the following: "The data extracted - your Primary Care Dataset - will include the following: Your NHS number Your date of birth Your postcode Your gender and ethnicity Your medical diagnoses (including cancer and mental health) and any complications Your referrals to specialists Your prescriptions Your family history Your vaccinations and screening tests Your blood test…

Love how it is opt out. If it was opt in would they have any takers? If you set up auto-opt in systems where I live you would soon have the commerce commission, privacy commission or the police knocking on your door asking hard questions.

Re: The NHS is selling your private data – here's the price list [pdf]

#74

Earlier quoted context omitted.

>" and where seeking consent was not practicable, " // As they have your contact details and next of kin details then seeking consent must be quite practicable. I expect them mean "commercially financially viable". Those people the NHS can't simply look up a phone number for (from doctor's surgery records) and ask (or ask their guardian/parent) must be in the few hundreds [of those they have sufficient medical inform…

I guess that's what it says, practicable with regard to cost. To look at one random example, the first study on the list of approvals in 2013 was the "ETPOS: European Transfusion Practice and Outcome Survey". Apparently they took data from 10,000 patients who had blood transfusions and tried to see if there was any correlations between practices such as "ratio of red blood cells to other blood component therapy, such…

Robot Dialer: The NHS wish to sell your medical data for use in a study of people who had blood transfusions. Press 1 to accept, 2 to refuse, 3 to speak to an agent.

Robot Dialer: You pressed 1 to accept; can we use your data for future studies? Press 1 to accept, 2 to refuse, 3 to speak to an agent.

Robot Dialer: You pressed 2, can we contact you to ask about using your data in specific studies in the future? Press 1 to accept, 2 to refuse, 3 to speak to an agent.

Umpteen marketing companies appear to be able to afford to do this sort of calling (yes even though it's against the law for them to contact me as I'm on the no-call database [which wouldn't apply to the NHS]).

If it's too costly then the studies can hardly be worthwhile? Remember the NHS wasted £10 Billion on a single IT project over the last 10 years. What would this auto-dialer have cost? £10k in "management", couple of thousand in IT staff and set-up (join study NHS numbers with main database ID table and contact info tables, select phone numbers; set-up dialer script, test, initiate) maybe £500 in direct call costs. They most likely already have systems in place to do auto-dialed calls for disease outbreaks [UK Environment Agency use one for flood warnings].

Re: The NHS is selling your private data – here's the price list [pdf]

#75
post #41
post #36

Earlier quoted context omitted.

It's [NHS] England only (currently).

I live in Bristol. I wonder how quickly I can move to Cardiff?

Well in Cardiff you'll be opted in to organ donation automatically of course.

Re: The NHS is selling your private data – here's the price list [pdf]

#77
post #70

I would just like to point out that even if they "anonymize" the records it's generally not that hard to de-anonymize data. During the Netflix prize, randomly generated IDs were eventually matched to people based simply on movie ratings and matching public information in other public sources: http://www.wired.com/politics/security/commentary/securityma... With medical data, it will probably be trivial (maybe easier o…

Companies are TERRIBLE at this. We used a company to do an employee feedback survey. They promised us that the data would be delivered in a 100%, completely anonymized format. We sit down to go over the results and slide number one is "Men were a 100% approval while women were 73%". I'm the only male on my team. How in the world is this anonymous?

Re: The NHS is selling your private data – here's the price list [pdf]

#79
post #63

Earlier quoted context omitted.

There was an interesting Businessweek article[1] on the sale of pseudoanonymised data to private companies in the US. One Harvard researcher acquired one such database and was able to identify some individuals: >Latanya Sweeney, the director of Harvard University’s Data Privacy Lab, identified 35 patients from a Washington database by buying state medical data and creating a simple software program to cross-reference…

Police and researchers have provisions to request access to the database under HIPAA The Harvard researcher probably fell under research for public health. I'd hope private researchers can access public health data. The goal for "ICD" global standardized diagnoses codes is to help research. There are rules for distribution and compliance that should carry over to each handler of the data sets. Given all that, I still…

It's not as cut and dry as that, apparently. From that BusinessWeek article:

>Washington State’s health agency sold its database 95 times that year, collecting a mere $15,950. Donn Moyer, a spokesman for the state’s health department, says it chose to release extra identifying information such as patients’ Zip Codes to make its data more useful.

The Harvard researcher's point is that it's possible to identify individuals in the datasets being sold in some scenarios.

Re: The NHS is selling your private data – here's the price list [pdf]

#80
post #33

You can choose to have your information not included, it's an opt out system. Form is here: http://www.connectingforhealth.nhs.uk/systemsandservices/scr...

You are spreading misinformation, almost definitely not on purpose. Read about the correct opt-out form here: http://optout.care-data.info/

And of course you're included automatically, but to opt out it is most painful way to do it.

And not to mention that you need to know about it in the first place.

Post reply on HN