Privacy Concerns Over Patient Data Uploaded To Google Servers

H

HardOCP News

[H] News
Joined
Dec 31, 1969
Messages
0
Privacy schmivacy! Obviously, if you don't want your personal medical information shared or stored on Google's servers...don't go to a hospital. Duh.

The National Health Service (NHS) of England has come under fire lately amid plans to share patient data with researchers and private companies, and today's revelation will only pile on the privacy concerns. The Guardian reports that the entire patient database for the NHS has been uploaded to Google servers.
Click to expand...
 
i wonder how much money it takes to overrule decision makers' common sense. probably not much anyway since it requires a lack of soul in the first place as we know from dilbert.
 
When the government speaks of privacy, it is only lip-service. They really don't give a shit no matter what they say.

Shit like this is yet another indicator this is so.

Next thing you know, they'll want to lease excess Target Server space.
 
Oh, you have a family history of heart disease and diabetes. That job you are applying for is no longer available.
 
I think Google® has proven they're utterly and completely trustworthy with your most intimate data. You can trust Google® to look after your best interests in any situation*.

*: Statement assumes that Google's profits are in your best interests.
 
phred15 said:
Oh, you have a family history of heart disease and diabetes. That job you are applying for is no longer available.
Click to expand...

It's only a matter of time really, privacy is out of fashion now...

Kinda reminds me of the movie Gattaca.
 
Funny this came up because I work in the Texas Medical Center as a Sr. Bus. Sys Analyst and this has been an interesting year for us here as we onboard cloud storage.


Because of HIPAA, data handling standards are different (somewhat) in the U.S.

Any third party vendor must sign a Business Associates Agreement with the healthcare institution/provider which means, in essence, the vendor will treat the data to the same standard(s) as the healthcare institution.

All data must be encrypted in transit and at rest (AES 256) and the encryption keys must be held by the data owner institution, not the storage provider (Google, AWS, Box, Dropbox, et al).

All transactions must be logged and those logs themselves must be proven to be untamperable.

If Google (or any other vendor) were to release protected data, either deliberately or accidentally, they would find themselves on the wrong side of the Office of Civil Rights, and that is a bad place to be.

:)
 
Twisted Kidney said:
I think Google® has proven they're utterly and completely trustworthy with your most intimate data. You can trust Google® to look after your best interests in any situation*.

*: Statement assumes that Google's profits are in your best interests.
Click to expand...

How, exactly?

Regardless, this situation is in no way the fault of Google. A third party had patient data and dumped it onto a BigQuery analytics server space. But this is all overblown. From a source actually based in the UK, and isn't crappy Engadget:

"PA Consulting used a product called Google BigQuery to manipulate the datasets provided and the NHS IC [HSCIC] was aware of this. The NHS IC had written confirmation from PA Consulting prior to the agreement being signed that no Google staff would be able to access the data; access continued to be restricted to the individuals named in the data sharing agreement." http://www.v3.co.uk/v3-uk/news/2332066/concerns-over-nhs-google-bigquery-practices-as-patient-data-controversy-rumbles-on

All parties knew what was happening. Purportedly the agreement was covered by whatever the equivalent of HIPAA is in the UK. The only reason this is getting attention is because they used a "GOOGLE" service, vs some other no-name analytics service.

Clickbait
 
Sure it is. Google is solely, 100% responsible for people not trusting them any more.


teh_chem said:
How, exactly?

Regardless, this situation is in no way the fault of Google. A third party had patient data and dumped it onto a BigQuery analytics server space. But this is all overblown. From a source actually based in the UK, and isn't crappy Engadget:

"PA Consulting used a product called Google BigQuery to manipulate the datasets provided and the NHS IC [HSCIC] was aware of this. The NHS IC had written confirmation from PA Consulting prior to the agreement being signed that no Google staff would be able to access the data; access continued to be restricted to the individuals named in the data sharing agreement." http://www.v3.co.uk/v3-uk/news/2332...ctices-as-patient-data-controversy-rumbles-on

All parties knew what was happening. Purportedly the agreement was covered by whatever the equivalent of HIPAA is in the UK. The only reason this is getting attention is because they used a "GOOGLE" service, vs some other no-name analytics service.

Clickbait
Click to expand...
 
I'd trust Google with the data more than most corporate networks out there.
 
I wasnt asked if my data could be put on Google.
Seems like they really give a damn.
 
TechLarry said:
Sure it is. Google is solely, 100% responsible for people not trusting them any more.
Click to expand...

How? Exactly? Seriously--a serious answer; what is it google did that fosters that attitude? What is distrusting about Google vs. any other online, free, public, cloud-based service? To be quite frank, I trust them far more than most other solutions. Google doesn't care who I am. All of their aggregate data is anonymized. There's no person at Google that reads my emails; it's all a bunch of algorithms that result in targeted advertisements and marketing. Google doesn't even sell user data to 3rd parties (outside of when a user explicitly allows it by some 3rd party app/service agreement). Best yet, when it comes to account security and integrity, Google is head and shoulders above the rest. I feel much safer with my data being in Google than most other places.
 
teh_chem said:
How? Exactly? Seriously--a serious answer; what is it google did that fosters that attitude? What is distrusting about Google vs. any other online, free, public, cloud-based service? To be quite frank, I trust them far more than most other solutions. Google doesn't care who I am. All of their aggregate data is anonymized. There's no person at Google that reads my emails; it's all a bunch of algorithms that result in targeted advertisements and marketing. Google doesn't even sell user data to 3rd parties (outside of when a user explicitly allows it by some 3rd party app/service agreement). Best yet, when it comes to account security and integrity, Google is head and shoulders above the rest. I feel much safer with my data being in Google than most other places.
Click to expand...
It's TOS tend to always be worded so they gain the most legal power this includes to retaining the rights of any data uploaded to them. In stark contrast to competing services such as onedrive or dropbox, so people don't trust them as other companies don't do the same so people beg the question.
 
mrpc9886 said:
Funny this came up because I work in the Texas Medical Center as a Sr. Bus. Sys Analyst and this has been an interesting year for us here as we onboard cloud storage.


Because of HIPAA, data handling standards are different (somewhat) in the U.S.

Any third party vendor must sign a Business Associates Agreement with the healthcare institution/provider which means, in essence, the vendor will treat the data to the same standard(s) as the healthcare institution.

All data must be encrypted in transit and at rest (AES 256) and the encryption keys must be held by the data owner institution, not the storage provider (Google, AWS, Box, Dropbox, et al).

All transactions must be logged and those logs themselves must be proven to be untamperable.

If Google (or any other vendor) were to release protected data, either deliberately or accidentally, they would find themselves on the wrong side of the Office of Civil Rights, and that is a bad place to be.

:)
Click to expand...

This. Google has to follow all applicable laws for the storage of health related records. They just happen to be using Google as their storage provider or whatever. Just because your information isn't secure doesn't mean that your health information stored in a similar way is not secure. There are far larger consequences for leaky health records than for your leaky school reports on gdrive.
 
what is all the fuss about

I am absolutely certain that Google did not hoover any of that data while it was on their servers.

I mean...such a thing is not even conceivable...
 
teh_chem said:
How? Exactly? Seriously--a serious answer; what is it google did that fosters that attitude? What is distrusting about Google vs. any other online, free, public, cloud-based service? To be quite frank, I trust them far more than most other solutions. Google doesn't care who I am. All of their aggregate data is anonymized. There's no person at Google that reads my emails; it's all a bunch of algorithms that result in targeted advertisements and marketing. Google doesn't even sell user data to 3rd parties (outside of when a user explicitly allows it by some 3rd party app/service agreement). Best yet, when it comes to account security and integrity, Google is head and shoulders above the rest. I feel much safer with my data being in Google than most other places.
Click to expand...

How does your unsubstantiated comment align with the following? And this is probably the tip of the iceberg.
https://duckduckgo.com/?q=google+engineer+stalked+girls
 
acesea said:
How does your unsubstantiated comment align with the following? And this is probably the tip of the iceberg.
https://duckduckgo.com/?q=google+engineer+stalked+girls
Click to expand...

Kudos for trying. Really, nice try, but that is a story of someone abusing their position and illegally accessing user content. Explain to me what that has to do with goggle's policies. No company can prevent some crazy off their rocker person from abusing the access they are given. It has nothing to do with the company's policies. Plus, he was promptly fired. As a course of googles analytics and data, it's anonymized. I don't care about people who abuse their access.
 
acesea said:
Quoting your falsehood claims


Quoting your contradicting yourself


and that you


does not negate the OP "Privacy Concerns Over Patient Data Uploaded To Google Servers".
Click to expand...

Again, none of that is specific to google's policies. It's a person acting against company policy, improperly accessing info they are not authorized to, and getting fired because of it. It does not define a policy of improper access to user data. On the contrary, it shows that improper access to user data is AGAINST company policy the company is committed to enforcing that.

Are you trying to use a special case where someone got fired for improper and unauthorized access/use of account data to prove google has a policy to abuse user data and not protect it? it just proves the contrary. You haven't said anything of substance.
 
You must log in or register to reply here.
Back
Top