Google DeepMind NHS trial broke UK privacy law

The UK's Information Commission (ICO) has ruled that the Royal Free NHS Foundation Trust failed to comply with the Data Protection Act when it provided patient details to Google DeepMind.

The trust provided personal data of around 1.6 million patients as part of a trial to test an alert, diagnosis and detection system for acute kidney injury, but has been found to have mishandled the data, including not adequately informed patients that their data would be used as part of the test.

Consequently, the Trust has been asked to: establish a proper legal basis under the Data Protection Act for the Google DeepMind project and for any future trials; set out how it will comply with its duty of confidence to patients in any future trial involving personal data; complete a privacy impact assessment, including specific steps to ensure transparency; and commission an audit of the trial, the results of which will be shared with the Information Commissioner, and which the Commissioner will have the right to publish as she sees appropriate.

Elizabeth Denham, Information Commissioner, said: “There’s no doubt the huge potential that creative use of data could have on patient care and clinical improvements, but the price of innovation does not need to be the erosion of fundamental privacy rights.

“Our investigation found a number of shortcomings in the way patient records were shared for this trial. Patients would not have reasonably expected their information to have been used in this way, and the Trust could and should have been far more transparent with patients as to what was happening. We’ve asked the Trust to commit to making changes that will address those shortcomings, and their co-operation is welcome. The Data Protection Act is not a barrier to innovation, but it does need to be considered wherever people’s data is being used.”

The Royal Free has produced a statement, in which it says that, having fully co=operated with the ICO’s investigation, it ‘looks forward to working with the ICO to ensure that other hospitals can benefit from the lessons we have learnt’.

Event Diary

This story was first published in digitalhealth.net

Supplier Profiles

CDC success at Victoria Infirmary, Northwich creates ideal model for future patient pathway reforms

Northwich’s Victoria Infirmary (VIN) Community Diagnostic Centre (CDC) has enabled more patients

Gain valuable insight with Adveco for gas to electric decarbonisation projects

Adveco, the commercial hot water specialist, announces the launch of live metering of domestic ho