Project Nightingale
Project Nightingale is a data storage and processing project by Google Cloud and Ascension, a Catholic health care system comprising a chain of 2,600 hospitals, doctors' offices and other related facilities, in 21 states, with tens of millions of patient records available for processing health care data. Ascension is one of the largest health-care systems in the United States with comprehensive and specific health care information of millions who are part of its system. The project is Google's attempt to gain a foothold into the healthcare industry on a large scale.[1] Amazon, Microsoft and Apple Inc. are also actively advancing into health care, but none of their business arrangements are equal in scope to Project Nightingale.[1][2][3]
History
[edit]In early 2019, Ascension began talks with Google about developing health aggregation software to store and search medical records. The two companies signed a Health Insurance Portability and Accountability Act (HIPAA) business associate agreement, which would allow Ascension to transfer patient data to Google Cloud, and would bar Google from using this data for purposes other than providing services to Ascension.[4] Google first mentioned its project with Ascension in a July 2019 earnings call, which said the partnership was meant to "improve the healthcare experience and outcomes."[5]
The Wall Street Journal first reported on "Project Nightingale" on November 11, 2019, writing that doctors and patients had not been notified of the project and that 150 Google employees had access to patient data.[1][2][6] Google Health chief David Feinberg responded to the report in a blog post, saying all employees with access to protected health information went through medical ethics training and were approved by Ascension.[7]
The project raised privacy fears because of Google's involvement in other privacy controversies, like DeepMind's medical data-sharing controversy and a lawsuit against Google and the University of Chicago Medical Center for allegedly processing identifying medical records.[1][4] Google Cloud executive Tariq Shaukat wrote that patient data gathered from the project "cannot and will not be combined with any Google consumer data."[8]
Types of data
[edit]The data sharing includes patient names and their dates of birth, along with doctor diagnoses, lab results, and hospitalization records, amounting to access to complete electronic health records. Also included in the data sharing are addresses of the patient, family members, allergies, immunizations, radiology scans, medications, and medical conditions. After the patient checks in to the doctor's office, or hospital, or senior center - the doctor and nurse examination results are entered into a computer and uploaded to Google's cloud servers. At this point, the system is then used to suggest treatment plans, recommend replacement or removal of a doctor from the patient's health-care team, and administer policies on narcotics. Ascension, the company sharing data with Google, may also vary their billing according to treatment or procedures.[1]
Investigations
[edit]Soon after The Wall Street Journal reported on Project Nightingale, The Guardian published an account from an anonymous whistleblower who worked on Project Nightingale. This person who raised concerns that patients could not opt in or out of having their records stored on Google's servers, and that the project may not be HIPAA compliant.[9][10]
The United States Department of Health and Human Services (HHS) launched an inquiry into Google's partnership with Ascension. The investigation will be run by HHS' Office of Civil Rights. Director Roger Severino said, his office "would like to learn more information about this mass collection of individuals' medical records with respect to the implications for patient privacy under [the Health Insurance Portability and Accountability Act of 1996 or HIPAA]."[11]
See also
[edit]References
[edit]- ^ a b c d e Copeland, Rob. "Google's 'Project Nightingale' Gathers Personal Health Data on Millions of Americans". WSJ.
- ^ a b "Google Gathering Health Care Data on Millions of Americans with Secret 'Project Nightingale'". November 11, 2019.
- ^ Singer, Natasha; Wakabayashi, Daisuke (November 11, 2019). "Google to Store and Analyze Millions of Health Records". The New York Times – via NYTimes.com.
- ^ a b Farr, Christina; Elias, Jennifer (November 12, 2019). "Google's hospital data-sharing deal raises privacy fears — here's what's really going on". CNBC. Retrieved December 9, 2019.
- ^ Opiah, Abigail (November 12, 2019). "Google Cloud clears the air regarding patient data controversy following Ascension partnership". Data Economy. Retrieved December 9, 2019.
- ^ Griggs, Mary Beth (November 11, 2019). "Google may be secretly gathering millions of personal health records with alleged 'Project Nightingale'". The Verge.
- ^ Muchmore, Shannon (November 21, 2019). "Under fire, Google defends Ascension data sharing project". Healthcare Dive. Retrieved December 9, 2019.
- ^ Lerman, Rachel (November 12, 2019). "Google's health care ambitions now involve patient data". Associated Press. Retrieved December 9, 2019.
- ^ Pilkington, Ed (November 12, 2019). "Google's secret cache of medical data includes names and full details of millions – whistleblower". The Guardian. Retrieved December 9, 2019.
- ^ Anonymous (November 14, 2019). "I'm the Google whistleblower. The medical data of millions of Americans is at risk". The Guardian. Retrieved December 9, 2019.
- ^ Garcia, Ahiza (November 13, 2019). "Google's 'Project Nightingale' center of federal inquiry". CNN. Turner Broadcasting System. Retrieved November 14, 2019.
External links
[edit]- Our Partnership with Ascension, Google Cloud blog post and FAQ
