Individual data platforms for all health providers under controversial NHS plans
(2023/05/31)
- Reference: 1685521812
- News link: https://www.theregister.co.uk/2023/05/31/nhs_data_platforms/
- Source link:
NHS England wants to provide every hospital trust with its own data platform, in a procurement US spy-tech company Palantir is hotly tipped to win.
Hospitals and integrated care systems (ICSs), which plan care on a regional basis, will be able to create their own data platforms on the system, and share those systems with any other provider on Britain's planned national Federated Data Platform (FDP).
The project is already the subject of a legal challenge, owing to questions about NHS England's failure to produce a data protection impact assessment on the FDP. Health data to be shared on the system is a special category under the European Convention of Human Rights, [1]lawyers representing campaign groups pointed out .
[2]
The platform is expected to be a cloud-based SaaS solution which will enable the use and sharing of data in a safe and secure environment, according to NHS England. The £480 million ($597 million) competition for the deal kicked off in January and the government is set to pick a winner in September. Palantir, the controversial US data analytics company, is thought to see the deal as "must-win" and currently provides COVID Data Store and Faster Data Flows systems – which will see some of their functionality moved to the FDP when the procurement is complete.
[3]
[4]
In an NHS England board paper [5]published earlier this month, the body explained: "Every hospital trust and ICS will have their own platform that can connect and collaborate with other data platforms, making it easier for health and care organisations to work together to achieve better improvements in care and outcomes for patients than they could each achieve individually."
NHS England claimed local trials of the data platform had helped trusts to remove up to 16 percent of their waiting list through "error identification." A discharge pilot helped one trust cut patients staying 21 days or more to 12 percent over 12 months; the national average is 20 percent.
[6]
According to the procurement prospectus, NHS England will not mandate use of the centrally procured FDP, which will require trusts and ICSs to build their own use cases.
"It will be of benefit for trusts and ICSs to use the platform to support Use Cases they wish to adopt. Trusts and ICSs will have the autonomy to use the platform to address their own key challenges and priorities," it wrote.
[7]Keir Starmer's techno-fix for the NHS: Déjà vu disaster or brave new blunder?
[8]NHS England spends £8M to extend Microsoft deals by a month
[9]NHS England considered using Palantir tech to manage strike disruption
[10]UK consortium bid for NHS data platform falls at first hurdle
Tim Ferris, NHS England's national director of transformation, told a board meeting earlier this month: "The goal here is that every ICS will have its own platform for local innovations to build tools like Chelsea and Westminster built to reduce their waiting list by maximising the use of their the data from all their different systems.
"That federated data platform can then be shared to any organisation within the country because of the very federated nature of the data platform."
In its prospectus for the procurement, NHS England said only "de-identified data" would flow to central platforms for "specific, necessary and pre-agreed planning purposes."
[11]
Nonetheless, those concerned about the NHS health provider's ability to maintain confidentiality given the complexity of the online system will not be reassured by news that trusts have shared implicit medical details of patients with Facebook without consent – despite promising never to do so.
The Observer has [12]reported that the covert tracking tool Meta Pixel – present on 20 NHS trusts' websites – has shared details of pages viewed, buttons clicked and keywords searched with the social media giant. It links the details to the user's IP address and details of their Facebook account.
An NHS England spokesperson said: "NHS trusts are responsible for their own websites, and they must follow data protection laws in relation to the use of cookies on their websites. The NHS is looking into this issue and will take further action if necessary." ®
Get our [13]Tech Resources
[1] https://www.theregister.com/2023/03/17/nhs_threatened_with_legal_action/
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZHcavPLlW4VLDDIDCw1awgAAAJI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZHcavPLlW4VLDDIDCw1awgAAAJI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZHcavPLlW4VLDDIDCw1awgAAAJI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://www.england.nhs.uk/digitaltechnology/digitising-connecting-and-transforming-health-and-care/what-this-means-for-integrated-care-systems/
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZHcavPLlW4VLDDIDCw1awgAAAJI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://www.theregister.com/2023/05/23/starmer_nhs_it/
[8] https://www.theregister.com/2023/05/18/nhs_england_extends_microsoft_deals/
[9] https://www.theregister.com/2023/04/17/nhs_england_palantir_tech_optout/
[10] https://www.theregister.com/2023/04/17/uk_consortium_bid_for_nhs/
[11] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZHcavPLlW4VLDDIDCw1awgAAAJI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[12] https://www.theguardian.com/society/2023/may/27/nhs-data-breach-trusts-shared-patient-details-with-facebook-meta-without-consent
[13] https://whitepapers.theregister.com/
Hospitals and integrated care systems (ICSs), which plan care on a regional basis, will be able to create their own data platforms on the system, and share those systems with any other provider on Britain's planned national Federated Data Platform (FDP).
The project is already the subject of a legal challenge, owing to questions about NHS England's failure to produce a data protection impact assessment on the FDP. Health data to be shared on the system is a special category under the European Convention of Human Rights, [1]lawyers representing campaign groups pointed out .
[2]
The platform is expected to be a cloud-based SaaS solution which will enable the use and sharing of data in a safe and secure environment, according to NHS England. The £480 million ($597 million) competition for the deal kicked off in January and the government is set to pick a winner in September. Palantir, the controversial US data analytics company, is thought to see the deal as "must-win" and currently provides COVID Data Store and Faster Data Flows systems – which will see some of their functionality moved to the FDP when the procurement is complete.
[3]
[4]
In an NHS England board paper [5]published earlier this month, the body explained: "Every hospital trust and ICS will have their own platform that can connect and collaborate with other data platforms, making it easier for health and care organisations to work together to achieve better improvements in care and outcomes for patients than they could each achieve individually."
NHS England claimed local trials of the data platform had helped trusts to remove up to 16 percent of their waiting list through "error identification." A discharge pilot helped one trust cut patients staying 21 days or more to 12 percent over 12 months; the national average is 20 percent.
[6]
According to the procurement prospectus, NHS England will not mandate use of the centrally procured FDP, which will require trusts and ICSs to build their own use cases.
"It will be of benefit for trusts and ICSs to use the platform to support Use Cases they wish to adopt. Trusts and ICSs will have the autonomy to use the platform to address their own key challenges and priorities," it wrote.
[7]Keir Starmer's techno-fix for the NHS: Déjà vu disaster or brave new blunder?
[8]NHS England spends £8M to extend Microsoft deals by a month
[9]NHS England considered using Palantir tech to manage strike disruption
[10]UK consortium bid for NHS data platform falls at first hurdle
Tim Ferris, NHS England's national director of transformation, told a board meeting earlier this month: "The goal here is that every ICS will have its own platform for local innovations to build tools like Chelsea and Westminster built to reduce their waiting list by maximising the use of their the data from all their different systems.
"That federated data platform can then be shared to any organisation within the country because of the very federated nature of the data platform."
In its prospectus for the procurement, NHS England said only "de-identified data" would flow to central platforms for "specific, necessary and pre-agreed planning purposes."
[11]
Nonetheless, those concerned about the NHS health provider's ability to maintain confidentiality given the complexity of the online system will not be reassured by news that trusts have shared implicit medical details of patients with Facebook without consent – despite promising never to do so.
The Observer has [12]reported that the covert tracking tool Meta Pixel – present on 20 NHS trusts' websites – has shared details of pages viewed, buttons clicked and keywords searched with the social media giant. It links the details to the user's IP address and details of their Facebook account.
An NHS England spokesperson said: "NHS trusts are responsible for their own websites, and they must follow data protection laws in relation to the use of cookies on their websites. The NHS is looking into this issue and will take further action if necessary." ®
Get our [13]Tech Resources
[1] https://www.theregister.com/2023/03/17/nhs_threatened_with_legal_action/
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZHcavPLlW4VLDDIDCw1awgAAAJI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZHcavPLlW4VLDDIDCw1awgAAAJI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZHcavPLlW4VLDDIDCw1awgAAAJI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://www.england.nhs.uk/digitaltechnology/digitising-connecting-and-transforming-health-and-care/what-this-means-for-integrated-care-systems/
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZHcavPLlW4VLDDIDCw1awgAAAJI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://www.theregister.com/2023/05/23/starmer_nhs_it/
[8] https://www.theregister.com/2023/05/18/nhs_england_extends_microsoft_deals/
[9] https://www.theregister.com/2023/04/17/nhs_england_palantir_tech_optout/
[10] https://www.theregister.com/2023/04/17/uk_consortium_bid_for_nhs/
[11] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offprem/paasiaas&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZHcavPLlW4VLDDIDCw1awgAAAJI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[12] https://www.theguardian.com/society/2023/may/27/nhs-data-breach-trusts-shared-patient-details-with-facebook-meta-without-consent
[13] https://whitepapers.theregister.com/
US provides the real-life dystopia warning
Graham Cobb
Some people have felt that those of us insisting that health data be kept very private, not shared without exceptional justification and not accessible to third parties such as software platform providers are over-reacting. That our concerns are unrealistic.
But the last few months have, unfortunately, proved our fears to be justified and that we have even underestimated the dangers.
It is less than a year since the US Supreme Court overturned Roe vs. Wade. And state governers and lawmakers have been queuing up to pass dystopian laws aimed at controlling women and turning them back into slaves. State after state has criminalised abortion, even in cases no one imagined would ever be restricted (such as saving the life of the mother in some states). And not only that, they have gone further: requiring that healthcare data be used to detect and prosecute those women - with a legal requirement on data providers to report the lawbreaking to the authorities. Even for actions carried out outside their own state.
How long before a resident of Utah who has an emergency life-saving abortion in an NHS hospital while in London is reported to the authorities in her home state by Palantir, who will have no choice but to follow the law in the US?
I'm Perfectly OK With This...
...as long as it's accompanied by changes to the criminal law providing for mandatory long-term jail sentences and personal financial liability for the managers and directors of the health trusts and "platform" companies should anyone's data be stolen, sold, borrowed or "accidentally" misused.