NHS illegally gave Google data from 1.6m patients

THE NHS illegally handed Google the data of more than a million patients, the UK’S data watchdog has found.

The Royal Free NHS Foundation Trust in London failed to comply with data protection rules when it gave 1.6 million patient records to Googleowned artificial intelligence company Deepmind for a trial, the Information Commissioner’s Office has ruled after a year-long investigation.

The trial, which began in 2015, used technology to track patients’ symptoms and send alerts to doctors through an app called Streams in the event of a drastic change in their health. It was designed to look for acute kidney injury, which affects up to 18 per cent of those admitted to A&E.

As part of the deal with the trust, the internet comapany gained access to sensitive patient information such as HIV status, mental health history and abortions. It did not tell patients Deepmind would have access to such information, but said it had “implied consent” because patients knew the Streams app offered “direct care”.

The ICO ruled the deal was illegal, but does not plan to fine the Royal Free.

“There’s no doubt the huge potential that creative use of data could have on patient care and clinical improvements, but the price of innovation does not need to be the erosion of fundamental privacy rights,” said Elizabeth Denham, the information commissioner. “Our investigation found a number of shortcomings in the way patient records were shared for this trial.”

A Royal Free spokesman said: “We would like to reassure patients that their information has been in our control at all times and has never been used for anything other than delivering patient care or ensuring their safety.”