Google: Patients’ data not misused

Federal inquiry open on research

Google’s top health and cloud executives said the company isn’t misusing health data from one of the biggest U.S. health-care providers, pushing back against news reports that have triggered criticism from lawmakers and prompted a federal inquiry.

Google employees only have access to patient information in order to build a new internal search tool for the Ascension hospital network, said David Feinberg, head of Google Health. No patient data is being used for Google’s artificial intelligence research, he added.

The company’s contract is governed by U.S. health privacy law that permits its access to patient records solely for the task of organizing Ascension’s health records systems and building a tool to make them easier to search, Feinberg said.

“That’s all we’re allowed to do, and that’s all we are doing,” he said.

Google’s deal with Ascension has been under scrutiny since The Wall

Street Journal reported Monday that the company was collecting identifiable data on millions of Ascension patients and using it to build new products. On Tuesday, the paper reported that the U.S. Department of Health and Human Services’

civil rights office was starting an inquiry into the situation.

The HHS’s Office of Civil Rights “would like to learn more information about this mass collection of individuals’ medical records with respect to the implications for patient privacy under HIPAA,” said Roger Severino, director of the office, in a statement Wednesday. HIPAA is the Health Insurance Portability and Accountability Act, the U.S. law that governs confidentiality and informationsharing in health care and insurance.

Thomas Kurian, chief executive officer of Google Cloud, declined to comment on the inquiry.

Ascension’s health data is being stored on Google Cloud servers but is sequestered so only Ascension employees can access it, according to Google.

“All data is logically siloed to Ascension and housed within a virtual private space encrypted with dedicated keys,” Kurian said. “Google does not sell, share or otherwise combine data from Ascension with any other data.”

Sen. Richard Blumenthal, D-Conn., said Google’s activity was a “blatant disregard for privacy” and “beyond shameful.” News articles and social media posts have questioned why Google needs to collect patient information and speculated that the search giant could eventually use the data for advertising. That isn’t true, Kurian and Feinberg said in a joint interview.

When Google does work with other companies on artificial intelligence research, it always strips out personally identifying information, Kurian said.

“We never actually have Google employees understand individual patients’ data when it goes into the model. We have other technologies that de-identify it,” he said.

Feinberg said his team is tapping Google’s expertise in search technology to build a tool that can scan through Ascension’s electronic health record systems and make it easy for doctors and nurses to find the exact data they need, when they need it. The project is still in its infancy, but it could become a standalone product that Google could sell to other health-care providers and entities, Feinberg said.

“If we can help solve the information overload and the pressures on doctors and nurses then there would be a huge benefit to a lot of people in those types of tools,” he said. “To me, that is actually really, really exciting.”