News for hackers. Stuff that matters.
Re:Government finally publishes NHS contracts with Palantir,... by catalogia on Friday June 05, 2020 @01:48PM (#23431499)
That might be good advice in general, but I don't think that works with medical data. If I get hurt and end up in a hospital, how would the surgeons decrypt my hard drive to find my medical history if I'm unconscious? Obviously I need to entrust this data to somebody.

Edit: Not being a doctor, it's difficult for me to anticipate what sort of information doctors would consider relevant. Certainly there are some easy cases to anticipate, like allergies to penicillin or similar. And I think for things like that, people do get medical tattoos. But personally I'd feel far more comfortable if my doctors have my complete medical history available to them when they need it.

Re:Government finally publishes NHS contracts with Palantir,... by pessimizer on Friday June 05, 2020 @02:05PM (#23431724)
I'm willing the accept the 5% extra chance of death entailed by some emergency doctor not knowing my medical history. If I have something crucial, like an allergy to medication, I guess I'd just get that tattooed somewhere obvious.

In the vast majority of emergency cases for the vast majority of patients, I don't think one's medical history is going to be a significant factor in getting them out of the woods far enough to give an "encryption key."

How about just allowing me to register a checklist of what I think doctors should be informed about me with some federal database? A system that is centered around me, and my concerns, rather than just using my safety as a post hoc justification?

Re:Government finally publishes NHS contracts with Palantir,... by disabled on Friday June 05, 2020 @05:02PM (#23433927)
> I'm willing the accept the 5% extra chance of death entailed by some emergency doctor not knowing my medical history.

That seems logical in theory, but in practice, that is not actually how this kind of thing works. I know firsthand: I ultimately survived a series of differing and often unusual medical crises in my 20s, that I really should not have ultimately survived, individually or collectively, statistically speaking. I never actually pictured myself once, after turning age 18, ever being age 30. I never once believed that I would ever be 30, in my adult life. Now, every year after 30 to me is a gift.

If you do not think that something like this can happen to you: 7-8% of the general population collectively has some sort of a rare disease. Rare diseases can look exactly like a small collection of different common health problems that people with chronic illnesses may legitimately regularly acquire. It requires a lot of intuition, knowledge, experience, and foresight to actually get something like this right. This requires medical expertise and being an excellent clinician is essential. This is not a problem that software engineers can solve on their own.

Also, medical records are almost always littered with a ton of errors, that may seem minor to you, but in reality, they really are not. Considering the third leading cause of death in the US is considered to be preventable medical errors [1], which is appalling, you better being going through your medical records in detail, correcting each and every error (along with sharing the records--by giving physical copies--for security reasons--to the other provider--if they do not have full access to complete health records), if you plan on staying alive long-term, whether you are healthy or not.

We have a tremendous way to go on medical records and medical data, and it is really not something that AI can practically solve, in general, due to so many errors, bad datasets, and profound hoarding of data.

[1] https://www.npr.org/sections/health-shots/2016/05/03/4766361...

Re:Government finally publishes NHS contracts with Palantir,... by thelean12 on Friday June 05, 2020 @02:58PM (#23432418)
Why do you think you're informed enough to know what doctors need to know about your medical history to best treat you?
Re:Government finally publishes NHS contracts with Palantir,... by ganstyles on Friday June 05, 2020 @03:08PM (#23432552)
It seems pretty common sense that the main things people want to convey in medical emergencies where they're unconscious or their identity is unknown are allergies and reactions, hence why we have medical allergy bracelets and similar things.

If it's life and death and I'm unconscious, it's unlikely they would be able to access my medical records regardless, given the state of healthcare data interoperability (I have a lot of experience in this area). If I am conscious, I can tell them where to get my records, whether they're in Random Hospital X's database, or my personal DB.

I tend to agree that in the average case there's no real downside to doctors not having my medical history.

Re:Government finally publishes NHS contracts with Palantir,... by thelean12 on Friday June 05, 2020 @03:55PM (#23433179)
You have some weird and contradictory views here.

You admit that medical bracelets are a good thing. But then you go off and say stuff like "it's unlikely they would be able to access my medical records regardless". What? It's not "regardless". We can fix that. That's the point of this thread branch.

Re:Government finally publishes NHS contracts with Palantir,... by ganstyles on Friday June 05, 2020 @04:48PM (#23433786)
I wish. You haven’t dealt with EHRs I take it. Try it sometime versus greenfield development and you’ll share my “weird” views as you put it.
Re:Government finally publishes NHS contracts with Palantir,... by specialist on Friday June 05, 2020 @06:07PM (#23434592)
During the mid-aughts, there was at least one serious proposal that every person would have their own private record store, which they carried around (PDFs on a thumb drive). Part of NHIN shootout. Every one had a pretty good laugh.

Repeating myself here: one way to protect patient privacy is to issue everyone globally unique identifiers. Then use translucent database techniques to hide the important.

Currently, linking records across our heterogeneous systems, with all the data quality challenges, prevents data from being encrypted (in transit or at rest).

Re:Government finally publishes NHS contracts with Palantir,... by vertex-four on Friday June 05, 2020 @02:19PM (#23431917)
Generally speaking, the surgeon isn't going to have your medical history until well into your treatment... probably by the time you or someone who knows you are able to tell them anything they want to know. There's not a properly linked database of healthcare records for that purpose - the hospital doesn't even know what GP you're with, never mind have instant access to your records, and it mostly works out.
Re:Government finally publishes NHS contracts with Palantir,... by ganstyles on Friday June 05, 2020 @03:10PM (#23432574)
To put a finer point on it: it may be easier for doctors to find your hard drive and decrypt it in some cases that than to go through and extract them from another medical provider's EHR system. I say this only partly tongue-in-cheek.
Re:Government finally publishes NHS contracts with Palantir,... by kjakm on Friday June 05, 2020 @03:27PM (#23432778)
The article is about the NHS though so hospitals and doctors all access the same system/are all the same “medical provider”.
Re:Government finally publishes NHS contracts with Palantir,... by vertex-four on Friday June 05, 2020 @03:31PM (#23432824)
Not really. Hospitals don't talk to each other properly, GPs don't talk to each other. I've been asked to bring blood test results in paper from my GP to a specialist clinic because they couldn't work out how to get them emailed over - and it is essentially various forms of email that much exchange does happen over.

An "integrated system" has been something the NHS has been sinking money into for decades and getting nowhere with.

Re:Government finally publishes NHS contracts with Palantir,... by walshemj on Friday June 05, 2020 @05:07PM (#23433977)
Amen its normal if you cross NHS trust's for more complex cases.

I cant go to my local hospital for some of my tests (post transplant related) which is 30 mns away by bus instead I have to go to another hospital which by public transport will take an entire day.

Re:Government finally publishes NHS contracts with Palantir,... by DanBC on Friday June 05, 2020 @03:44PM (#23433016)
No, that's not correct.

A while ago we had (these numbers keep changing as the organisations merge).

     207 clinical commissioning groups (CCGs)
     135 acute non-specialist trusts (including 84 foundation trusts),
      17 acute specialist trusts (including 16 foundation trusts),
      54 mental health trusts (including 42 foundation trusts),
      35 community providers (11 NHS trusts, 6 foundation trusts, 17 social enterprises and 1 limited company),
      10 ambulance trusts (including 5 foundation trusts), and
   7,454 GP practices. 
The CCGs take money from NHS England and they commission services from local provider organisations. Those organisations don't have to be NHS Trusts (I think it's still law that CCGs are forbidden from having a preference for NHS Trusts).

NHS Trusts and NHS Foundation Trusts are independent organisations. They have their own board of directors and non-executive directors. Foundation Trusts do to, and they have additional responsibilities to their members.

In Gloucestershire we have one CCG, one acute hospitals trust, one trust that covers MH, LD, and community care, we have an ambo trust that covers the south west, and we have a local authority that commissions drug and alcohol services from non-profit orgs, and then a bunch of GP surgeries on top.

This means they all make their own decision on software packages to buy, and a lot of that info is locked up in their system. While there's some commonality in software packages used (eg, lots of use of SystmOne) it's not always easy to get the information from one organisation to another.

If I am diabetic and see me GP's diabetes clinic, and then I am admitted to mental health hospital, it can be hard to get my diabetes clinic notes into my MH hospital notes.

I posted a twitter thread just today about an NHS organisation who employ someone to print out one database, and then to enter that information into another database. Have a read of the twitter thread, because there are a bunch of people who agree. https://news.ycombinator.com/item?id=23426262

Inter-operability is going to be big business in the English NHS for anyone who can crack it.