Category Archives: commercial

What our grandparents called it.

I regularly talk with friends about food. Often over food. I like food. I like cooking. And as a result tend to use as unprocessed-as-possible ingredients, and start most things from scratch.

I have friends who can’t cook, or won’t cook, and I have friends who like the paleo direction, as I do. There is no right answer. But I do think that whatever we use to prepare our meals, we need to be aware of how it is packaged and marketed, in making our choices.

Some labels have more meaning than others. Fairtrade. Farm fresh. Or Red Tractor. Labels which look and sound good aren’t always exactly what they say on the tin, or what we think they mean. Or they mean different things in different countries. Like ‘Bio’ often conflated with organic.

Why do we need these packaging terms at all? Are they all genuine, of substance and meaningful for consumers, or are they marketing ploys?

I think often, on closer inspection, we may find these marketing labels are used to segment the market and make those who can, pay more for ‘better quality’ and ‘choice’ . It does not necessarily mean there is much  substantive difference behind the label.

Consumers should in theory drive the market by buying what we want. But do we know what we want or are we led by marketing?

Are we nudged in the direction of the product the vendors want to sell us though clever marketing?

The total 2013 UK advertising spend reached a new high of nearly £14bn, topping pre-financial crash levels for the first time in six years. Companies must think that is money, worth spending.

How free is our choice?

I would like to think we collectively focus on the core value of what we want as a consumer not just for ourselves but for society. Decent, affordable, production aware, nutrition for all.

However reality is that those who can afford choice, worry whether it is organic or bio, chemical free or free range. Those who cannot afford it, are left with the ‘value’ ranges. It’s never marketed as ‘the cheapest option.’

When I was a teen in school, “Home economics,” classes were compulsory but the content changed to become focused on things we were ‘all’ ‘capable of’ – homemade pizza for example.  Now we ask ourselves why are so many of our generation and their kids obese? We seek solutions for weight management. Could we not go back to basics, and fix the root cause – teach all of our kids to cook, and I mean, simple, real, food? Teach us all to understand food labels. Accompanied by a living wage for all, we could both eat more simply and I believe it would make savings in health benefits.

We need our children educated not to fall for marketing without understanding it.

Uninformed, we cannot make informed choice.

Our food and our health and inexorably linked.

When it comes to healthcare, we keep hearing labels, and ‘choice’, and it’s wrapped in plenty of packaging. Patient empowerment. Personalised medicine. Patient centred care. I do wonder if we don’t over-complicate simple things.

Can care be anything else *but* patient centred?

Let me ask the question – could we consider just going back to plain language. Without having to put it through ‘Plain English’ first? Patients need care. From other people. Professionals in whom we trust. Drop the patient-centric, patient-led language.

Let’s just have, as our grandparents used to call it, [1] ‘care’.

Don’t misunderstand me. I am passionate about patient and citizen participation. It’s why I have spent all my free time of the last ten months understanding care.data and the recent NHS market changes. But it’s the way it is packaged to us, I would like more people to explore and to question whether we really need all the outside layers, or whether it detracts from the most important questions.

Is all the talk around patient-centric really a move towards passing responsibility for payment?

Most people are responsible in their own healthcare as far as they can be. When we can help ourselves, we mainly do. Most people actually are not that good at asking for help, even when they need it. We like to be self-reliant. We know we could eat better, drink less, exercise more.  We know we need to manage our treatments and lifestyle. We do, and honestly, if we don’t always do it, it’s not going to help us by repackaging the responsibility, which we know we already have. The majority of people are as responsible as they feel able to be.

Many are pushed to their limits in society of how much more responsibility they can take on. They struggle to feed and care for their families, and don’t ask for help until they really have no other option. We may not want or be able to take on extra responsibility. When we are vulnerable, we trust others to help us.

Choice in those circumstances, is a luxury that’s not high on the priority list.  Choice becomes a catchphrase, not a reality. It’s not just that for everyone, but that’s the point. Choice becomes open to some, and closed to others. Some can choose organic, others are left with the ‘value range.’

It’s not perhaps PC to stand up and ask this of everyone with the best of ‘patient-centred’ intentions.  I love and commend the intentions here.[2]

I love the spirit that patient leaders intend to ‘enable’ patient empowerment, but what does that really mean?

To me, it infers the belief we patients have no power and therefore no responsibility, right now. It infers we need some seismic shift in current care. I disagree. Care in which I have been involved has always been about a co-operaton between the professional and patient needs, and respectful. It’s what our professionals *do*. It’s  already a partnership of trust and we trust professional opinion to take much of the responsibility for our care, in our best interest.

Yes we can get labelled as a bed or a surname. Yes, there is always room for improvement. Some have had awful individual experiences. It is perhaps a luxury of relativley good health that my family has experinced simple and good care, and perhaps it is for those who have more complex conditions that the system must focus improvement.

But are we not in danger of getting so focused away from care and on the patient-power as marketing jargon that we forget that the patients are simply, people, in need of professionals, who care?

We lose focus on asking how is the delivery of that care being supported by those responsible for it, from the top down?

Are we so focused on the solution, and this drive for change, that we are not asking, what is the root cause behind this need?

When we hear farm fresh and bio, we tend to conflate them with healthy, and better for us. If a package says tomatoes, vs bio tomatoes, which do you go for? But just the word ‘bio’ may be a meaningless marketing term. It’s a promotional tool, to make us want it. It is not the same as regulated words which mean not chemically treated, for example.

And so it is with health.

In all this ‘talk’ of patient power, is the real deal deliberately obfuscated?

Being told we should have choice,  is to make us want something, demand something, create a demand in patients that in fact, we may not want at all, but start to believe we do.

Is there really a patient desire across so many of us for choosing our own hospitals or do we not just want to go somewhere near, which our families can visit to get good care? Reducing monetary inefficiences is becoming conflated [3] with overall improvement – seeing care only as a supply chain product.

Is there really a need for the drive for ever more comparison data between consultants and between GPs which we are told supports ‘choice’?

Is a market being created, for which there is little public desire?

In a market driven by payment-by-results, fewer patients can mean fewer pounds. GP Boundaries are due to be abolished in October 2014.  More GPs are going to be forced to close if nothing changes in funding. Or they amalgamate or are taken over by corporate private management, like this practice. [3b] ‘Choice’ may exacerbate these changes. And it was foreseeable, as Sir Kinglsey Manning predicted in 2006 in the Inevitable Decline of the GP Partnership. 

Are we being manipulated into wanting what others want us to want? Is the patient-centric conversation keeping us distracted from the overriding factor in current policy – the drive from top-down to cut costs? The choice made by Government to create a gap between need and what is being provided from the public purse strings?

Between the 2012 Nuffield Report [4] and today’s £30bn, there must be reliable numbers somewhere. As a lay patient, it’s hard to know what is reliable and how to get an informed understanding.

It will be even harder to make a patient choice, if there’s no money available to offer any services to choose from.

If we can’t afford to be self-payers, privately insured, what then? This is the real impact patient choice will have. Some will have choice, and many will have none. Some will have care, and many will have none.

We will have facilities closed, which cannot offer care. And facilities open, where patients cannot afford to go.

Twenty years on, Yes Minister still makes me laugh. It’s possibly even less PC now, than it was then. But are some of the storylines still relevant? Perhaps more than ever.

“Get rid of 300 of your people, and get some doctors, and nurses, and get some patients.” | Yes, Minister – the Compassionate Society

We hear now increasingly of the secondary care closures, and the looming primary care crisis in GP recruitment and we ask, what shall we do?

We need to stand up and demand fixes for the root causes and not pussy foot around with words and the PC solution to an artificial need, which avoids the basic issues. Shortage of cash and staffing.

Patients must better understand the changes in this market creation for it to work – but not all change is equally good

University fees still make studying medicine expensive, even if part supported. GPs are not always, contrary to some media-hype, the best paid in medicine. It is interesting to look at a study in the unit costs of health and social care [5]. When students draw towards the end of their expensive studies it is unsurprising many look for the best paid jobs and specialisms may appeal.  I recently spoke with one mid-year student about her future and she was looking at brain surgery or psychology. The reason? She thought GPs in the future of the NHS was ‘too unpredictable’.

The seniority pay system has been scrapped for new entrants and reduced for those already in, so they can’t look forward to natural salary progression with really good benefits later on either.

Top and tail, the profession has been hacked off, in both senses.

Against a backdrop of regular undermining like the ‘maggotgate’ scandalous misrepresentation in the media, top-down imposed changes have been a heavy burden on GPs who continue to put patients first and care for us.

They’re coping with  a technical support system [6] under constant tinkering with its admin processes which may not offer any local benefit, changes to core work [7], potential outsourcing [8] and job losses, the destabilisation of support, and both increased marketisation [9] and general lack or stalling of funding since 2010. [10]

And that’s only from an outsider patient’s point-of-view. Patients, ask your GPs.

It feels to me very much as if ministers want to pass the buck (pun intended) back to patients – if we’re responsible for the management of our care today, we’ll likely be responsible for the cost of it tomorrow.

The concept of promoting patient choice, of patient-led decision making though fundamentally not flawed, deflects from the responsibility of others in care provision. It suggests that the patient is to be solely responsible. There are of course aspects of care we can and should manage ourselves. But I don’t feel this is the primary driver of the initiative, in annual reports and roadmaps. It is all about budget, lack of budget and reduced budget.

“Choice” has become the marketing watchword to package the market force of competition to patients.

It has driven wedges between services and broken others apart, causing the lack of integration which is the very thing they now purport to be key to success in health and social care.

A decentralised, and broken up market is easier to manage by private providers, choice for patients exists only by having multiple providers, which only works if you first break up the NHS single delivery model.

We are told that we are to be risk-stratified this year in GP practices, taking our patient records and analysing them at the practice, CCG or Health and Social Care Centre approved site. By segmenting groups who will be most at ‘risk’ and therefore need higher levels of care, they will also assess those who cost the most. These segments focus for example on COPD, Diabetes, Stroke, and the over 75s repeat hospital admissions.

I worry that there are many vulnerable, such as mental health patients, whose segmentation will stigmatise and put them at risk in ever smaller funding pools.

The idea of personal budgets is a slippery first step, to segmenting out treatments and patients who may or may not be covered by NHS care.

An individual budget, a personal shopping basket, can more easily be analysed by a health insurer for example, or simply reduced by the State to be able to buy less at the State till, without topping it up with our own private contribution.

Over 40% of social care users in England [12] are managed in this way. Social care where the issues of AQF have come well documented, as private providers seek ever to reduce costs.

We are rapidly losing control of that social care market. US investors are snapping up the profitable parts of the sector, with the long term prospect of the wealthy self-pay areas provided for by US investors [13], and the poorer local authority-paid homes? well, we’ll wait and see.

Many elderly are left with ‘the cheapest option’. They may or may not think that it is good value.

If patients are empowered as the new consumers in the healthcare market, we need to speak up for what we want

Let’s cut out all the PC talk and talk to government about getting university (medicine) fees reduced or cut. Stop any new reforms and let the profesionals get on with their job of caring. Let’s cut down on the promotional packaging, and management consultant-speak in healthcare. Drop the patient-led, patient-centric. There are pages and pages in brochures on patient empowerment but patients, we need a bit more revolt, questioning why these changes are needed and what is the root of change required. As so wonderfully put recently, we need ‘revolting patients.’ (p.19) [11] We need patients putting first, but let’s first focus on the care.

Care. That’s what matters. It’s that simple. Not patient empowerment, centric or led packaging and labels. Not parcels of personalised care budgets, packaged as ‘gifts’ and choice to us.

We want as patients for our care and the support of the system of our care to be at the centre of focus.

We need the state to manage that there is enough money in the pot to provide a duty of care for all, fairly, and provide  enough trained professional staff to do so.

There is a darn big hole predicted of £30bn between planned spend and need. It’s not going to all come from savings from thin air, nor to pay for itself, so patients, who do you think the Government is expecting to pay for it?

Changes have already been made in what is ‘free on the NHS’ i.e. possible to prescribe, such as hearing aids, other areas may be under discussion, for example in kidney dialysis.

Patients, we need not be ’empowered’ to wake up to the marketing ploys. Speak up, or we are complicit in our own downfall.

Is this the best path for care in this country, or is it a policy underpinned by an  ideology which has removed the Secretary of State’s Duty of Care [14], a duty to provide, and replaced it with a duty to promote?

“The Secretary of State must continue the promotion in England of a comprehensive health service.”

Let’s challenge the drivers of marketing speak and the market based health provision. A market inevitably leads to those who can afford it, having the choice. And those who can’t, are left with the ‘value’ range. They may be left with nothing at all when they need it, if the duty of care, has been replaced with nothing but promotion.

NHS patient empowerment is like buying organic. It’s a false choice. In a system designed to have fair access for all, we should not look to segment the patients, seen as consumers, into those who can pay the most for choice, and those who cannot afford to.  Nor should we only see the benefits of personalised budgets.

Let’s ask to talk about the basics. Let’s focus on the care and providing enough funds to do it right. At patient events we need to ask what are the planned costs and where is the budget for them? What is about to be merged with Local Authority budgets for social care? What is ring-fenced and what is not? Where will decision making lie in a merged future?

Where is the Social care and Health Strategy and the benefits plan – have you seen one? I haven’t.

Let patients be patients, and professionals get trained and supported to do their job.

Government, of any colour, must ensure responsibility for the duty of care is not passed along the supply chain. These issues are cross-party and cross parliamentary terms.

The NHS belongs to us all, and should be there, for us all, and not create a three-tiered consumer market in health. Those with choice, those with state care from the ‘value’ range’, and those with neither.

Yes, Minister? [15]

********

[1] Ken Loach made Interviews on the birth of the NHS http://www.thespiritof45.com/Interviews-Archives/Health

[2] Prioritising person-centred care – the evidence http://www.nationalvoices.org.uk/evidence

[3] Wall Street Journal – blog – How Eliminating Inefficiences Can Elevate Hospital Pharmacy As A Strategic Asset http://online.wsj.com/article/PR-CO-20140506-908700.html

[3b]  Privatisation behind an Invisibility Cloak – blog by Dr.David Wrigley http://drdavidwrigley.blogspot.co.uk/2014/06/privatisation-behind-invisibility-cloak.html?m=1

[4] the 2012 Nuffield Report- The funding pressures facing the NHS from 2010/11 to 2021/22

[5] Unit Study in Health and Social Care http://www.pssru.ac.uk/project-pages/unit-costs/2013/index.php

[6] Fears for QOF funding as NHS draws up contingency plans to pay GPs from next month http://www.pulsetoday.co.uk/your-practice/practice-topics/qof/fears-for-qof-funding-as-nhs-draws-up-contingency-plans-to-pay-gps-from-next-month/20006085.article
[7] Pulse: Dramatic’ changes to GP contract by next April as Hunt spells out detail of general practice reform, 12 Sept 2013 by http://www.pulsetoday.co.uk/home/gp-contract-2014/15/dramatic-changes-to-gp-contract-by-next-april-as-hunt-spells-out-detail-of-general-practice-reform/20004293.article
[8] Primary care contracting faces cuts and outsourcing, 5 Nov. 2013 by http://www.hsj.co.uk/home/commissioning/primary-care-contracting-faces-cuts-and-possible-outsourcing/5065021.article
[9] NHS shakeup: Private companies see potential to expand their role – Denis Campbell, July 2010 – Firms aim to to gain unprecedented foothold in healthcare system once GPs start spending £80bn of NHS funds – http://www.theguardian.com/society/2010/jul/12/nhs-private-companies-gps-funds
[10] GP Online – Cuts to enhanced services across England will wipe out slim uplifts to GP contract funding agreed for 2011/12, a GP investigation reveals. By Stephen Robinson on the 19 October 2011 www.gponline.com/exclusive-practices-face-28000-service-cuts/article/1099085
[11] Reflections – Have we empowered patients Essay: p.19 Jeremy Taylor, Chief Executive, National Voices
[12] A report by the All Party Parliamentary Groups on Global Health; HIV/AIDs; Population, Development and Reproductive Health; Global Tuberculosis; and Patient and Public Involvement in Health and Social Care – May 2014http://www.patientsorganizations.org/attach.pl/1786/2114/APPG%20Global%20Patient%20Empowerment%20Report.pdf
[13]  Social Care – US investors snap up UK care homes, FT, June 10, 2014 – by Gill Plimmer – http://www.ft.com/cms/s/2/6da9f5bc-f08d-11e3-8f3d-00144feabdc0.html#axzz34kzPdWXd

[14] Health and Social Care Act 2012 http://www.legislation.gov.uk/ukpga/2012/7/section/1

[15] Yes Minister – “The Compassionate Society” (se2 ep1)
Created by Antony Jay & Jonathan Lynn. Broadcast February 23, 1981 – http://www.youtube.com/watch?v=x-5zEb1oS9A

 

 

Flagship care.data – [2] Commercial use with the Brokers

“If our health records should sail off in the flagship care.data programme, on the sea of commercial Big Data, are we confident that there is consent, fair processing, transparency, accountability, security and good governance? We must know that these basic mainstays are in place, to give it our support.”

“He that filches from me my good name, robs me of that which not enriches him, and makes me poor indeed.”                     William Shakespeare, Othello

I read this Shakespeare quote last week, not in the original but in the statement Data Brokers: A Call for Transparency and Accountability by US Commissioner of the Federal Trade Commission Julie Brill, May 27 2014. [1] . Since then I have tried to piece together a lay consumer understanding, of how this commercial data market works and how our health records fit in. Experts in data markets and many others will undoubtedly see how naïve it is. But by sharing my ordinary understanding as a mother who is thinking about the impacts of my shopping habits and upcoming care.data decision will have on my children’s future, perhaps I can highlight how trusting we are, and why those governing our data need to ensure the processes around our data are worthy of that trust.

The Commissioner begins:

“Data brokers gather massive amounts of data, from online and offline sources, and combine them into profiles about each of us. Data brokers examine each piece of information they hold about us – where we live, where we work and how much we earn, our race, our daily activities (both off line and online), our interests, our health conditions and our overall financial status – to create a narrative about our past, present and even our future lives. Perhaps we are described as “Financially Challenged” or instead as “Bible Lifestyle.”

Perhaps we are also placed in a category of “Diabetes Interest” or “Smoker in Household.” Data brokers’ clients use these profiles to send us advertisements we might be interested in, an activity that can benefit both the advertiser and the consumer. But these profiles can also be used to determine whether and on what terms companies should do business with us as individual consumers, and could result in our being treated differently based on characteristics such as our race, income, or sexual orientation. If data broker profiles are based on inaccurate information or inappropriate classifications, or used for inappropriate purposes, the profiles have the ability to not only rob us of our good name, but also to lead to lost economic opportunities, higher costs, and other significant harm.”
In other words, organisations, which we may not know store our personal, sensitive or confidential data, use it to classify, segment  and label us. In this environment when third parties it seems know more about us than we may know ourselves, it would seem prudent to want to control and understand what data is held by whom and how they use it. Especially, if in her words, “the profiles have the ability to not only rob us of our good name, but also to lead to lost economic opportunities, higher costs, and other significant harm.”

This is why it matters what is being done at break-neck pace to extract and share our health records in England.

I believe we are not yet sufficiently aware of how our data is used by these intermediaries, and if we were, we’d be horrified. We are complicit consumers in how our data is used with minimal understanding. We’re prepared to unwittingly trade a little privacy with the supermarket, to get our discount vouchers through the post. But we don’t look beyond that to understand what price we are paying and how our commercial interests may be harmed, in much more significant ways than £10 discount or a Legoland entry may compensate. Just like our food, the public are complicit [2] in our own downfall, accepting the marketing spin. We don’t understand credit ratings [3] and risk scores, and even if we do, most consumers don’t know data brokers offer companies scores for other purposes unrelated to credit in an onward chain of reselling. Data can be inaccurate, we are unaware of how to manage or correct it, how we are labelled by it, what opportunities it may restrict as highlighted in the report. We should be better informed.

I’ve recently learned how these, “powerful cross-channel consumer classifications help companies understand the demographics, lifestyles, preferences and behaviours of the UK adult population in extraordinary detail.” [4] demonstrated by Experian.

That they understand and track my behaviours probably better than I do, and at such detailed level, I find surprising and invasive. “Within rural areas we are able to pick out the individual households that are likely to be commuting to towns and cities nearby…” I’ll go more into that later.

It has come to the attention of the general public,  only in the last 6 months, that our hospital episode statistics (HES) and data from other secondary care sources, have been on sale in this consumer market. As I said in a previous post [5], a year ago, in April 2013, The ‘Health and Social Care Transparency Panel’ discussion on sharing patient data with information intermediaries stated at that time, there was no legitimate or statutory basis to share at least ONS data [6] in that way for commercial purposes:

“The issues of finding a legitimate basis for sharing ONS death data with information intermediaries for commercial purposes had been a long running problem…The panel identified this as a significant barrier to developing a vibrant market of information intermediaries.”

The HSCIC at that time saw a “vibrant market of information intermediaries, for commercial purposes” using our personal records as desirable and indeed, as Sir Kingsley Manning’s comments to the Health Select Committee demonstrate, in their DH handed-down policy remit.


In this way, companies who process data such as Beacon Dodsworth received data in the last year and offered it for commercial exploitation by others “HES data may be used by pharmaceutical companies “to improve [their] social marketing / media awareness campaigns”. Others included  OmegaSolver [7] and Harvey Walsh [8].


Some of that data goes back into our health market as business intelligence, both for NHS and private use, for benchmarking, comparisons and making commercial decisions. In our commissioning based marketplace [9], now becoming normalised.

Through the press earlier this year, and the first data release register [10] we have come to understand in part, who is using it and at least in part, how. Aside from bone fide public health planners and health researchers, and the intermediaries using data for commissioning support tools, recipients include these commercial companies and third-party intermediaries exploiting the data as a commodity. Organisations which may buy raw data and sell it on, or process it and sell that data mined information onwards. Organisations after which, Chair Kingsley Manning told the Health Select Committee, [11] we have no idea whom all the end users may be. He indicated the progress that is needed and that HSCIC is already working on improvements, stating the view that “the process HSCIC inherited was no longer robust. ” Q285

“Kingsley Manning: I realise that, and may I come back to that? That is why, specifically with regard to the sets of data that are covered by data-sharing agreements, I took the view that the process that we inherited was no longer robust. We have therefore been in the process of changing the management and the processes, and we have voluntarily adopted a process of being much more transparent about the process and about the data releases we have made.

              Q286Barbara Keeley: But what I was trying to get to was the concern.  We are just looking for transparency and honesty here. On all the data that was previously released through these commercial reuse licences where there are end users—the question that the Committee wanted to put to you—you are unable to say what are the uses to which the data release under those licences may be put, what controls are in place and what information is provided—you don’t know. With the whole 13 years of the HES database and however many million records have gone out to one of these providers that then provides on to others—in the United States, this has involved putting up the data on Google cloud, and we are not sure of the security of that—you can’t say. You should admit it now. If you can’t tell us where all that data is and what all its uses are, it seems you can’t. You have already admitted that entirely commercial market uses—

              Kingsley Manning: The control is through both the overriding regulations established within the Data Protection Act and the data-sharing agreements that we enter into with people, which specifically allow the reuse of data with safeguards with regard to anonymity.

              Q287Barbara Keeley: So you have no idea who the end user is. You have no idea if they are using it properly because there is no audit.

              Kingsley Manning: And that is in accordance with the law and the regulations as they stand today.

              Q288Barbara Keeley: So, just to be clear, audit is not going to be possible for all the uses and all the end users. The data is out there. You have licensed people to use it and other people to buy it, and there is no control over that—it is just out there.

              Kingsley Manning: I don’t accept there is no control. There is control established in accordance with law and the regulations as they are today.

              Q289Barbara Keeley: But you are not able to say who is using it and for what reason. You are not able to say that.  There are end users out there.

              Kingsley Manning: No, because we have a large range of organisations that we have been encouraging. Government policy has for a long time been to encourage the use of this data to advance both the health and social care system in this country and the economy. If, for example, we supply pseudonymised data to a drug company to help it to develop a new drug, we do not know the end users beyond that organisation, but that is perceived as being a task and a function that we have. It is done in such a manner that the data is safe and secure, and is not identifiable back to an individual.

              You may wish to change the base upon which we act. We absolutely welcome the suggestion that we should submit these to the confidentiality advisory group. We have identified a number of cases where we think its guidance would be very helpful, including in this area. We would absolutely welcome that, but I am afraid we cannot make up the rules that we act by.”

This is what concerns me, if the purposes and permissions granted for care.data are to be defined by the reason why recipients get data for the “promotion of health ” [12] and that their worthiness to receive data is based on,  a wooly, undefined notion of whether it will improve care or promote health. It cannot be transparently judged if many users of data are intermediaries with re-use licences, if even the HSCIC doesn’t know who all the end users are, and does not routinely audit them. Nor can anyone know how identifiable therefore the accumulated data sets may be.

If HSCIC does not track each release, each time, each recipient receives data, how do they know every time a new request is granted, how much of the jigsaw puzzle for any given individual, is left to complete?

If you don’t know who they are, how can you govern them and what they do with our data? How on earth can anyone judge how they will be for purposes in the Care Bill 2014 of:

(a)the provision of health care or adult social care, or

(b)the promotion of health.

How can the data controllers judge whether that  release, together with all the data these companies already hold, will not do us ‘significant harm’  in the words of Commissioner Brill, of the Federal Trade Commission? Will it not by its nature of labels discriminate against segments of our society, whom the data owners select, based on information beyond our visibility or control? Is society which is segmented and stratified at risk of every increasing inequality? Disability groups for example, may feel at increased risk of stigma or exclusion. David Gillon [13] addresses this in his post here. How can individuals determine if releasing our data to these companies is in our own, or the public interest [14]?

Impossible if we don’t know who they are, and we don’t know what they already hold. A model which is hardly transparent nor conducive to trust.

Dr.Neil Bhatia in Hampshire, a GP who founded the non-commercial website care-data.info, asked HSCIC in an FOI request for the data *about him* which was released to these type of intermediaries. He was told this week, that the data controller, the Health and Information Centre, does not know. We can then only surmise, if our individual data was contained in pseudonymous bulk data transfers in which there remains ‘a latent risk’ of identification. So from the released data register, we should look at what types of companies are using pseudonymous data. We are also told that penalties may be imposed, or even ‘one strike and you’re out’ for misuse of data. Until now at least without robust audit procedures, I believe we’d never know. So how could data be better secured?

There is talk of a ‘fume cupboard’ access, [15] or giving customers data only in query format, instead of giving out raw chunks of the database. But the Care Bill certainly didn’t legislate for any changes in those types or indeed any governance procedures. We can only wait and see if talk becomes reality and how we can trust it becomes a secure policy and stays so, after we entrust our data. There is no delete button after all.

The Secretary of State wrote on April 25th [16], asking to ensure current practices are up to the task, but as polite as it is, a letter is no form of governance. On June 12th, HSJ [17] reported that the HSCIC has ordered a significant number of trusts to “promptly” delete a series of datafields, which it claims could put patients at risk of being identified, because some of the information in “secondary uses service” that they had submitted to the agency had been entered in an incorrect way over ten years. The good news in this, is it would appear progress is being made in audit, and these errors are being addressed.

However, it highlights the issue created when you release raw data beyond your control. It will mean that organisations who should not have received data, did. How now is that data to be removed from information into which it has become? It will now no longer be raw numbers, but be in graphs, comparative studies and have been inexorably merged with other data. Unlike Cinderella’s carriage, it’s not an automatic process that the raw materials, the data, returns to its previous state after it has become enhanced, turned into business intelligence. The raw files may be traced, removed and deleted, but the knowledge it has turned into, will be almost impossible to find and delete. The links between the two may have disappeared into thin air. Harder to find, than the owner of the glass slipper. An impossible audit trail.

An audit process on leaving the trusts and upon arrival at HSCIC and on leaving HSCIC – at least a three place checkpoint – is what I would have  been familiar with in the past for payroll & personal data. It seems that audit procedures for our health records, have just not kept up with the speed at which the data has been sent out on the open seas, and there has been no audit.

Q287Barbara Keeley: So you have no idea who the end user is. You have no idea if they are using it properly because there is no audit.

  Kingsley Manning: And that is in accordance with the law and the regulations as they stand today.”

It’s not to say there are no controls. We are told that data sharing agreements prevent data provided being matched with other data held, which prevents making individuals identifiable. However, as I’ll look at in my next post, I don’t think it even has to get the the person level to be sufficiently identifiable as to be discriminatory. The segmenting of society at group level, at household level, with detailed understanding of our behaviours, is sufficient, aside from the identifiable individual level data these companies hold for identity verification and so on. When companies extract and store raw data, we have no idea where and with whom it lands up. I’ve been completely surprised by what I have learned in the last few weeks how these third parties use our data.

The current controls around and governance of our health data remains unchanged by the Care Bill.  Through policy, law and directions the HSCIC has

…”licensed people to use it and other people to buy it, and there is no control over that.” [12]

As Sir Manning said,

…”because we have a large range of organisations that we have been encouraging. Government policy has for a long time been to encourage the use of this data”

Controls may be in line with policy and the law, but I believe it simply hasn’t kept up with the functional need for a decent governance framework.

Julie Brill’s Statement made a recommendation:

“A second accountability measure that Congress should consider is to require data brokers to take reasonable steps to ensure that their original sources of information obtained appropriate consent from consumers.”

Accountability in the UK of these data brokers seems quite absent in real terms, unknown to the public at large.

The same core issue identified by Julie Brill in the US, lack of informed consent. If we don’t know you have it, how can we ask to check if it’s correct or who uses it? In an era of borderless electronic data transfers, we should seek to put in place the highest standards as common denominators, and in terms of privacy, there are lessons worth learning from the US actions post Snowden which in the UK, we have not yet begun.

If our health records should sail off in the flagship care.data programme, on the sea of commercial Big Data, are we confident that there is consent, fair processing, transparency, accountability, security and good governance? We must know that these basic mainstays are in place, and will stay so in future, to give it our support. Well governed data is more likely to get our trust, therefore our consent and be of better quality for buyers.

We must also not forget to clarify why it is our records are needed in the broad and undefined care.data scope that we still have not seen pinned down. Is the public good really defined for care.data and does it outweigh the private long established rights of consent and confidentiality? Do we trust these commercial company uses to do “no harm” as the US Commissioner of the Federal Trade Commission examined?

…”the profiles have the ability to not only rob us of our good name, but also to lead to lost economic opportunities, higher costs, and other significant harm.”

When we visit a medic we are vulnerable, ill or in need of help. We entrust our knowledge in confidence, and trust it will be used for our care. A whole hotchpotch of other indirect uses, including commercial exploitation is not what we expect. We need to trust the data we give away to local staff,  is processed appropriately all the way up the data chain, when it is stored, when it is released and beyond. For now at least, it appears citizens can only control the one point at which we first give our data up. After that, we have faith that those governing our data ensure the processes around its management are worthy of that trust. The governance processes that go beyond the HSCIC control, will directly influence that trust, and our care.data decision to object, or not.

For citizens to see this still precarious commercial hull, and trust that our innermost confidences should be safe within it, is stretching our trust, just a little too far.  The knowledge of our health and lifestyle should not be commercially exploited in this uncontrollable marketplace by data brokers without our knowledge and consent.  Health data is on the cusp of including more widespread biomedical data. In my children’s lifetime that may be a whole new era of data management to contend with. For now,  all this intensive data mining may be much more than we already imagined and we should carefully consider how society will be affected if it includes every aspect of our health and lifestyle data. It may be yet another aspect of individual surveillance more than society can stand.[18]

The care.data storm may not yet be over.

*****

In part three on commercial uses, I’m going to explore, from my lay perspective, on how some of these intermediaries and data processing companies, use data concretely in practice. As Julie Brill says how these intermediaries, “create a narrative about our past, present and even our future lives.”

******

[1] Data Brokers: A call for transparency and accountability – http://www.ftc.gov/system/files/documents/public_statements/311551/140527databrokerrptbrillstmt.pdf

[2] Food Marketing film by Catsnake with Actress Kate Miles via Upworthy  http://www.upworthy.com/no-one-applauds-this-woman-because-theyre-too-creeped-out-at-themselves-to-put-their-hands-together

[3] Your Credit Ratings explained BBC http://news.bbc.co.uk/1/hi/business/2963580.stm

[4] “Mosaic is Experian’s most comprehensive cross-channel classification system …it helps you understand consumers in extraordinary detail.” http://www.experian.co.uk/marketing-services/products/mosaic/mosaic-in-detail.html

[5] Flagship care.data – Commercial Uses in theory: https://jenpersson.com/flagship-care-data-precious-cargo-1-commercial-uses-in-theory/

[6] Health and Social Care transparency panel:- minutes from 23rd April 2013 –  https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/259828/HSCTP_13-1-mins_23_Apr_13__NewTemp_.pdf

[7] 17th March Omega Solver in the Guardian, by Randeep Ramesh http://www.theguardian.com/technology/2014/mar/17/online-tool-identify-public-figures-medical-care

[8] 16th March Harvey Walsh in the Sunday Times by Jon Ungoed-Thomas  ‘healthcare intelligence company, has paid for a database’ http://www.thesundaytimes.co.uk/sto/news/uk_news/Health/article1388324.ece

[9]  The Privatisation of the NHS Prof.A.Pollock at Tedex event

[10] HSCIC Data Register http://www.hscic.gov.uk/dataregister

[11} Evidence at Parliamentary Health Select Committee April 8th 2014: http://data.parliament.uk/writtenevidence/committeeevidence.svc/evidencedocument/health-committee/handling-of-nhs-patient-data/oral/8416.html

[12] Care Bill 2014 – Enacted: http://www.legislation.gov.uk/ukpga/2014/23/section/122/enacted

[13] care.data in their own words – D. Gillon Where’s the Benefit? http://wheresthebenefit.blogspot.co.uk/2014/03/caredata-in-their-own-words.htm

[14] Public vs Private interest – Dr. M Taylor, “Information Governance as a Force for Good? Lessons to be Learnt from Care.data”, (2014) 11:1 SCRIPTed

[15] Fume Cupboard access in NHS England stakeholder  letter April 14th 2014

[16] Letter from Jeremy Hunto HSCIC regarding patient confidentiality

[17] Health Service Journal, June 12th, Nick Renaud-Komiya, http://www.hsj.co.uk/news/trusts-ordered-to-delete-incorrect-data/5071902.article?blocktitle=News&contentID=8805

[18] John Naughton, Observer 8th June, http://www.theguardian.com/technology/2014/jun/08/big-data-mined-real-winners-nsa-gchq-surveillance

Flagship care.data – precious cargo [1] & commercial uses in theory

“The challenge is that if many users of data are intermediaries with re-use licences and even the HSCIC doesn’t know who all the end users are, how on earth can anyone judge how they will be for purposes of ‘improving NHS care’?”

Commercial and third party use is one of the most damaging aspects of the rollout which is wrecking the care.data programme.

I’ve cut my opinion on this care.data topic into two parts, theory and practice, to address the outcomes of the LMC conf of yesterday from a patient POV. From my lay perspective, the result of the debate and votes was partly due to the failure to shore up the policy theory around commercial uses to make any perceivable improvement to trust for the future. And partly based on proven failures in practice to protect our data in the past. Failures around commercial use of care.data in theory and practice.

The theme of making money, is a recurring topic for women in literature, and graced or should I say, grubbied  our screens in recent weeks in the adaptation of Dame Daphne Du Maurier’s Jamaica Inn.

Mary Yellan, orphaned and without means, seeks the only family she has and lands among the smugglers and muddy marsh of the Cornish moors. It’s not only set against a backdrop  of smuggling, but wrecking. The heroine struggles between moral conflict and practical necessity, whether to join in their activities, against her ethical principles.  She gets used to it but ultimately can’t live with it.

Given that the real inn is in the middle of a very bleak moor, with no outlook except the rough shorn grass, you need to really see unmet potential to want to be its new owner. For that, you need to see strong commercial opportunities or be a committed hard core Du Maurier fan. Or both.

So it can appear, from a patient point of view on care.data. Either the driving parties promoting the release of patient data see unmet potential [1] which needs commercial harnessing [1b], have direct commercial interests[1c], or they have another personal interest in its extraction and access. Or perhaps they are just hard core fans of data sharing, to the point that we should support mashing our health data up with commercial retail loyalty cards as Mr. Tim Kelsey suggested in November 2013 at Strata [from 16:00] [2].

Are the same people and organisations driving the programme and calling for ‘data for patients’ not also the same who will benefit most from having access to the data? The measurable benefits to us patients remain unclear, at best. The cost, our confidentiality and GP trust, is however clearly non-refundable. Consent, the age old pillar of medical ethics is to be waived aside. The LMC Conf obviously see value in protecting confidentiality at source if it cannot be guaranteed by others, whether the HSCIC or the data users.

Who will all the end users of our data be? They remain somewhat undefined, because the care.data addendum including Think Tanks, commercial companies and information intermediaries was not approved [3] and because future users are undefined in social care, for example. Future scope will entail additional future users. But then perhaps this should not surprise us that NHS England and the HSCIC expect us to acquiesce to this fair processing failure although we don’t yet know all the future end users, because Sir Kingsley Manning admitted that HSCIC does not know who all the current end users are either (Q272) [4a] at the  Health Select Committee hearing. So, were the GPs at LMC Conf just expected to trust ‘on spec’ to whom their approval of care.data would entitle its sharing?

Information intermediaries in particular, seem to still be on the key stakeholders list[5] in January 2014. But only a year ago, in April 2013, The ‘Health and Social Care Transparency Panel’ discussion on sharing patient data with information intermediaries clearly stated there was no legitimate or statutory basis to share at least ONS data with them. [6]

“The issues of finding a legitimate basis for sharing ONS death data with information intermediaries for commercial purposes had been a long running problem. A number of possible approaches had been considered but advice from the relevant Government legal teams was that there did not appear to be a statutory basis for doing so. The panel identified this as a significant barrier to developing a vibrant market of information intermediaries (IIs). It also limited the ability of IIs to support NHS organisations with business intelligence to evaluate and benchmark the quality of their services.

It was agreed that this issue needed to be resolved, and if necessary changes to the relevant legislation should be considered. ” 

I would love to know whether the law changed in the last year, how was the issue resolved, or has HSCIC and have we just through use, acknowledged that this sharing with intermediaries is acceptable and legal? The meeting later in July should have given clarity, but I can’t see minutes beyond April. They are no doubt somewhere, and someone cleverer than me, can help find them and clarify how the decision was reached I expect. I did find notes in the recent HSCIC audit of past data releases [4b], that ONS data was granted under existing law after all:

“The ONS data are supplied under the Statistics and Registration Service Act 2007 section 42(4) as amended by s287 of the Health and Social Care Act 2012, for the purpose of assisting the Secretary of State for Health, or the Welsh Ministers, in the performance of his, or their functions in relation to the health service.”

Since the Health and Social Care Act revoked the Secretary of State’s duty of care to provide a national health service, I wonder what functions it relates to as pertains to third party intermediaries? The ONS application form is detailed but no more enlightening for commercial intermediary use. I can’t help feeling we’re seeking justifications rather than good cause as the starting point for widening data releases. That we are starting to accept that our hospital records have been shared without our consent and sold. (Let’s give up the recouping costs word play, call a spade a spade. Data and cash change hands.). ‘What can we do about it anyway? we may well ask. As time has gone on in the care.data debacle, and in the three months since the delay, it appears from the leadership comments of NHS England from Mr. Kelsey in Pulse that, we’re not to worry, “now we are working to make care.data safe.” [free registration required] Still no one has said, we made a mistake of its handling in the past.

This acknowledgement however that work needs done to make the data safe, underlines exactly what so many saw months ago including the GPES advisory group which had concerns [17] in Sept 2013 on commercial uses and its communication, governance and patient trust. Care.data was launched regardless. Now it’s grounded.  What has improved since then? What remains to fix?

How well exactly did HES storage and sharing work so far, with breaches identified as well as the basic legal fair processing failing to inform us of its extraction? What has been done to prevent it happening again? I have seen no concrete steps which give me faith the past flaws have been fixed enough to now trust it in future.

In February, before the pause Jeremy Taylor of National Voices wrote a very sound 12 point plan of what needed to change.  Since then, what has actually  changed [7] as far as I can see, is only the introduction of a delay, and that his words were listened to, that there should be no artificial deadline:

‘”the timescale for launching Care.Data was entirely artificial, as is the six month “pause”.

Three months into the delay, nothing of substance other than agreeing there is no artificial deadline, appears to have changed.

The most significant past let downs have all been commercial or third party uses. OmegaSolver, Beacon Dodsworth, PA ConsultingEarthware.

The Care Bill amendment touted as a change in the legal protection of our care.data, does not block commercial Third party intermediaries sharing care.datauses of our data, only stating that it should be used ‘for the promotion of health’ which is open to all sorts of interpretation. Not least I imagine, those similar to ‘fight against obesity’ campaigns by marketing masters of commercialism.

So with little transparent change on policy, since we have become aware of data breaches, misuse and patient anger about commercial use, it should come therefore as no surprise that the BMA Local Medical Committees (LMCs) yesterday voted to state a preference for opt in not opt out, pseudo or anonymisation at source and insists that care.data should only be used for its stated purpose of improving health care delivery, and not sold for profit.

Simply: the public don’t trust that our identifiable data is protected and we object to all our data being traded commercially.

This is in direct conflict with HSCICs stated purpose in the HSCIC 2013-15 roadmap [8]:

“Help stimulate the market through dynamic relationships with commercial organisations, especially those who expect to use its data and outputs to design new information-based services.”

And in statements by both Sir Manning at the Health Select Committee and Dr. Geraint Lewis [9]:

…”we think it would be wrong to exclude private companies simply on ideological grounds; instead, the test should be how the company wants to use the data to improve NHS care. And, as Polly Toynbee put it, if “it aids economic growth too, that’s to the good.”

The challenge is that if many users of data are intermediaries with re-use licences and we don’t even know who all the end users are, how on earth can the HSCIC judge how they will benefit ‘improving NHS care’?

As regards economic growth, if the aim is to give away data for free, as Mr. Kelsey told the September 13th NHS England board (from 26:10)[10], how is the NHS to make profit from it? It’s not. Commercial companies are to buy at prices only to help HSCIC recoup costs [11], so that is not technically opposed in wording to ‘ not making a profit.’ Citizens, GPs and others can be aligned with that on paper. But not in spirit. For now commercial companies profit from our state funded records, paid for by NHS DoH money.  They profit intermediaries with re-use licences beyond which we have no visibility or control of where our data goes or why. And the fact that the wider profiting third parties from the whole scheme,  ATOS paid zero tax in the UK in 2012,[12] really grates. How does the cash given to ATOS benefit economic growth in the country?

Therefore, for the LMCs to have voted now any differently, would have expected them be soothsayers, knowing that the care.data work-in-progress and any future changes will make both the future scope purposes and future users clearly defined, in order to fulfil their duty as data controller, ensuring patients have a reasonable expectation of how their data will be used. It asks GPs to betray their age old fundamental principle of medicine, to betray patient confidentiality, for commissioning. They are being told to betray the good ethics of consent.  They are being asked to betray patients’ trust and even to use that trust to ‘sell’ the idea in which they may not believe.

And care.data current processes betray the best practices of data collection – seek to collect the minimum data required, for a specific purpose and delete it when that is completed.

“Personal data processed for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes’ consistent with the Data Protection Act principle 5. [13]

Instead HSCIC’s remit over the coming years of care.data is to fill in all the remaining gaps with any health and social care information not already collected [14], and keep it linkable from cradle to grave – or even from “germ to worm” for everyone with an NHS number in England. Purposes are non-specific and unlimited because they’ll change over time and the end users are not all defined for it plans to be opened up increasingly widely for use in social care and we don’t know what else.

caredatatimeline

 

In my lay view, the BMA LCs had no choice in the interests of their patients but to call for a rejection of assumed consent and commercial uses. The two do not go together. Opt out for uses of our data purely for NHS care and its planning would be much more palatable. But add in commercial uses, which is what has both been the main source of patient objection and data breaches, and it’s a deal breaker.

They can’t stake their support and reputation on a best guess of what might be. They can only base their judgement on what they know now. And no one supports care.data exactly as she is right now, which is why it is postponed and work in progress. Shore up trust, governance and axe these commercial uses and perhaps an assumed consent would seem more palatable. For example, Cross border governance needs documented when the application form gives non UK options. Scope and users need defined to ensure proper fair processing to meet DPA ICO requirements [16]. But so far, nothing has visibly changed.

It’s no different from when Ben Goldacre was telling us public trust cannot be easily regained and it broke his heart [15]. I know why, there are expected benefits to public research amongst others to access primary care data more than they already have in CPRD or pseudonymous data in QResearch and others, but we need to act based on today’s approved uses for care.data, not what might be remain in an undefined future. Right now, we’ve seen no changes of substance since the delay was announced.

NHS England can’t therefore genuinely expect to see a shift in trust in citizens or GPs based on nothing more than lines in the sand.

I believe GPs at the LMC Conf took the best decisions they could with the programme in its current form, with knowledge of past problems and lack of future clarity over scope and users.

They voted for how they feel best protects, respects and empowers their patients.

If our current Data Controllers and  guardians of confidentiality don’t stand up for patients to get the build of the infrastructure right before they agree to release our data to fill it, who will? The question will be whether the Secretary of State and NHS England will force their legal right of extraction through regardless, or will respect the medical profession’s representatives and the rights of citizens they care for?

There is an opportunity to fix things. The LMC Conf after all have no legal efficacy, they stated their opinion and stance which commands respect and attention. Flagship care.data is not washed up, yet. But it can’t sail without addressing governance and professional support. Commercial exploitation and assumed opt in are not going to work comfortably together. Transparency of who has access to what data for what purposes and how it is released needs sharpened up. And regardless of whether opt in ever comes onto the table or not, if care.data keeps her strongly  commercial heading many, many more will jump ship to opt out. The damage of bias will be done, either way.

She needs some new directions, helmsmanship that we trust and sound repairs.

********

If you have missed the background to this saga, I’d recommend the Julia Powles article in WIRED – what to save when the care.data ship goes down.

I’m going to look at some more of the commercial uses of care.data in practice another time. And clarify the communication of the opt out codes and why research purposes is a misnomer in the GP patient record sharing part of care.data purposes – it’s not (yet at least) an approved use.

********

[1] MOU between AstraZeneca and the HSCIC, December 2012

[1b]  ABPI Vision for harnessing Real World Data 2011

[1c] Hansard, Nov 2010 George Freeman ‘I know from my own experience that we are sitting on billions of pounds-worth of patient data. Let us think about how we can unlock the value of those data around the world.’

[2] Strata November 2013, Tim Kelsey keynote ‘mash it up with other data sources to get their local retailers to tell them about their purchasing habits so they can mash that up with their health data’

[3] care.data addendum Sept 2013

[4] Written Hansard of the Health Select Committee , 8th April

[4b] The HSCIC data release register issued on April 3rd 2013

[5] Oversight panel with input from Dame Fiona Caldicott, January 2014, with stakeholders’ list

[6] Health and Social Care Transparency Overview Panel April 2013

[7] National Voices – Jeremy Taylor, an excellent overview of 12 points which needed fixed from February 2014

[8] HSCIC 2013-15 Roadmap

[9] NHS England comments by Dr.Lewis on commercial principle

[10] September 13th 2013, care.data directions approved by the NHS England Board – care.data from 25:40 – 39:00 – note identifiable, not anonymous data is extracted and stored with the DLES at HSCIC, and GP objections to date on care.data opt-in seem not to have been respected in contrast to the claim ‘GPs make a decision’ from 31:00. There is to date, no communicated way to prevent HES data extraction and its sharing in pseudonymous form.

[11] The HSCIC Data Linkage price list

[12] The Independent, November 2013 Atos & G4 pay no corporation tax in 2012, National Audit Office stats via Adam Withnall, The Independent

[13] Data Protection Standards – retention, principle 5

[14] care.data programme overview April 2013

[15] the Guardian, 28th February 2014 – care.data is in chaos – Ben Goldacre

[16] Blog from the Information Commissioner’s Office on care.data Data Protection and Fair processing

[17]The GPES Advisory Group meeting minutes Sept 12th 2013

{updated 28th May – looks like past uses of our health data are now also under scrutiny by ICO which is investigating claims that insurers have accessed full medical records using subject access requests.}

By [email protected]