The Macrosite for News, Analysis and Opinion about the Future of the Internet
Kim Solez, MD

Google Health Needs Security Rx

Written by Kim Solez, MD
6/3/2008 8 comments
no ratings
1 saves
DISCUSS   Digg   Del.icio.us   Reddit   Email This   TWEET THIS

Recently launched Google Health, which allows you to store and manage all your health information online, is just the latest sign that the healthcare sector is carving out its own space in the Web 2.0 revolution.  Health 2.0 has its own flavor of user-generated content, wikis, blogs, mashups, and wireless options that come with cellphones and PDAs.  Autonomy is a key driver of this dramatic change. In the process, traditional health paradigms are turned on their heads. 

Google Health allows individuals to build their own health profiles online, entering health conditions, medication, allergies, lab results, etc. Users can even create multiple profiles for family members or others they care for, and import medical records from participating hospitals and pharmacies.  Participants can find trusted information on diseases and conditions of interest to them and learn about possible medication interactions and other topics to talk with their doctors about.  In a word, you would have autonomy, everywhere.

Assistance is also provided with reminders to take medications (the virtual pill box) and with finding physicians and hospitals matched to the individual's needs.  The system allows patients to keep their doctors up to date on what is happening with them. It incorporates automatic notification of potential drug interactions, eliminates the need to repeatedly fill out the same paperwork when visiting new physicians, and avoids unnecessary repetition of lab tests.

The launching of Google Health follows an initiative earlier this year by healthcare insurer Aetna, which announced a new service to help people manage their own health records online. Aetna's personalized online medical information service, called SmartSource, draws upon a patient's own medical history to help answer questions about symptoms and treatment. The company plans to gradually introduce the free service nationwide to its customers beginning in August.

So what could Google Health accomplish? The immediate goal is to improve health, provide proper treatment, and prevent future disease. Ultimately, it allows individuals to be responsible for their own health and for interaction with healthcare providers and insurers. It therefore makes sense that they should have ready access to their own medical records, X-rays, and lab tests. People should be able to transfer their health records in readily understandable form to other health providers and other insurers -- and know that the records are accurate and complete.

Google Health is a potentially very powerful and useful resource. But it also shares vulnerability with other online resources and has privacy advocates warning about the dangers of inadvertent release of personal information. Google servers are at the top of the list of IP addresses infected with malware, so there are other risks to think about as well. Google says the servers used for Google Health will be more secure than the other servers it uses.

It is the unsafe aspects of computing at the moment that make Google Health risky. Unless we reach the point where computing is essentially risk free, accidental dissemination of private health records to the wrong parties will always be a possibility, and the potential downsides of Google Health will remain.

— Kim Solez, MD, Director of NKF cyberNephrology at the University of Alberta

DISCUSS   Digg   Del.icio.us   Reddit   Email This
Current display:       newest comments first       display in chronological order
DHagar
Thinkernetter
Wednesday February 11, 2009 4:57:30 PM
no ratings

These are great points, Kim.  In actuality though, there are more serious breaches of confidentiality in the current paper medical records and open exposure to anyone without controls or need to know.  HIPAA put restraints on all patient information, both paper and electronic, that anyone creating patient records has to comply with.

Both Google and Microsoft are HIPAA compliant.  I believe that Google's health record moves the right direction in giving the control of information and disclosure to the patient, which now owns the medical record..

DHagar

KimSolez
Thinkernetter
Tuesday February 10, 2009 4:29:28 PM
no ratings

Hey Paul,  

The incentives to move physicians and hospitals toward making great use of the electronic medical record is probably a good thing assuming privacy is maintained.  It is hard to judge the exact effect of this part of the legislation until the structural details of the privacy provisions are finalized.

Doctors tend to be a conservative group resistant to change and health care costs are an alarmingly large part of the overall budget.  If privacy and security issues can be addressed effectively, then having more medical data in electronic form is obviously a good thing as it will make analysis and innovation easier.

All the best. - Kim
 

 

 

Paul Whyte
Researcher
Tuesday February 10, 2009 2:46:34 PM
no ratings

Hey Kim,

 With the stimilus bill having pass senate this afternoon, some worrying portions of the bill is now beginning to surface with regards to electronic health records. It's seems there is an overt government manipulation behind this move to make electronic health records for all patients.

Ruin Your Health With the Obama Stimulus Plan

What's your take on this??? 

hounhosp
Researcher
Thursday June 5, 2008 3:41:13 PM
no ratings

There is nothing bad about the primary goal behind Google Health project, but the main issues related to online security need to be solved before the project come to fulfilment. What guarantee do we have to make sure that servers used for Google Health will be more secure than the other servers it uses? Who is  the accredited authority who can testify that there are "less security problems" with Google Health servers than with its other servers? Health information is very sensitive and given the online security issues, it is indeed very risky to put ones health information in a world wide online system. 

The Google Health entusiasts and users must be aware of the potential threats they will be facing with the service. Google has been partnering with some hospitals such as the Cleveland Clinic that is allowing "1,500 to 10,000 of its patients to sync up their records with Google’s nascent Internet-based personal-health-records system" said David P. Hamilton in his article Google Health’s Cleveland pilot program — and the nagging questions it doesn’t come close to answering. This is to enable them "to take their medical records with them wherever they go and be able to easily access and manage their own health information". David said that if patients are  "free to selectively share their medical information, or even edit or delete it", people might chose to hide or minimize some embarrassing information and they might mislead their doctors. Consequently, other doctors might not trust medical records presented by patients and the goal of the Google Health servive might not be achieved.

     

BenjaminWright
Rank: Web master
Wednesday June 4, 2008 12:02:33 PM
no ratings

Paul: 

Maybe patients can bolster privacy by inserting legal terms of access (like an end-user license agreement) into the content of their electronic medical records.  The terms could set binding rules for who may view data and when.  The idea is not legal advice, just something to think about.  --Ben http://hack-igations.blogspot.com/2008/02/contracts-for-patient-privacy.html

KimSolez
Thinkernetter
Tuesday June 3, 2008 6:38:45 PM
no ratings
Hi Paul, The fact of being sick can make one very angry, and so one finds some very inflammatory, off-the-wall, biased and inaccurate essays written on medical topics.  It is probably best to avoid taking sites like your large font reference too seriously no matter how colorful their language may be, but stick instead to reasoned discourse.  I know personally some of the people mentioned in that article and it is very disturbing to see how untrue the characterizations are.

The relationship of Google Health to HealthVault is explained hereFred Trotter has a good discussion of the HIPAA issues.

All the best. - Kim
Paul Whyte
Researcher
Tuesday June 3, 2008 5:11:58 PM
no ratings

Hi Kim,

It's with great delight to hear that many sectors are now embracing Web 2.0 technologies but we obviously should be worried when major players like Google and Microsoft are being sympathetic to us when it comes to health records. Are they just trying to extend their Ad space or provide a portal for third parties to easily access our health records? Google has sided with regimes like communist china and what guarantee do we have that they will not connive with major insurance companies to breach our medical recorsd?

Review of Google Health - Technology Achievement or Privacy Disaster?>

Secondly, do Google Health conform to HIPPA standards and between Google Health and Microsoft Healthvault, which do you prefer?

KimSolez
Thinkernetter
Tuesday June 3, 2008 2:05:55 PM
no ratings
How secure should health data be? IT people talk about the increased security that would come from a trinary code.  The poor man's secure trinary code is doing what online payroll sites do: employ a three component authentication for access, with the three components disseminated in three different ways.  It would make sense if access to one's general Google account did not provide access to Google Health, another additional password or ID component would be needed for that.  The security of health information is as important as the security of a payroll; it should be protected in a similar fashion.

The concept of risk free computing is intriguing. It is not an impossible goal. Suppose there were no viruses, no spambots, no effective hacking, and that there was completely secure encryption of confidential data so it could not be misused, and easy accuracy checking.  This would have dramatic effects on our use of computers in the work place and make something like Google Health practical.

It is worth pondering what Stephen Hawking wrote about computer viruses: "I think it says something about human nature that the only form of life we have created so far is purely destructive. We've created life in our own image."

The standoff that exists at the moment between virus writers and those making software to combat viruses is very like the standoff that exists between disease and efforts to cure and prevent it.  It is logical to think that at some point man/womankind will win both battles eliminating most computer virus threats and other online risks, and conquering major human disease.

One way to deal with the destructive aspect of the computer life we have created is to look at reformating its design. The architecture of the individual computer as well as the architecture of linked computers (the landscape of the Internet) could be re-designed in such a way that computer disease as we know it becomes irrelevant. A computer architecture that eliminates the threat of viruses would allow us to maximize the benefits of the Internet without limiting our autonomy.

An analogy can be made between computer architecture and human architecture, and by extension computer disease and human disease. The architecture of the human for the purpose of this analogy is the gene. It is controversial because of the way it threatens the essence of humanness, but geneticists are looking at prevention of disease by redesigning our genetic structure, our architecture. This could, theoretically, also result in a substantial increase in our autonomy.

Regardless of how we get there we can think of moving toward risk free computing and risk free living in tandem.

Suddenly in such a risk free environment your work computer would really be yours, you would have complete administrative control over it (why not?) and would be able to install programs and make changes just as readily as on your home computer.  But even more importantly you would have control over your own health and there would be very few threats to it.

In a word you would have autonomy, everywhere. And live a really long time with a very interesting life.

All the best. - Kim
The ThinkerNet does not reflect the views of TechWeb. The ThinkerNet is an informal means of communication to members and visitors of the Internet Evolution site. Individual authors are chosen by Internet Evolution to blog. Neither Internet Evolution nor TechWeb assume responsibility for comments, claims, or opinions made by authors and ThinkerNet bloggers. They are no substitute for your own research and should not be relied upon for trading or any other purpose.
previous posts from Kim Solez, MD
Kim Solez, MD
Kim Solez, MD   2/3/2010   18 comments
The human-technological interface, where man and device meet, is an important thing to ponder.
Kim Solez, MD
Kim Solez, MD   12/29/2009   19 comments
In this holiday season -- and following the release of the big-budget science fiction movie Avatar -- it may be a good time to talk about the idea of being overwhelmed.
Kim Solez, MD
Kim Solez, MD   10/26/2009   33 comments
What constitutes a "private space" in the Internet Age is becoming more and more unclear. We live in a world where email is mined for marketing, and Facebook passwords are revealed in legal investigations. Choosing to put something online is tantamount to choosing to give up the privacy of that thing, at least in the worst-case scenario.
Kim Solez, MD
Kim Solez, MD   9/16/2009   37 comments
It is always fun to turn a basic assumption on its head. So a spate of recent articles on the effects of the Web on our overall literacy has delighted me and got me thinking.
Kim Solez, MD
Kim Solez, MD   8/18/2009   28 comments
More and more of the pulse of human activity is migrating online every day, often with two-way interactivity, and most of us are unconcerned about that trend. But what about your own actual pulse, your heartbeat, and all the associated electrical information? Would you like that to be online? Would you like others to be able to send impulses directly to your heart?
5
of
IETV: the thinkerNet on film
5
of
2pm EST
Tue
Feb 23rd
2pm EST
Thu
Mar 4th
3pm EST
Tue
Mar 9th
an IBM information resource
sponsored content
big blue blog
Todd Watson
IBM is announcing today the first of its Power7 processor-based systems and the Power7 processor itself at an event in NYC.
white papers & case studies
an IBM information resource
sponsored content
Smarter Collaboration: How to Thrive in a Challenging Business Environment
Market conditions are changing faster than ever, and organizations need to improve their agility and adaptability in order to provide better service and improve processes. The ability to work with customers, business partners, and employees as effectively as possible - while at the same time holding down costs - is a key to success.

READ THIS eBOOK
your weekly update of news, analysis, and
opinion from Internet Evolution - FREE!

REGISTER HERE
Wanted! Site Moderators
Internet Evolution is looking for a handful of readers to help moderate the message boards on our site – as well as engaging in high-IQ conversation with the industry mavens on our thinkerNet blogosphere. The job comes with various perks, bags of kudos, and GIANT bragging rights. Interested?

Please email: moderators@internetevolution.com
CMP Media LLC
Internet Evolution – not for thickies
Congress Hits the Snooze Button With China
Ira Winkler
In his
recent Congressional testimony, Dennis Blair, the U.S. director of national intelligence, stated that the U.S. is "severely threatened" by cyber attacks and that the recent Google (Nasdaq: GOOG) attacks should serve as a wake-up call.

CLICK FOR MORE
Steve Saunders' Outernet
The Death of Anonymity: Part 4

Part 4 of 4   |  
See complete series
10|29|09   |   1:40   |   7 comments


In the final episode of this series about the death of Internet anonymity, Saunders describes how the Internet of the future will start to attain a level of intelligence that requires no human intervention. Scary.
Steve Saunders' Outernet
The Death of Anonymity: Part 3

Part 3 of 4   |  
See complete series
10|28|09   |   1:35   |   4 comments


What can users today do to protect their online privacy? The simplest and most obvious option is to not use the Internet – at all. However, once all digital information is consolidated over the Internet, trying to protect digital identity by simply unplugging from the Internet becomes impossible – a fact that has manifest implications for civil liberties, Saunders says.
Steve Saunders' Outernet
The Death of Anonymity: Part 2

Part 2 of 4   |  
See complete series
10|27|09   |   2:08   |   8 comments


By 2011 the number of Internet-connected sensors will exceed 1 trillion, making your chances of doing anything or going anywhere unnoticed pretty much zero. Saunders talks about how the 'sensortization' of the Internet is eliminating the traditional divide between online and offline populations.
Steve Saunders' Outernet
The Death of Anonymity: Part 1

Part 1 of 4   |  
See complete series
10|26|09   |   1:29   |   13 comments


The 20th Century Internet was characterized by the ability to interact with other people and information on the Internet largely without anyone knowing who you were. The Internet of this century, conversely, will be defined by identity. Saunders explains how Internet users are unwittingly contributing to the demise of the anonymous Internet.
Steve Saunders' Outernet
Search Inversion & Profiling: Part 3

Part 3 of 3   |  
See complete series
10|21|09   |   1:40   |   No comments


Steve Saunders talks about the risks inherent in uncontrolled, widespread profiling of Internet users, and how one day this practice could form the basis of a new industry, the Outernet, which in economic terms will have outgrown the commercial value of the Internet itself.
Steve Saunders' Outernet
Search Inversion & Profiling: Part 2

Part 2 of 3   |  
See complete series
10|20|09   |   1:29   |   1 comment


Search companies and social networks are collecting incredibly detailed information about their users, says Steve Saunders, who predicts that these 'profiles' could one day become commodities to be bought and sold by companies on 'profile markets' or 'identity exchanges’ – the digital DNA equivalents of the financial and commodities exchanges on which stocks, oil, and gold are traded.
Steve Saunders' Outernet
Search Inversion & Profiling: Part 1

Part 1 of 3   |  
See complete series
10|19|09   |   1:52   |   6 comments


One of the most important Internet issues of all time is being ignored by the media. In this three-part video series Steve Saunders explains how search companies are turning the tables on their users by creating user profiles for financial gain, and how soon this trend will explode into full scale profiling.
Tom Nolle
Google’s Motto: What You Can't Eat, Burn!

12|18|09   |   02:12   |   21 comments


Tom wants a Google 'unlocked handset' for the holidays because he thinks they could just break the telco monopoly on handset distribution and thus empower the Internet as the driver of mobile broadband now and forever.
Reiter's Block
If a Google Phone Arrives, Does It Even Matter?

12|17|09   |   02:41   |   13 comments


Techies are going crazy over the possibility that Google might design and sell its own Android phone. Some writers say it's a very big deal. Reiter questions whether it will happen and, if it does, whether it even matters.
Not Dr. Phil
Telco Sends a Reality Check

12|10|09   |   3:53   |   2 comments


What does a $0.62 refund check from a service provider mean? It could mean that, unlike Google, Amazon, and Apple, telcos aren't ready to use what they know about their customers to sell better, more personalized services.
Lee H. Berke
The Decline & Fall of Broadcast Television

2|9|10   |   1:00   |   No comments


Want to know the future of broadcast television? Take a look at broadcast radio’s past.
Tom Nolle
Everything New Is Old Again

2|9|10   |   2:13   |   6 comments


Research shows that the youth of today like Facebook – but not blogging or Twitter. Does that mean Facebook has won, or just that it's not yet out of favor? Will all the services we see today fade into Ovaltine-or-Wheaties status in just a few years?
what.the.ferraro
Email Marketing Gets Desperate

2|8|10   |   2:31   |   4 comments


Promotional emails will use just about anything timely to get people to buy things. Seriously, anything.
Steve Saunders' Outernet
America, Truck Yeah!

2|8|10   |   1:42   |   5 comments


Steve likes his new Dodge Ram 1500, but hates Chrysler's Web non-sales strategy. Rant on, li'l buddy.
what.the.ferraro
Twits Go Wild for Resignation Tweet

2|5|10   |   1:48   |   4 comments


Jonathan Schwartz is the first Fortune 200 CEO to resign via Tweet. Can he walk on water, too?
Full Nelson
Go With the FLO, Part 2

Part 2 of 2   |  
See complete series
2|5|10   |   2:17   |   3 comments


Fritz and his sweater continue their review of Qualcomm's FLO TV.
Singer at C-Level
Goldilocks & the Data Center

2|4|10   |   3:39   |   2 comments


What kinds of companies are doing the most innovation in the data center? Turns out it's midtier enterprises that are taking the "Just Right" approach.
Full Nelson
Go With the FLO, Part 1

Part of 2   |  
See complete series
2|4|10   |   2:39   |   1 comment


Qualcomm's FLO TV gizmo streams live TV shows. Tragically, they include the O'Reilly Factor
Eurotrash
High & Dry in Barcelona

2|3|10   |   1:08   |   No comments


Ray’s heading to Barcelona for the Mobile World Congress, and he’s not happy about it, the miserable git.
Sweeney Blog
No Sex, Please... It's the Super Bowl

2|3|10   |   2:24   |   2 comments


The Super Bowl ads that CBS rejected are turning up online, generating lots of attention but zero revenue for the broadcaster.