A lot of people are getting quite worried about the NHS Spine, a project to digitize everyone’s medical record to make it easier for doctors, nurses, etc. to provide better, faster care across different locations. Lots of people are worried about whether the government can be trusted to hold all this information securely given their poor record with data protection. So should you be worried? (Well if you live in Scotland, Wales, Northern Ireland or anywhere in the UK that isn’t England the answer is no, because the Spine won’t include you!)
First off, I’d like to say I think digital medical records are a good thing. Certainly, I don’t like the idea that my records could be hacked or stolen (although since the most interesting medical condition I’ve ever had is Salmonella when I was 1 year old, they won’t find much to interest them!). But I think people are blinded to the potential benefits electronic records could bring by their fear that it will be poorly implemented.
I don’t think we will ever be fully ready to digitize our records. It’s too big a project. There’s nothing to be gained from ‘waiting for a bit’ before we do it. It’s time to bite the bullet. Mistakes will probably be made, but so long as the government is honest and careful and responds to these mistakes well, things will not turn out as bad as all the fear mongers would have you believe (hmm, a government that’s honest about the mistakes it’s made, perhaps not…).
So in the end, which is the better solution: centralized database or disseminated, local nodes? The advantage of a central system, I suppose, is that you have highly trained monkeys IT professionals looking after the thing as a whole. They are there all the time and will know the system intimately. If the Tories are suggesting putting a server in every GP surgery, each accessible and editable by the people who’s records it holds, and employing all the necessary security protocols that entails, it’s laughable. I mean, even splinting by individual PCTs would be a nightmare. The suggestion that “IT firms such as Google or Microsoft could host the information” is an interesting juxtaposition to the statement “You want to have your data held locally”. So instead of having a central database run by civil servants, all of whom are at least working for the British Government or contracted by same, we are handing over control of our data to Google, who have one of the worst data privacy records of any major IT company, or Microsoft who… well, the less said about them the better.
Local node represent a logistical problem as well. I don’t think the local IT guy at the rural surgery in Timbuktu would be best placed to maintain a node in a national database. I also have nightmares about some slightly dotty receptionist (or GP, or practice nurse for that matter) accidentally nosing around in the server system and de-encrypting all the data held there. Remember MTAS, and the guy who was fiddling around with URLs and discovered he could access the correspondence of thousands of junior doctors by changing a few characters; and he wasn’t even trying to hack the system.
‘Ah,’ I hear you cry, ‘but surely the same could be said of a national database?’ Well, this is true, but the chances of something going wrong if the system is duplicated in hundreds of poorly monitored locations is far higher.
So really, I think the Conservatives’ plan is a bit of a façade. They recognised that people are not happy handing over their personal data to ‘the man’ and tried to make you feel more comfortable by bringing things closer to home. You’d much rather have your nice, kindly, local GP look after your data, wouldn’t you? Well actually no, I wouldn’t, because if this data is accessible from the internet at large so that “every patient … could update their records” then it doesn’t matter where the data centre physically is; I mean, that’s the point of the internet isn’t it, global access?
So what is the solution? I don’t know. I think in the end, we’re going to end up with something like the Spine. What we need to do now is keep shouting, shout louder and more clearly to the government. We want transparency, we want openness, we want slower and more secure implementation, not quick and dirty, and finally, we want (at least a limited) opt-out system, whereby we could keep all but essential data in paper form for as long as possible. I know it’s a lot to ask, but it’s our data (and we will sue your ass off if you muck it up
).
