However, Dr Bhatia said patients may not know their information could be used by US companies planning to bid for work for the NHS. "I do not have any confidence the data will not be [given] to the private sector in the US.
Most people in this thread need to read the "What's collected" and "What's not collected" sections in the above link.
In short there's no personally identifiable data being collected by this program.
If you do not want NHS Digital to share your identifiable patient data with anyone else for purposes beyond your own care, then you can also register a National Data Opt-out.
None of it contains personal information so I don't get why anyone would want to opt out?
IT pro Rob Dyke says an NHS-backed company not only threatened him with legal action after he flagged up an exposed GitHub repository containing credentials and insecure code, it even called the police on him.
he told the business he had found a public repo containing the source code for an insecure online portal and its database containing usernames, hashed passwords, email addresses, and API keys.
Are the NHS finally sorting their IT systems out and getting a central database in order…..thank **** for that.
I have access to around 30 different health record systems and that's just for one hospital.
Life would be easier if it was central eg On Friday I had a patients solicitor giving me hell because we hadn't disclosed records from our Trust, after contacting his client he then realised the patient had been to Bristol and Birmingham Trusts also.
Anyway, they can have my data that isn't indentified.
What about them selling your data that is identified?
Data is going to be stripped anyway so you won't be identifiable.
Data is going to be stripped anyway so you won't be identifiable.
Stop spoiling the OPs post by coming out with facts
NHS Digital will not collect patients’ names or addresses. Any other data that could directly identify patients (such as NHS Number, date of birth, full postcode) is replaced with unique codes which are produced by de-identification software before the data is shared with NHS Digital.
This is not being made public, so technically if down the line ones data was shared and used for something other then NHS use, could they not sue under GDPR as they were not notified that their data is being used for something without their consent?
I mean that's why we get all those annoying pop ups on most websites now, right?
The government has declared that this plan is exempt from GDPR for reasons of national security.
Which says:
How would you be identified?
The National Data Opt-out applies to identifiable patient data about your health, which is called confidential patient information.
The page also says:
The National Data Opt-out applies to identifiable patient data about your health, which is called confidential patient information.
No national data opt out = identifiable data traded to third parties.
Why would there be an opt out for trading identifiable patient data from the database if there isn't any identifiable patient data on the database?
The question of how people can be identified from "anonymous" data is a different question, but that's also usually possible by combining datasets. If you have enough data about a person, there's no such thing as anonymous data. It doesn't usually take much. For example, a study in Belgium using "anonymous" data from a mobile phone company was able to personally identify most of the "anonymous" people just by combining the "anonymous" data with publically available information from Twitter. Companies that have access to far more personal information (Google, Facebook, etc), can easily de-anonymise "anonymous" data.
What identifiable data is included if it's not your name or address and things such as NHS Number, date of birth and full postcode are replaced by codes?