Following significant pressure from groups such as OpenDemocracy and Foxglove the UK government has released its data sharing contracts with companies such as Amazon, Google and Microsoft for the creation of a cloud database for sharing covid-19 related data. Contracts with AI firms Planatir and Faculty were also released.
This promotes transparency and accountability around efforts to establish contract tracing technology and centralised databases to combat covid-19. The potential access to high volumes of healthcare data via these databases merits high levels of scrutiny under privacy and data protection laws. However, groups such as openDemocracy raised concerns around sharing high volumes of NHS data and the risk posed by significant third party exposure. In particular, it criticized the credibility of AI firms Planatir and Faculty.
In a recent press release from openDemocracy the contracts were made public:
View Google NHS agreements (PDF, 0.7 MB)
View Faculty NHS agreements (PDF, 0.9 MB)
View Palantir NHS agreements (PDF, 11.6 MB)
View Microsoft NHS agreements (PDF, 1.5 MB)
NHS England has also released the Data Protection Impact Assessment which was undertaken prior to forming a centralised data storage facility for covid-19 related data. This database holds data ranging from regional infection maps to 911 call data and bed capacities.
The NHS uses a ‘cloud first’ approach to ensuring that data is leveraged most effectively. All data is collated in a cloud database allowing for security and accessibility.
Meghan Markle’s claim against Associated Newspapers regarding the publication of a letter she wrote to her father has had its preliminary hearing on 24 April 2020, as reported by the BBC. Continue reading
INFORRM has an excellent two part post on Meghan Markle’s action for misuse of private information against the Associated Newspapers. Continue reading
INFORRM has published my selection of Privacy and Data Protection Cases from throughout 2019.
The piece provides a succinct summary of the most influential cases throughout the year, caselaw which will likely impact the regulatory space for years to come.
Happy New Year readers!
This year we again are publishing our thoughts on the Top 10 Defamation cases of the year.
This covers the top 10 defamation cases jurisdictionally from across the UK, US, Canada, Australia and New Zealand.
Case will be ranked on the strength of the precedence they set, including thier impact on the jurisdictions legal framework.
Many thanks to INFORRM for orginally agreeing to post this article.
Privacy International (“PI”) has scrutinized Amazon’s contact with the Department of Health to harvest data for Alexa services. The contract started from 14 December 2018 and will be in effect till 15 October 2024.
The contract covers Amazon using the data of the NHS website and integrating it with Alexa, allowing Alexa to better respond to medical questions. This permits Alexa to better respond to a range of medical questions with the vetted information available from the NHS website. Readers should note that the arrangement DOES NOT SHARE THIRD-PARTY HEALTHCARE DATA. The focus is permitting Alexa to access the NHS website’s publically available data to enhance its response to heathcare questions. Patient data, as far as we know, was not part of the agreement.
PI then goes on to scrutinize the contract in detail giving an overview of the key terms and conditions. The article also covers the commercial vs public interest issues arising from the redaction of parts of the contract, raising matters of transparency in government contracting.
The sharing of data under this agreement permits Alexa to use data gathered from the NHS website. This is for informational purposes as the site is typically a first port of call for those concerned about symptoms. By integrating this data Amazon helps Alexa enhance its service offering. It has notably been said, by the Guardian, that such accessibility was granted free of charge.
Sites you visit, applications you use and services you take all have privacy policies – but what are they and why are they important, despite many people just check boxing them? Continue reading
Security Boulevard has a great piece unpacking the terminology behind privacy. Including- what is meant by data privacy as opposed to data protection? What is the significance of this?
The terminology used around privacy has been changing as fast as the privacy landscape has. In this context it is important to keep ahead of the language used to formulate and express privacy ideas. Security Boulevard does just that in its recent post.
It’s definition typically focuses on the zonal nature of privacy. Thus the fact that it can be lost, breached or reformulated.