Google’s top health and cloud executives said the company isn’t misusing health data from one of the biggest US health-care providers, pushing back against news reports that have triggered criticism from lawmakers and prompted a federal inquiry. Google employees only have access to patient information in order to build a new internal search tool for the Ascension hospital network, said David Feinberg, head of Google Health. No patient data is being used for Google’s artificial intelligence research, he added.
The company’s contract is governed by US health privacy law that permits its access to patient records solely for the task of organising Ascension’s health records systems and building a tool to make them easier to search, Feinberg said.
“That’s all we’re allowed to do, and that’s all we are doing,” he said.
Google’s deal with Ascension has been under scrutiny since The Wall Street Journal reported on Monday that the company was collecting identifiable data on millions of Ascension patients and using it to build new products. On Tuesday, the paper reported that the US Department of Health and Human Services’ civil rights office was starting an inquiry into the situation.
The HHS’s Office of Civil Rights “would like to learn more information about this mass collection of individuals’ medical records with respect to the implications for patient privacy under HIPAA,” said Roger Severino, director of the office, in a statement Wednesday. HIPAA is the Health Insurance Portability and Accountability Act, the US law that governs confidentiality and information-sharing in health care and insurance.
Thomas Kurian, CEO of Google Cloud, declined to comment on the inquiry.
Ascension’s health data is being stored on Google Cloud servers but is sequestered so only Ascension employees can access it, according to Google.
“All data is logically siloed to Ascension and housed within a virtual private space encrypted with dedicated keys,” Kurian said. “Google does not sell, share or otherwise combine data from Ascension with any other data.”
Sen. Richard Blumenthal, D-Conn., said Google’s activity was a “blatant disregard for privacy” and “beyond shameful.” News articles and social media posts have questioned why Google needs to collect patient information and speculated that the search giant could eventually use the data for advertising. That isn’t true, Kurian and Feinberg said in a joint interview.
When Google does work with other companies on artificial intelligence research, it always strips out personally identifying information, Kurian said.