I'm struggling a bit with the level of personal data I'm happy to entrust to the government.
On the one hand, I've just had my retinas scanned so that I can sail through passport queues at Heathrow. The following night I had a weird dream where I was pretending not to be me, and a policeman was scanning my eyes in a dark room. All very 1984, and a (hopefully?) unwarranted fear.
On the other hand, it seems that all of our personal medical details are about to be uploaded onto a system which isn't needed, isn't secure, and isn't being widely discussed. The following comes from a relative who knows a lot more about data protection than I do, and whose opinion I trust:
One of my
responsibilities is the use to which we put personal data in the company and I
am genuinely horrified by the Government's project to put everyone's
medical records on computer, accessible not only by NHS staff across
the country but also other government agencies. The contrast between
the duties put on commercial organisations to keep data confidential and this project, known
as the Spine project, is breathtaking.
I don't think that
anyone has a particular problem with name, NHS number, blood group,
allergies etc being kept on a system but it is the breadth of
information kept, lack of consent, and huge numbers of people who have
access that particularly concern me.
There have been a number of articles published but the latest is here:
http://www.guardian.co.uk/medicine/story/0,,1936473,00.html
and the concerns in this article haven't gone away:
http://society.guardian.co.uk/e-public/story/0,,1654153,00.html
If you share my
concern, here is a draft letter that Ross Anderson, professor of
security engineering at Cambridge University suggests you send to the
Department of Health, with a copy to your GP:
The Secretary of State for Health
Richmond House
79 Whitehall Terrace
London SW1A 2NS
And send the same letter to your GP.
It should say:
Dear Sir/ Madam
I
require you not to begin processing my sensitive personal data to the
proposed NHS Summary Care Record on the Spine. It is likely to cause me
substantial unwarranted distress because:
1. No 'sealed envelopes' yet exist to limit access
2. No online patient system yet exists to correct errors
3. Data uploaded may include genetic, psychological or sexual information
4. It is intended to make my data available to social workers, researchers and commercial firms
5. My consent will not be asked before beginning processing
6. Adequate criminal penalties against abuse do not yet exist
7.
Police and other agencies can gain access to a potentially unlimited
range of information about me. There is abundant evidence that computer
databases - including police, vehicle licensing and banking computers -
are routinely penetrated by private investigators on behalf of clients,
including media organisations
8. 250,000 smart cards have been issued granting access to the Spine
9. The department threatens to withhold appropriate medical care to objectors
10. Doctors say there is no necessity to design the Spine in this way
For
these reasons, among others, I strongly fear that I am in danger of
having false or damaging health information fall into the wrong hands.
My privacy is being unnecessarily violated.
Yours faithfully
Since she wrote this, things appear to have got worse: see the recent entries on Ross Anderson's blog.
Have I missed the coverage on this? Or is this just not being talked about enough?