Privacy versus Public Health? A Reassessment of Centralised and Decentralised Digital Contact Tracing.

At the beginning of the COVID-19 pandemic, high hopes were placed on digital contact tracing. Digital contact tracing apps can now be downloaded in many countries, but as further waves of COVID-19 tear through much of the northern hemisphere, these apps are playing a less important role in interrupting chains of infection than anticipated. We argue that one of the reasons for this is that most countries have opted for decentralised apps, which cannot provide a means of rapidly informing users of likely infections while avoiding too many false positive reports. Centralised apps, in contrast, have the potential to do this. But policy making was influenced by public debates about the right app configuration, which have tended to focus heavily on privacy, and are driven by the assumption that decentralised apps are "privacy preserving by design". We show that both types of apps are in fact vulnerable to privacy breaches, and, drawing on principles from safety engineering and risk analysis, compare the risks of centralised and decentralised systems along two dimensions, namely the probability of possible breaches and their severity. We conclude that a centralised app may in fact minimise overall ethical risk, and contend that we must reassess our approach to digital contact tracing, and should, more generally, be cautious about a myopic focus on privacy when conducting ethical assessments of data technologies.

Ensuring ethical data access: the Sierra Leone Ebola Database (SLED) model.

PURPOSE: Organizations responding to the 2014-2016 Ebola epidemic in Sierra Leone collected information from multiple sources and kept it in separate databases, including distinct data systems for Ebola hot line calls, patient information collected by field surveillance officers, laboratory testing results, clinical information from Ebola treatment and isolation facilities, and burial team records. METHODS: After the conclusion of the epidemic, the Sierra Leone Ministry of Health and Sanitation and the U.S. Centers for Disease Control and Prevention partnered to collect these disparate records and consolidate them in the Sierra Leone Ebola Database. RESULTS: The Sierra Leone Ebola Database data are providing a lasting resource for postepidemic data analysis and epidemiologic research, including identifying best strategies in outbreak response, and are used to help families locate the graves of family members who died during the epidemic. CONCLUSION: This report describes the Ministry of Health and Sanitation and Centers for Disease Control and Prevention processes to safeguard Ebola records while making the data available for public health research.

From "Informed" to "Engaged" Consent: Risks and Obligations in Consent for Participation in a Health Data Repository.

The development and use of large and dynamic health data repositories designed to support research pose challenges to traditional informed consent models. We used semi-structured interviewing (n=44) to elicit diverse research stakeholders' views of a model of consent appropriate to participation in initiatives that entail collection, long-term storage, and undetermined future research use of multiple types of health data. We demonstrate that, when considering health data repositories, research stakeholders replace a concept of consent as informed with one in which consent is engaged. In engaged consent, a participant's ongoing relationship with a repository serves as a substitute or adjunct to information exchange at enrollment. We detail research stakeholders' views of the risks of engaged consent and suggest questions for further study about engagement and consent procedures in initiatives that aim to store data for future unspecified research purposes.

Health sciences library outreach to family caregivers: a call to service.

This commentary discusses the information needs of family caregivers and care recipients in the United States. Health sciences library services and outreach activities that support family caregivers include: (1) advocacy, (2) resource building, and (3) programming and education. Ethical issues related to the privacy and confidentiality of clients are outlined in the commentary for information service providers. Also, continuing professional education resources are identified to assist librarians in providing high-quality information services for this special family caregiver population, such as those designed by the National Library of Medicine (NLM) through the NLM 4 Caregivers program.

Population data science: advancing the safe use of population data for public benefit.

The value of using population data to answer important questions for individual and societal benefit has never been greater. Governments and research funders world-wide are recognizing this potential and making major investments in data-intensive initiatives. However, there are challenges to overcome so that safe, socially-acceptable data sharing can be achieved. This paper outlines the field of population data science, the International Population Data Linkage Network (IPDLN), and their roles in advancing data-intensive research. We provide an overview of core concepts and major challenges for data-intensive research, with a particular focus on ethical, legal, and societal implications (ELSI). Using international case studies, we show how challenges can be addressed and lessons learned in advancing the safe, socially-acceptable use of population data for public benefit. Based on the case studies, we discuss the common ELSI principles in operation, we illustrate examples of a data scrutiny panel and a consumer panel, and we propose a set of ELSI-based recommendations to inform new and developing data-intensive initiatives.We conclude that although there are many ELSI issues to be overcome, there has never been a better time or more potential to leverage the benefits of population data for public benefit. A variety of initiatives, with different operating models, have pioneered the way in addressing many challenges. However, the work is not static, as the ELSI environment is constantly evolving, thus requiring continual mutual learning and improvement via the IPDLN and beyond.

The Adoption of Cloud Computing in the Field of Genomics Research: The Influence of Ethical and Legal Issues.

This study aims to understand the influence of the ethical and legal issues on cloud computing adoption in the field of genomics research. To do so, we adapted Diffusion of Innovation (DoI) theory to enable understanding of how key stakeholders manage the various ethical and legal issues they encounter when adopting cloud computing. Twenty semi-structured interviews were conducted with genomics researchers, patient advocates and cloud service providers. Thematic analysis generated five major themes: 1) Getting comfortable with cloud computing; 2) Weighing the advantages and the risks of cloud computing; 3) Reconciling cloud computing with data privacy; 4) Maintaining trust and 5) Anticipating the cloud by creating the conditions for cloud adoption. Our analysis highlights the tendency among genomics researchers to gradually adopt cloud technology. Efforts made by cloud service providers to promote cloud computing adoption are confronted by researchers' perpetual cost and security concerns, along with a lack of familiarity with the technology. Further underlying those fears are researchers' legal responsibility with respect to the data that is stored on the cloud. Alternative consent mechanisms aimed at increasing patients' control over the use of their data also provide a means to circumvent various institutional and jurisdictional hurdles that restrict access by creating siloed databases. However, the risk of creating new, cloud-based silos may run counter to the goal in genomics research to increase data sharing on a global scale.

Realising the technological promise of smartphones in addiction research and treatment: An ethical review.

BACKGROUND: Smartphone technologies and mHealth applications (or apps) promise unprecedented scope for data collection, treatment intervention, and relapse prevention when used in the field of substance abuse and addiction. This potential also raises new ethical challenges that researchers, clinicians, and software developers must address. AIMS: This paper aims to identify ethical issues in the current uses of smartphones in addiction research and treatment. METHODS: A search of three databases (PubMed, Web of Science and PsycInfo) identified 33 studies involving smartphones or mHealth applications for use in the research and treatment of substance abuse and addiction. A content analysis was conducted to identify how smartphones are being used in these fields and to highlight the ethical issues raised by these studies. RESULTS: Smartphones are being used to collect large amounts of sensitive information, including personal information, geo-location, physiological activity, self-reports of mood and cravings, and the consumption of illicit drugs, alcohol and nicotine. Given that detailed information is being collected about potentially illegal behaviour, we identified the following ethical considerations: protecting user privacy, maximising equity in access, ensuring informed consent, providing participants with adequate clinical resources, communicating clinically relevant results to individuals, and the urgent need to demonstrate evidence of safety and efficacy of the technologies. CONCLUSIONS: mHealth technology offers the possibility to collect large amounts of valuable personal information that may enhance research and treatment of substance abuse and addiction. To realise this potential researchers, clinicians and app-developers must address these ethical concerns to maximise the benefits and minimise risks of harm to users.

A review of linked health data in Australian nephrology.

Linked health data bring together data about one person from varying sources such as administrative health datasets, death registries and clinical registries using a process that maintains patient privacy. Linked health data have been used for burden of disease estimates and health-care planning and is being increasingly use as a research methodology to study health service utilisation and patient outcomes. Within Australian nephrology, there has been limited understanding and use of linked health data so far, but we expect that with the increasing availability of data and the growing complexity of health care, the use of such data will expand. This is especially pertinent for the growing elderly population with advanced kidney disease, who are poorly represented in other types of research studies. This article summarizes the history of linked health data in Australia, the nature of available datasets in Australia, the methods of access to these data, privacy and ethical issues, along with strengths, limitations and implications for the future.

Tightrope walking towards maximising secondary uses of digitised health data: a qualitative study.

BACKGROUND: Timely progress with attaining benefits from Health Information Technology (HIT) investments requires UK policymakers and others to negotiate challenges in developing structures and processes to catalyse the trustworthy secondary uses of HIT-derived data. AIMS: We aimed to uncover expert insights into perceived barriers and facilitators for maximising safe and secure secondary uses of HIT-derived data in the UK. METHODS: We purposively selected individuals from a range of disciplines in the UK and abroad to participate in a thematically analysed, semi-structured interview study. RESULTS: We identified a main theme of 'tightrope walking' from our interviews (n = 23), reflecting trying to balance different stakeholders' views and priorities, with sub-themes of 'a culture of caution', 'fuzzy boundaries' and 'cultivating the ground'. The public interest concept was fundamental to interviewees' support for secondary uses of HIT-derived data. Small scale and prior collaborative relationships facilitated progress. Involving commercial companies, improving data quality, achieving proportionate governance and capacity building remained challenges. CONCLUSIONS: One challenge will be scaling up data linkage successes more evident internationally with regional population datasets. Within the UK, devolved nations have the advantage that 'small scale' encompasses national datasets. Proportionate governance principles developed in Scotland could be more widely applicable, while lessons on public engagement might be learned from Western Australia. A UK policy focus now should be on expediting large-scale demonstrator projects and effectively communicating their findings and impact. Progress could be jeopardised if national data protection laws were superseded by any Europen Union-wide regulation governing personal data.

Harmonising and linking biomedical and clinical data across disparate data archives to enable integrative cross-biobank research.

A wealth of biospecimen samples are stored in modern globally distributed biobanks. Biomedical researchers worldwide need to be able to combine the available resources to improve the power of large-scale studies. A prerequisite for this effort is to be able to search and access phenotypic, clinical and other information about samples that are currently stored at biobanks in an integrated manner. However, privacy issues together with heterogeneous information systems and the lack of agreed-upon vocabularies have made specimen searching across multiple biobanks extremely challenging. We describe three case studies where we have linked samples and sample descriptions in order to facilitate global searching of available samples for research. The use cases include the ENGAGE (European Network for Genetic and Genomic Epidemiology) consortium comprising at least 39 cohorts, the SUMMIT (surrogate markers for micro- and macro-vascular hard endpoints for innovative diabetes tools) consortium and a pilot for data integration between a Swedish clinical health registry and a biobank. We used the Sample avAILability (SAIL) method for data linking: first, created harmonised variables and then annotated and made searchable information on the number of specimens available in individual biobanks for various phenotypic categories. By operating on this categorised availability data we sidestep many obstacles related to privacy that arise when handling real values and show that harmonised and annotated records about data availability across disparate biomedical archives provide a key methodological advance in pre-analysis exchange of information between biobanks, that is, during the project planning phase.

The Research on Medical Education Outcomes (ROMEO) Registry: Addressing Ethical and Practical Challenges of Using "Bigger," Longitudinal Educational Data.

PROBLEM: Efforts to evaluate and optimize the effectiveness of medical education have been limited by the difficulty of designing medical education research. Longitudinal, epidemiological views of educational outcomes can help overcome limitations, but these approaches require "bigger data"-more learners, sources, and time points. The rich data institutions collect on students and residents can be mined, however, ethical and practical barriers to using these data must first be overcome. APPROACH: In 2008, the authors established the Research on Medical Education Outcomes (ROMEO) Registry, an educational data registry modeled after patient registries. New York University School of Medicine students, residents, and fellows provide consent for routinely collected educational, performance, quality improvement, and clinical practice data to be compiled into a deidentified, longitudinal database. As of January 2015, this registry included 1,225 residents and fellows across 12 programs (71% consent rate) and 841 medical students (86% consent rate). Procedures ensuring voluntary informed consent are essential to ethical enrollment and data use. Substantial resources are required to provide access to and manage the data. OUTCOMES: The registry supports educational scholarship. Seventy-two studies using registry data have been presented or published. These focus on evaluating the curriculum, quality of care, and measurement quality and on assessing needs, competencies, skills development, transfer of skills to practice, remediation patterns, and links between education and patient outcomes. NEXT STEPS: The authors are working to integrate assessment of relevant outcomes into the curriculum, maximize both the quantity and quality of the data, and expand the registry across institutions.

The acceptability of conducting data linkage research without obtaining consent: lay people's views and justifications.

BACKGROUND: A key ethical issue arising in data linkage research relates to consent requirements. Patients' consent preferences in the context of health research have been explored but their consent preferences regarding data linkage specifically have been under-explored. In addition, the views on data linkage are often those of patient groups. As a result, little is known about lay people's views and their preferences about consent requirements in the context of data linkage. This study explores lay people's views and justifications regarding the acceptability of conducting data linkage research without obtaining consent. METHODS: A qualitative study explored lay people's views regarding consent requirements in data linkage via four hypothetical data linkage scenarios of increasing complexity. Prior to considering the scenarios, participants were provided with information regarding best practice data linkage processes via discussion and a diagrammatic representation of the process. RESULTS: Lay people were able to understand the intricate processes involved in data linkage and the key protections afforded within a short amount of time. They were supportive of data linkage research and, on the whole, believed it should be conducted without consent provided a data linkage organization de-identifies the data used so that researchers do not handle identifiable data. Many thought that de-identified data holds a different status to identifiable data and should be used without specific consent in research that aims to benefit society. In weighing up conflicting values and interests, participants shifted consent preferences before arriving at their final consent preference for each scenario and provided justifications for their choices. They considered the protection of people's information, societal benefits, and the nature and constraints of research and recognized that these need to be balanced. CONCLUSIONS: With some exposure to the features of data linkage, lay people have the capacity to understand the processes sufficiently in order to consider ethical issues associated with consent preferences. Shifts in views reveal the complexity of such decisions. While privacy protection remained an important consideration for most participants, adequate protection measures adopted in best practice data linkage were viewed by most as protection enough for data linkage to proceed without specific individual consent.

On moving targets and magic bullets: Can the UK lead the way with responsible data linkage for health research?

PURPOSE: To provide an overview of essential elements of good governance of data linkage for health-related research, to consider lessons learned so far and to examine key factors currently impeding the delivery of good governance in this area. Given the considerable hurdles which must be overcome and the changing landscape of health research and data linkage, a principled, proportionate, risk-based approach to governance is advocated. DISCUSSION: In light of the considerable value of data linkage to health and well-being, the United Kingdom aspires to design and deliver good governance in health-related research. A string of projects have been asking: what does good governance look like in data linkage for health research? It is argued here that considerable progress can and must be made in order to develop the UK's contribution to future health and wealth economies, particularly in light of mis-start initiatives such as care.data in NHS England. Discussion centres around lessons learned from previous successful health research initiatives, identifying those governance mechanisms which are essential to achieving good governance. CONCLUSION: This article suggests that a crucial element in any step-increase of research capability will be the adoption of adaptive governance models. These must recognise a range of approaches to delivering safe and effective data linkage, while remaining responsive to public and research user expectations and needs as these shift and change with time and experience. The targets are multiple and constantly moving. There is not--nor should we seek--a single magic bullet in delivering good governance in health research.

Factors Influencing Consent for Electronic Data Linkage in Urban Latinos.

Within the context of patient participation in a Learning Health System, this study examined consent rates and factors associated with consent for linking survey data with electronic clinical data in a sample of 2,271 Latinos. Consent rate was 96.3%. Government insurance status and health literacy significantly influenced the odds of consent.

Considerations for use of dental photography and electronic media in dental education and clinical practice.

Photography and electronic media are indispensable tools for dental education and clinical practice. Although previous research has focused on privacy issues and general strategies to protect patient privacy when sharing clinical photographs for educational purposes, there are no published recommendations for developing a functional, privacy-compliant institutional framework for the capture, storage, transfer, and use of clinical photographs and other electronic media. The aims of this study were to research patient rights relating to electronic media and propose a framework for the use of patient media in education and clinical care. After a review of the relevant literature and consultation with the University of Washington's director of privacy and compliance and assistant attorney general, the researchers developed a privacy-compliant framework to ensure appropriate capture, storage, transfer, and use of clinical photography and electronic media. A four-part framework was created to guide the use of patient media that reflects considerations of patient autonomy and privacy, informed consent, capture and storage of media, and its transfer, use, and display. The best practices proposed for capture, storage, transfer, and use of clinical photographs and electronic media adhere to the health care code of ethics (based on patient autonomy, nonmaleficence, beneficence, justice, and veracity), which is most effectively upheld by a practical framework designed to protect patients and limit institutional liability. Educators have the opportunity and duty to convey these principles to students who will become the next generation of dentists, researchers, and educators.

An evaluation of a data linkage training workshop for research ethics committees.

BACKGROUND: In Australia research projects proposing the use of linked data require approval by a Human Research Ethics Committee (HREC). A sound evaluation of the ethical issues involved requires understanding of the basic mechanics of data linkage, the associated benefits and risks, and the legal context in which it occurs. The rapidly increasing number of research projects utilising linked data in Australia has led to an urgent need for enhanced capacity of HRECs to review research applications involving this emerging research methodology. The training described in this article was designed to respond to an identified need among the data linkage units in the Australian Population Health Research Network (PHRN) and HREC members in Australia. METHODS: Five one-day face to face workshops were delivered in the study period to a total of 98 participants. Participants in the workshops represented all six categories of HREC membership composition listed in the National Health and Medical Research Centres' (NHMRC) National Statement on Ethical Conduct in Human Research. Participants were assessed at three time points, prior to the training (T1), immediately after the training (T2) and 8 to 17 months after the training (T3). RESULTS: Ninety participants completed the pre and post questionnaires; 58 of them completed the deferred questionnaire. Participants reported significant improvements in levels of knowledge, understanding and skills in each of the eight areas evaluated. The training was beneficial for those with prior experience in the area of ethics and data linkage as well as those with no prior exposure. CONCLUSIONS: Our preliminary work in this area demonstrates that the provision of intensive face to face ethics training in data linkage is feasible and has a significant impact on participant's confidence in reviewing HREC applications.