Quote Of The Year

Timeless Quotes - Sadly The Late Paul Shetler - "Its not Your Health Record it's a Government Record Of Your Health Information"

or

H. L. Mencken - "For every complex problem there is an answer that is clear, simple, and wrong."

Saturday, August 10, 2019

Weekly Overseas Health IT Links – 10th August, 2019.

Here are a few I came across last week.
Note: Each link is followed by a title and few paragraphs. For the full article click on the link above title of the article. Note also that full access to some links may require site registration or subscription payment.
-----

As new cyber risks emerge, strategies evolving – but basic principles still apply

BlueKeep? Dridex? A state of emergency in Louisiana? Healthcare security pros find themselves living in interesting times. But with new threats emerging each day – and old ones, like phishing, not going away – some tried and true lessons are still useful.
August 02, 2019 07:00 AM

In news that will surprise precisely no one, the list of lurking cyber threats putting healthcare data in peril continues to lengthen.
Healthcare, you may have heard by now, has developed a reputation among hackers, cyberattackers and assorted other bad actors as an industry that's both "target-rich and easy pickings." As such, it finds itself in the crosshairs of innumerable hackers and bad actors hoping to harvest mission-critical data or otherwise wreak havoc on healthcare IT systems.
Just look at the most recent HIMSS Healthcare and Cross-Sector Cybersecurity Report for a snapshot of where we are. The report offers a menagerie of creatively-named new species of malware of which to beware:
  • Agent Smith (it infects Android devices and surreptitiously replaces their applications with malicious mobile apps); 
  • WannaHydra (an updated version of WannaLocker, which can harvest text information, call logs, phone numbers); 
  • The Astaroth Trojan spam campaign (an information-stealing malware that can swipe sensitive data such as credentials, keystrokes, and more); 
  • Sodin ransomware (it exploits a vulnerability in the Oracle WebLogic platform; unlike other ransomware, it doesn't require any user involvement).
-----

Encryption standards for medical devices ‘need to be mandatory’

Encryption standards need to be legally enforced to “shut the back door” on potential cyber security breaches that could put people’s lives at risk, an internet of things (IoT) company has warned.
Andrea Downey – 31 July, 2019
Pangea Connected’s system developer, Dr Arslan Usman, said IoT medical devices need to be better regulated, including making firmware and software updates “mandatory” for both developers and users, to boost cyber security efforts.
It comes after medical technology company Medtronic identified “potential security vulnerabilities” in a selection of its insulin pumps in June.
“The vulnerability allows a potential attacker with special technical skills and equipment to potentially send radio frequency signals to a nearby insulin pump to change settings, impacting insulin delivery,” according to a statement on the company’s website.
-----

DeepMind’s Streams app saves £2,000 per patient, peer review finds

DeepMind’s Streams app could save the NHS an average of £2,000 per patient by alerting clinicians to acute kidney injury sooner, a peer review has found.
Andrea Downey 31 July, 2019
The review, published today, found the app reduced the average cost of admission for a patient with acute kidney injury (AKI) by 17%.
After implementing Streams, which provides clinicians with real time data relevant to AKI management, the average healthcare costs per patient were reduced by £2,123.
Streams has been in use at the Royal Free London NHS Foundation Trust since early 2017. Shortly after rolling the app out, clinicians said it was saving them up to two hours a day.
Before the tool was implemented about 12% of AKI cases were missed, but that number has reduced to 3% with clinicians responding to urgent cases within 15 minutes or less, the peer review found.
-----

Another View: Of cracking the GP IT market

How can innovation flourish in the GP IT market? That is just one of many questions Dr Neil Paul tries to tackle in his latest column for Digital Health where he explores the players involved in introducing technology in primary care.
1 August, 2019
After my last column I was contacted by a person in a UK company who work alongside the NHS. They have a new idea/product that they think could help GPs/NHS. They appear to have money from their main contract so getting off the ground isn’t their problem.
Their problem is who to sell to, where it fits, and I think it’s worth discussing as it fits with problems other companies I have spoken to have.
This company has an app, though I suspect the real IP is the algorithms. The app takes a history direct from the patient and tries to diagnose their musculoskeletal (MSK) problem and then offers advice and self-treatment.
-----

London Lab Advances Use of A.I. in Health Care, but Raises Privacy Concerns

SAN FRANCISCO — Each year, one out of every five patients admitted to a hospital in the United States for serious care develops acute kidney injury.
For a variety of reasons, these patients’ kidneys suddenly stop functioning normally and become unable to properly remove toxins from the bloodstream. The condition can permanently damage the kidneys, cause other illnesses or even lead to death. Acute kidney disease, or A.K.I., contributes to nearly 300,000 deaths in the United States each year, according to a 2016 study.
But if the condition is identified in its early stages and properly treated, it can be stopped or reversed.
In a paper published on Wednesday in the science journal Nature, researchers from DeepMind, a London artificial intelligence lab owned by Google’s parent company, detail a system that can analyze a patient’s health records, including blood tests, vital signs and past medical history, and predict A.K.I. up to 48 hours before onset.

Friday, August 09, 2019

Here We Go Again With The Government Expanding What It Can Use Our Health Data For.

I have to say I am really getting sick of this!
This appeared last week:

Government prepares to match Medicare, Centrelink data to combat fraud

New data-matching initiative follows on heels of controversial ‘robodebt’ program
Rohan Pearce (Computerworld) 29 July, 2019 10:48
The Department of Human Services is preparing to launch a new program that will combine data from Centrelink and Medicare in an effort to unearth discrepancies between records held at the two agencies.
Protocols for the program state that it will seek to find differences in the recording of “life events” for individuals that have records with Medicare and Centrelink.
“Where expected life events have not occurred this may highlight high-risk identities and the need for further analysis to determine possible fraudulent behaviour and/or record correctness,” the document states.
Senior lecturer in administrative law at La Trobe, Darren Donovan, was the first to note the publication of the new protocol.
Human Services’ programs “are a target for identity and other employment and income-based welfare fraud,” the document says. “Data-matching multiple records is more likely to identify recipients who are possibly engaged in premeditated fraudulent activities.”
The department said the program’s objectives include ensuring that Centrelink payments are only made to people that are entitled to them. The department aims to “detect and investigate fraud” and “provide net savings by detecting overpayments and recovering debt”.
Lots more here:
There is further coverage here:

Centrelink to match Medicare data in 'identity fraud' crackdown

By Ry Crozier on Jul 29, 2019 10:07AM

Fresh data-matching project revealed.

Centrelink is preparing a fresh wave of data-matching activity using Medicare data to flag more instances of suspected welfare fraud.
The activity is detailed in a new data protocol published by Centrelink on Friday and first noticed by Darren O’Donovan, a senior lecturer in administrative law at La Trobe University.
The data-matching program is set to target identity, employment or income-based welfare fraud, the agency said, noting that combining multiple datasets could be more effective than current methods.
“The data-matching program is designed to detect false, manipulated and assumed identities used by customers in submitting multiple claims,” Centrelink said in the protocol [pdf].
“It is also designed to detect false information provided by customers relating to employment, medical eligibility and relationship circumstances.
“A key objective of the data-matching program is to make more comprehensive and strategic use of Medicare data, where matches are used to add intelligence value to cases suspected of being fraudulent.”
More here:
Being sensible about this I am keen that by tax dollars are actually not wasted but, given the continuing issues we are seeing with the ‘robo-debt’ saga I believe it might be a good time to just hold back and carefully conduct the program with detailed manual supervision.
This view is rather confirmed by Anthony Albanese talking on Insiders on the ABC on Sunday making the point of the multitude of complaints he has managed on the robo-debt program, most of his constituents have seen either total debt cancellation or huge reductions in the amount owed. Bottom line, these systems are not accurate and need careful manual supervision!
If you are going to run this sort of program you need to get it right – or you will destroy public trust (in spades) as we have seen with the issues around metadata use and data encryption.
No wonder people are staying away from the #myHealthRecord in droves.
David.