Skip to content
Sudonix

Google sued for unauthorised use of NHS data

Privacy
1 1 626 1
  • phenomlabundefined

    Saw this in the news today, and I suspect it’s not restricted to just the UK

    https://news.sky.com/story/google-sued-for-using-the-nhs-data-of-1-6-million-brits-without-their-knowledge-or-consent-12614525

    The Royal Free NHS Trust in London, which gave Google the patient data, was previously told the move was illegal following an investigation by the Information Commissioner’s Office.

    Looks like both The NHS trust itself and Google are going to have the ICO knocking on their doors pretty soon - and not without justifiable reason either. The NHS is also in scope for HIPAA so this is going to be an interesting space to watch.

    Either way, the sale of any data that does not belong to you without formal consent is a breach of GDPR in Europe. I’m guessing Google will have a way of wriggling out of this one, but the fine would be four times the annual turnover of the firm, and not the €25m advertised.

    Completely off-topic, but…is it me, or does the below sound like it was taken from a Json Bourne film 😕 (In the last film, the term “IronHand” made an appearance)

    The company’s artificial intelligence arm, DeepMind

    https://www.bustle.com/articles/175023-what-is-iron-hand-in-jason-bourne-get-ready-to-close-all-your-social-media-accounts

    And despite such a warning… Those with Facebook accounts will continue without a care in the world 🙂

    Mark Cutting also advises organisations as a Fractional CIO, Fractional CISO and Executive Advisor, helping boards improve technology governance, cyber resilience and executive decision making. Learn more at Phenomlab Ltd

    1
  • phenomlabundefined phenomlab marked this topic as a regular topic on
Log in to reply

Related Topics
  • phenomlabundefined

    The plans to put data centres in orbit and on the Moon

    Discussion space data servers
    1
    0 Votes
    1 Posts
    524 Views
    No one has replied
  • JACundefined

    Best Search Engine?

    Discussion google duckduckgo startpage
    13
    1 Votes
    13 Posts
    2k Views
    Madchatthewundefined
    @phenomlab and that is the exact moment you double click on the browser icon and start typing away what you want to search for haha
  • phenomlabundefined

    Google looks to AI paywall option

    Discussion google intelligence
    1
    1 Votes
    1 Posts
    752 Views
    No one has replied
  • DownPWundefined

    ProtonMail Complied with 5,957 Data Requests in 2022 – Still Secure and Private?

    Privacy protonmail security
    8
    12 Votes
    8 Posts
    8k Views
    phenomlabundefined
    @crazycells good question. Gmail being provided by Google is going to be one of the more secure by default out of the box, although you have to bear in mind that you can have the best security in the world, but that is easily diluted by user decision. Obviously, it makes sense to secure all cloud based services with at least 2fa protection, or better still, biometric if available, but email still remains vastly unprotected (unless enforced in the sense of 2fa, which I know Sendgrid do) because of user choice (in the sense that users will always go for the path of least resistance when it comes to security to make their lives easier). The ultimate side effect of taking this route is being vulnerable to credentials theft via phishing attacks and social engineering. The same principle would easily apply to Proton Mail, who also (from memory) do not enforce 2fa. Based on this fact, neither product is more secure than the other without one form of additional authentication at least being imposed. In terms of direct attack on the servers holding mail accounts themselves, this is a far less common type of attack these days as tricking the user is so much simpler than brute forcing a server where you are very likely to be detected by perimeter security (IDS / IPS etc).
  • cagatayundefined

    Profil Photos

    Solved Customisation google
    2
    1 Votes
    2 Posts
    998 Views
    phenomlabundefined
    @cagatay the fastest way to do this would be to modify the auto generated sitemap.xml file so that it does not index users. It might be paint to do the same thing with users in terms of guest permissions. Let me have a look. Edit - you can do this with permissions. Go to /admin/manage/privileges then look in the left where it says guests - remove the tick from the view users permission for guests then click save You can test this out using an incognito or non logged in session. Attempting to view users should then ask you to login.
  • DownPWundefined

    Am I deferred from the Google search hub?

    Solved Configure google research
    6
    0 Votes
    6 Posts
    1k Views
    phenomlabundefined
    @DownPW Yes, exactly.
  • phenomlabundefined

    iPhone Data and privacy

    Privacy apple privacy
    2
    4 Votes
    2 Posts
    1k Views
    phenomlabundefined
    Here’s a very useful video that will walk you through the privacy features of Android - mostly around the ones you should disable to get the most out of the experience
  • crazycellsundefined

    Using PGP encryption for email

    Privacy privacy encryption
    15
    9 Votes
    15 Posts
    4k Views
    phenomlabundefined
    @crazycells Mmmm - yes, sadly, it is only Android (which I use). There are alternatives, but not sure what they are like https://www.topbestalternatives.com/fairemail/ios/