Slashdot Mirror


Google Health Opens To the Public

Several readers noted that the limited pilot test of Google Health has ended, and Google is now offering the service to the public at large. Google Health allows patients to enter health information, such as conditions and prescriptions, find related medical information, and share information with their health care providers (at the patient's request). Information may be entered manually or imported from partnered health care providers. The service is offered free of charge, and Google won't be including advertising. The WSJ and the NYTimes provide details about Google's numerous health partners.

48 of 199 comments (clear)

  1. Privacy by whoever57 · · Score: 5, Insightful

    I for one won't be using it while their terms of service explicitly states that HIPAA doesn't apply to Google.

    --
    The real "Libtards" are the Libertarians!
    1. Re:Privacy by TubeSteak · · Score: 2, Insightful

      How do I opt-out?

      Maybe the laws need to be re-written.
      I can't imagine that Federal & State Law foresaw 3rd party control of medical files.

      --
      [Fuck Beta]
      o0t!
    2. Re:Privacy by kabocox · · Score: 4, Insightful

      I for one won't be using it while their terms of service explicitly states that HIPAA doesn't apply to Google.

      I don't trust Google. I'm of the opinion that companies have to obey the rules/laws of government. I'd rather "trust" the government if they said that HIPAA doesn't apply to Google rather than Google saying that HIPAA doesn't apply to them. There is a part of me that actually hopes that Google gets slapped by the government for violating HIPAA.

    3. Re:Privacy by morgan_greywolf · · Score: 5, Informative

      Okay, here is the government telling you that HIPAA doesn't apply to Google. Google isn't a health care provider, nor is it a health care insurance plan, nor is it a health care clearinghouse, by the legal definitions of those terms (check the law if you like), so, no, HIPAA most certainly does not apply to Google or any other company or entity providing a similar service.

    4. Re:Privacy by jdray · · Score: 3, Informative
      For those who don't want to go digging for the crunchy bits:

      If you create, transmit, or display health or other information while using Google Health, you may provide only information that you own or have the right to use. When you provide your information through Google Health, you give Google a license to use and distribute it in connection with Google Health and other Google services. However, Google may only use health information you provide as permitted by the Google Health Privacy Policy, your Sharing Authorization, and applicable law. Google is not a "covered entity" under the Health Insurance Portability and Accountability Act of 1996 and the regulations promulgated thereunder ("HIPAA"). As a result, HIPAA does not apply to the transmission of health information by Google to any third party.
      --
      The Spoon
      Updated 6/28/2011
    5. Re:Privacy by fluffman86 · · Score: 2, Informative

      Correct, HIPAA doesn't apply to Google, but you should definitely read the differences between Google's Privacy Policy and HIPAA.

      http://www.google.com/health_hipaa.html

      Looks to me like Google is more private than HIPAA.

    6. Re:Privacy by Seoulstriker · · Score: 2, Informative

      Google does not provide medical services, which is why they are not bound to the provisions of HIPAA. HIPPA is a regulation of privacy and portability for providers of medical services, not for companies that act as a storage medium for your personal health information. If people use Excel to store their medical records, will Microsoft somehow be responsible for complying with HIPAA? Of course not.

      --
      I am defenseless. Use your button. Mod me down with all of your hatred.
    7. Re:Privacy by scamper_22 · · Score: 3, Insightful

      I'm Canadian, and I signed in to Google Health just to check it out.
      I find the privacy concerns a bit off beat.

      I do online banking.
      I file my taxes online...

      When is there such sensitivity about my health data. As far I see, it is password protected, and as long as the data is not shared with people outside my 'approved list', I have no issue with it. Google might eventually adopt HIPAA, but I seriously doubt Google will be freely sharing your private information with health insurance providers without your consent. Maybe I trust google too much.

      Quite frankly, I hope google is able to do this securely. I'd love to go to my doctor, and have everything he writes about me be sent to google health. I'd love for test results to be automatically sent to my google profile. The system is in bad need of this kind of electronic health freedom. Right now the medical system is a veil of secrecy.

      As long as it remains opt-in and give you control of what is stored, I think it can only be a good system. I could definitely see people wanting to hide certain diseases like HIV... from their online system. They might be afraid a friend or family member might get into their account.

    8. Re:Privacy by ChristopherEddie · · Score: 5, Interesting

      In times like these, I would trust Google over the government ANY DAY! I'd rather have a creative, for-profit company actually try to make a difference than have the government dick around with tax dollars that companies like Google will end up generating anyway.

  2. Uh oh... by getto+man+d · · Score: 4, Funny

    I can see "Need Liver or Kidneys?" coming about in the recommended searches.

    1. Re:Uh oh... by Pyrrus · · Score: 4, Funny

      I'm concerned about what happens when they combine information about who has healthy kidneys with streetview. And put google ads offering discounts on bathtubs and ice.

  3. I don't feel good, time for Google! by hyperz69 · · Score: 2, Funny

    Let's enter, Chest Pain, Left Arm Numb, Smells of Toast! Ohhh I can earn 950 a day working at home... Let's click that... hey I won a free Ipod... today is my luc. *beeeeeeeeeeeeep*

  4. Re:Wow by thermian · · Score: 2, Interesting

    What bothers me is that all this is built on top of tcp/ip, and that is inherently insecure.
    Given that there exists hardware to inspect packets for p2p traffic, how hard would it be to for a person of unpleasant intent to get hold of some of that and start mining 'encrypted' health information.

    I can see it now, 'want to get health insurance again? Pay us x dollars or we expose condition y to your health insurance provider.'

    Come to think of it, all they'd need to do is pretend they had the info, someone would be bound to be hiding a condition they could hit with random emails.

    --
    A learning experience is one of those things that say, 'You know that thing you just did? Don't do that.' - D. Adams
  5. This is actually Google's spam fighting measure by 140Mandak262Jamuna · · Score: 3, Funny
    All people needing viagra will be notified of cheap imported viagra by Google, and the spammers will lose all their market!

    Just wait till you hear about the plan they have to go after the Nigerian 409 scammers.

    --
    sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
  6. Google Organ Search by JeremyGNJ · · Score: 2, Interesting

    I'm getting ready to start googling for an organ doner when my liver finally gives up on me.

  7. Disclaimer Needed by xpuppykickerx · · Score: 2, Interesting

    Hopefully people will be smart enough to go visit a real doctor, rather than listen to the internet about all their life's little concerns. Sometimes symptoms may be generic to multiple conditions and self diagnosis can do more harm than help. Maybe this will set Darwinism to work at it's full potential.

    1. Re:Disclaimer Needed by Kimos · · Score: 3, Interesting

      In my Canadian province we have a government funded public health nurse phone line line. It exists for people to phone in and speak to a nurse about whatever health problem they're having, and the nurse can give advice on over the counter medication or home treatments, but will always differ to "go see a doctor" as needed. They keep a record of your calls so you can follow up on advice given and changes in your condition. It's really a very good service.

      It exists to alleviate line ups in walk-in clinics and emergency rooms by keeping some of the people with less serious problems from having to go down and see a doctor. This service looks like it will serve a similar purpose.

  8. google information horde by pha7boy · · Score: 5, Insightful

    so, google will have your surfing profile, your financial information, tons of images of you, your house, your friends, your networks, and how will add to it your health information. You know, Big Brother can be a government, but it can also be a corporation. Even one that claims not to do any evil.

    --
    -- All this knowledge is giving me a raging brainer.
    1. Re:google information horde by alen · · Score: 2, Insightful

      the government uses ChoicePoint for it's information needs to bypass laws that prohibit it from gathering data on citizens. Google health can end up selling health data to anyone who asks for any reason

  9. Yes, it has advertising, through "affiliates". by Animats · · Score: 5, Informative

    Yes, Google Health supports advertising. Spamming, even. Read the developer guidelines. Google just doesn't run the ads themselves. That's outsourced to "affiliates".

    There are some rules for affiliates, like "one spam per week per user" and "no popups or popunders". Other than that, consumers are fair game. In particular, affiliates are not prohibited from using Google health data to target ads, as long as they "disclose" that somewhere in their "privacy policy". The policy says "Only use Google Health user data for the purposes disclosed in your privacy policy, and obtain users' opt-in consent if personally identifiable health data will be used for ad targeting." So a bit of fine print, and the affiliate 0wns your health history.

    It's a typical slimeball tactic - pretend to be the good guy, encourage "affiliates" to do the bad stuff.

    1. Re:Yes, it has advertising, through "affiliates". by dmr001 · · Score: 5, Informative
      Oy vey, you folks need to take a step back. The above guidelines refer to other service providers that users can opt in to and share their history with. Google is simply limiting their ability to annoy you, should you choose to opt in.

      And, Google isn't protecting your information via HIPAA because it can't - it's not a "covered entity" under the definition outlined in the law. (That is, they aren't a health provider, billing clearinghouse, or health plan.) Instead, they provide the Google Health Privacy Policy, which seems pretty reasonable. Like HIPAA, it allows them to disclose information when it seems like the government (US, in this case, as that's where the service is limited to) compels it. Before you get hot and bothered, HIPAA allows this too - it's how we tell get to CPS about abused children, for example.

      I'm not new here, but I'm used to Slashdot readers being somewhat more informed before having a fit. As a covered entity myself (I'm a physician), I look forward to the day when the patients who come in saying they doubled the pink pills but lost the yellow ones they took for that surgery to remove that thigamajig have a hope of a secure information repository to clarify their history, and potentially save their bacon.

    2. Re:Yes, it has advertising, through "affiliates". by Uncle+Focker · · Score: 2, Funny

      but I'm used to Slashdot readers being somewhat more informed before having a fit. Since when did this ever happen? I think you're making stuff up.
    3. Re:Yes, it has advertising, through "affiliates". by TheGratefulNet · · Score: 2, Funny

      sorry, but I can't trust a poster who starts out with 'oy vey' and ends with '...bacon'.

      pick one and be consistent.

      --

      --
      "It is now safe to switch off your computer."
  10. Re:Our health is google's wealth by Azghoul · · Score: 2, Funny

    I didn't realize it was mandatory for US citizens to use this service.

    Good to know.

    Also good to know that companies will be using our health history against us. Because they all care about us, individually.

  11. missing drug side effects by jonpublic · · Score: 5, Interesting

    I am dealing with a rare side effect from a fluoroquinolone, (think cipro, levaquin) called peripheral neuropathy. I plugged the antibiotic into google health and the side effect was not listed on the package insert. While its good to have drug interactions listed, lots of people have side effects from drugs and they need to be explicitly spelled out, not hiding in a sub menu.

    I know for a fact that there is explicit warnings on the packages about this particular reaction and I'm livid it isn't warning about it on the package insert in google. Especially since it can be permanent.

    I've racked up a couple thousand dollars in medical bills already from this side effect, and it was a pain to get doctors to admit it happened until I went to a major university hospital. At that hospital they diagnosed me right away and basically said I'd have to wait it out.

    If you are curious, basically I couldn't walk for over a week, terrible joint pain for months along with numbness in my hands, face, and body. Its a known side effect with this class. Rare, but known.

  12. Re:Wow by Bill,+Shooter+of+Bul · · Score: 3, Insightful

    And I don't want them caving into "big infomercial" sleazeballs that tell use phrases like "Big Pharma" to try and persuade potential customers to buy their scientifically unproven snake oil instead.

    --
    Well.. maybe. Or Maybe not. But Definitely not sort of.
  13. Exactly by dreamchaser · · Score: 4, Informative

    You don't opt out. You have to sign up and opt in for them to get your records.

    I agree 100% with GP. I even wrote Google to that effect. Not that I expect them to do anything with my feedback other than send it to the bitbucket.

    This is a horrible, horrible precedent to set, allowing a 3rd party to have access to people's medical records without any protection under the law.

    HIPPA *does* need to be updated, immediately, to cover online databases.

    1. Re:Exactly by Evanisincontrol · · Score: 2, Informative

      Only online access provided by medical providers that are explicitly covered under the Act. This new generation of info-providers such as Google, MS, etc. are NOT covered by HIPPA. Even the Government has said so (link is posted elsewhere in this discussion by someone). That is the third time in a row you've referred to the HIPAA (Health Insurance Portability and Accountability Act) as "HIPPA", even after being corrected by someone else. Is there some reason you keep doing this?
  14. "How does Google make money off Google Health?" by kiscica · · Score: 5, Insightful

    6. If it's free, how does Google make money off Google Health?
    Much like other Google products we offer, Google Health is free to anyone who uses it. There are no ads in Google Health. Our primary focus is providing a good user experience and meeting our users' needs.


    I've heard enough. I don't know what their long-term plan for monetizing Google Health is, and I don't really care now. I don't trust Google enough to consider even for a second entrusting my health care information to them (and I say this as someone who has thought very highly of the company since the beginning). And their weasly answer to the obvious question above, I think, justifies my mistrust.

    Every for-profit company's primary focus is - making a profit. There's nothing whatsoever wrong with this, and the ideal situation arises when "providing a good user experience and meeting [...] users' needs" is aligned with the profit motive.

    So why they can't be honest about their motivations in undertaking an expensive, large-scale project like this -- whatever those motivations are -- instead of trying to make us believe that they're doing it "out of the goodness of their hearts?" All their mealy-mouthedness accomplishes is to raise the suspicion that they've got something nasty up their sleeves. And that ensures that many users, including me, will never entrust their most private of private data to Google.

    1. Re:"How does Google make money off Google Health?" by SCHecklerX · · Score: 5, Insightful

      And you trust your health insurance companies? Their sole purpose is to make profit. We'd be much much better off without them, paying doctors and hospitals directly.

  15. Re:Wow by TubeSteak · · Score: 3, Interesting

    I can see it now, 'want to get health insurance again? Pay us x dollars or we expose condition y to your health insurance provider.' Many States have laws that prevent an insurer from charging sick people a higher premium.
    In other words, if you are in their State, you have to follow their rules, and their rules say your price isn't affected by "condition y".

    On a related note, I read an article stating that part of a McCain proposal would allow insurance companies to change their legal residency for the purpose of using another State's insurance rules. In other words, a New York insurance company can pay taxes in Arizona and use their insurance rules.
    --
    [Fuck Beta]
    o0t!
  16. Google Sex Life by LM741N · · Score: 2, Funny

    Thats the service I want to see offered. With the posting of photos and movie clips allowed. They can build a virtual community of porno providers and consumers. Wait- thats YouTube.

    1. Re:Google Sex Life by ibjhb · · Score: 2, Informative
  17. Re:Wow by Uncle+Focker · · Score: 4, Insightful

    This is especially true if Google doesn't just cave in to "Big Pharma" and allows you to see "alternative" or "herbal" remedies for prescriptions or OTC drugs you have entered. Ugh, I hope Google Health doesn't become such a nexus of snake oil salesmen. Hopefully they will have minimum requirements for the scientific accuracy of medical claims to weed out this nonsense. If you want to be peddled placebos, just stick to Kevin Trudeau and his ilk's infomercials. We don't need Google Health to be infected with such a taint.
  18. You misunderstand HIPPA by dreamchaser · · Score: 5, Informative

    Your medical provider is covered by HIPPA and CANNOT release your records to a third party without your consent. When you go to a new doctor they generally make you sign something saying they can share it with your insurance company, who also cannot share it with Google without your consent.

    The way Google Health works is you give them your data and they store it.

  19. Re:Wow by kestasjk · · Score: 5, Funny

    I had a cold, had some herbal medicine, a few days later my cold was gone. Explain that!

    --
    // MD_Update(&m,buf,j);
  20. Re:Wow by Uncle+Focker · · Score: 4, Informative

    I had a cold, had some herbal medicine, a few days later my cold was gone. I had a cold, didn't take a placebo, a few days later my cold was also gone.

    Explain that! Your immune system did it's job. That's what it's there for.
  21. Weasel words... by AtariDatacenter · · Score: 2, Interesting

    These documents and subdocuments are so full of weasel words, Google could practically do anything they want. Example:

    However, Google may only use health information you provide as permitted by the Google Health Privacy Policy, your Sharing Authorization, and applicable law.

    "YOU did not provide this information. Your doctor's office provided the information, so it is exempt from these policies."

    See? It took me just a quick glance to find a huge conditional that is subject to interpretation. Don't think that companies wouldn't make that argument. And Google does not have an "evil policy", so we don't have a "promise" that they'll not interpret things in a manner we didn't expect.

    And that was just one example.

  22. Note to users: Change your GMail password by chord.wav · · Score: 2, Insightful

    Remember that social site that fooled you to get your gmail account and password so you can "invite" all your friends? Remember that someone told you not to do so because is wasn't safe to make your password public but you didn't listen?

    Well, now you just got a shinny new Penile Prosthesis Insertion - Non-inflatable AND a Penile Prosthesis Insertion- Inflatable.

    Have a nice day.

  23. end user license agreement (EULA) by Benjamin_Wright · · Score: 2, Interesting

    Maybe patients can bolster privacy by inserting legal terms of access (like an end-user license agreement) into the content of their electronic medical records. The idea is not legal advice, just something to think about. --Ben -- Sample terms for public discussion: http://hack-igations.blogspot.com/2008/02/some-fear-law-will-not-accord-adequate.html

    --
    Benjamin Wright, Dallas, Texas, benjaminwright.us
  24. Re:Wow by jaredforshey · · Score: 2

    I was about to say "Geez, can't take a joke?" but then I noticed you're sitting at +5 Insightful, so you must not be alone.

  25. Why not? by RealityThreek · · Score: 5, Insightful
    Why isn't Google a health care clearinghouse?

    Health care clearinghouses include billing services, repricing companies, community health management information systems, and value-added networks and switches if these entities perform clearinghouse functions.
    I'm certainly no expert but I do speak english. Is Google not a "community health management information system"?
    --
    :wq
    1. Re:Why not? by Anonymous Coward · · Score: 4, Informative



      Google is NOT a healthcare clearinghouse (you might reasonably think it meets the definition - I used to think it would as well, but covered clearinghouses are directly linked to care providers, the definition does not cover third party service providers (of medical devices, Customized off the shelf software etc.).

      Regarding HIPAA applicability to google: any HIPAA CE (Covered Entity, which includes most of your health care providers who also use or maintain electronic patient data) MUST include terms in a contractual relationship with a BA (Business Associate - anyone the CE does business with involving patient data) which mirror HIPAA requirements (this is the "Business Associate Rule").

      YOU can release your records to Google, this would involve NO HIPAA issues.

      If your Primary Care Provider is a CE (likely) and they contract with Google (as a health partner etc.) then the terms of that contract MUST include HIPAA protections (i.e. the CE must require, contractually, that the BA meet the same HIPAA requirements which the CE is subject to).

    2. Re:Why not? by Koiu+Lpoi · · Score: 2, Informative

      Neither am I an expert, but my knowledge of clearinghouses says that they need to do things like move checks, money transfers, and whatnot. I don't think just "storing information" qualifies, unfortunately.

  26. Re:Wow by Koiu+Lpoi · · Score: 3, Funny

    Your sense of humor called, it's enjoying palm beach with the kids.

  27. Not Very Technically Adept by TCook · · Score: 2, Interesting

    It would be nice if they provided a way to export my health information to their CCR/G format so I could save it locally.

    I also find it interesting that they are ready, willing and able to share my information with anyone THEY chose.

    From the Agreement:

    '11.2 You agree that this licence includes a right for Google to make such Content available to other companies, organizations or individuals with whom Google has relationships for the provision of syndicated services, and to use such Content in connection with the provision of those services.

    11.3 You understand that Google, in performing the required technical steps to provide the Services to our users, may (a) transmit or distribute your Content over various public networks and in various media; and (b) make such changes to your Content as are necessary to conform and adapt that Content to the technical requirements of connecting networks, devices, services or media. You agree that this licence shall permit Google to take these actions.

    11.4 You confirm and warrant to Google that you have all the rights, power and authority necessary to grant the above licence.'

    This along with the obvious lack of standardized vocabulary use in their user input choices; i.e. two separate yellow fever vaccines just because of a misspelling, doesn't give me a "warm fuzzy" feeling about putting any REAL Personal Health Information (PHI) on their site.

    I get the impression that they have decided that they know all about IT design and failed to learn from the many years of research that has gone into the complexities of healthcare information systems.

  28. This can help us find the "bad" doctors & loca by ivi · · Score: 2, Interesting

    After [Queensland] Australia's & other "Doctor Death" tragedies (in which doctors' many errors have left patients much worse off, or dead...) and other situations, in which doctors sexually abuse or just undulu fondle patients, as part of their "treatment" - a partly public online data base might be just what we need to help find & eradicate "bad" medical professionals.

    Let Google Health be modified to compile results of medical procedures - by the practitioner(s), who perform them - and compare longer-term performance with expected failure & complication rates across the hospital...

    and then compare each hospital's rates to "best practice" - ...ie, to see if practitioners and/or hospitals need retraining or further investigation.

    We could also get very useful (even valuable) data on risks of working / living in certain areas, eg, by post code... if correlations between location and diseases are available to all via Google Health.

    Mapping sources of pollutions & overlaying incidence rate contour lines onto the same maps, might affect property prices... giving folks another [if economic] reason to cleanup the mess before people would move to a new development/location.

    Gov't-held data is already held & analyzed, around the world, to support such analyses; eg:

    While in South Australia, attending a Data Mining seminar (atop the EDS building in Adelaide), I heard some public sector IT managers report how Data Mining - even in -existing- Public Health Service databases - showed useful patterns of disease occuramces vs postcode...
    but another public sector IT manager was quick to poit out that such results would not be made known to members of the public.

    (Tell me: Does this kind of data hiding happen in such places as Sweden? I hope not... but give me the facts & some URLs where they are available; yes, some of us read Swedish here... ;-)

  29. Re:Wow by FishWithAHammer · · Score: 2, Insightful

    If you're a higher risk, you have to provide a higher reward to the company in order to be accepted. Your higher risk is only offset to a degree by their lower risk, and if they know up-front that you're a higher risk there's no reason not to take that into account ahead of time.

    --
    "You can either have software quality or you can have pointer arithmetic, but you cannot have both at the same time."