{"id":90177,"date":"2021-03-23T19:54:31","date_gmt":"2021-03-23T19:54:31","guid":{"rendered":"https:\/\/www.innovationaus.com\/?p=16721"},"modified":"2021-03-23T19:54:31","modified_gmt":"2021-03-23T19:54:31","slug":"ama-raises-alarm-over-data-sharing-plan","status":"publish","type":"post","link":"https:\/\/radiofree.asia\/2021\/03\/23\/ama-raises-alarm-over-data-sharing-plan\/","title":{"rendered":"AMA raises alarm over data sharing plan"},"content":{"rendered":"

The Australian Medical Association <\/strong>has sounded the alarm over the federal government\u2019s flagship new data-sharing scheme, warning there are no minimum privacy protections and that private health information could be shared with insurance firms.<\/p>\n

The government introduced the Data Availability and Transparency Act to Parliament in December last year, after nearly three years of development and consultation. The legislation facilitates a significant expansion of the sharing of public sector data between agencies and private organisations, sometimes without consent.<\/p>\n

It will provide a \u201cnew path\u201d for the sharing of this data that is currently blocked by secrecy provisions or other laws and will see far more identified data be shared among agencies and departments, and for de-identified data be shared with universities and think tanks, among other organisations.<\/p>\n

\"people\"
People: The AMA has concerns about sharing of health data<\/figcaption><\/figure>\n

There will be no opt-out options from the data-sharing scheme for individuals, and consent will be required unless it is \u201cunreasonable or impracticable to obtain\u201d.<\/p>\n

The legislation was quickly referred to a Senate committee for an inquiry, which is expected to table its report by the end of April.<\/p>\n

In a submission to the inquiry, the Australian Medical Association (AMA) said it is \u201cimpossible to overstate\u201d how concerned it is about the new laws.<\/p>\n

The organisation\u2019s primary concern is that the bill does not include minimum privacy protections, with agencies allowed to determine their own privacy settings for sharing data. The legislation merely requires agencies to be satisfied that the sharing principles are being applied in a way that \u201crisks associated with the sharing are appropriately mitigated\u201d.<\/p>\n

These principles are also \u201cinherently subjective\u201d, the AMA said.<\/p>\n

\u201cThis means that, unless an agency had no regard to the data sharing principles or failed to comply with other procedural requirements, it would be difficult to \u2018second guess\u2019 their decision,\u201d the AMA submission said.<\/p>\n

\u201cThis leaves the public with little comfort that they will have redress \u2013 or that the officials and agency will be penalised \u2013 if decisions are made recklessly or negligently.\u201d<\/p>\n

There is also no power for the Data Commissioner to have to approve of the sharing of data before it happens, or to require changes to this plan.<\/p><\/blockquote>\n

The AMA called on the government to make amendments requiring all of the data principles be satisfied before any data is shared, for decisions to share data to be subject to review by the Administrative Appeals Tribunal and for the Commissioner to have more powers to intervene.<\/p>\n

The medical body raised concern that the new powers will see healthcare information, such as from the MBS and PBS, being shared with private health funds for \u201ctheir own purposes\u201d, which is currently prohibited by law.<\/p>\n

\u201cIt makes no sense to preclude My Health Record data from the data sharing scheme, but then permit the same MBS \/ PBS data to be directly shared with private health insurers. This is not consistent with the public\u2019s expectations and has the potential to undermine the community-rated private health insurance system,\u201d the submission said.<\/p>\n

The data-sharing scheme only requires consent to be obtained from individuals \u201cunless it is unreasonable or impracticable to seek their consent\u201d, and this could lead to very personal information being shared without consent, the AMA said.<\/p>\n

\u201cIt is entirely foreseeable that this exception will be used to justify the disclosure of MBS and PBS datasets of identified or identifiable sensitive health information without patient consent,\u201d it said.<\/p>\n

The bill allows agencies and departments to undertake the de-identification of personal data in-house, with them only having to \u201cconsider\u201d the use of accredited data service providers.<\/p>\n

\u201cThe well-publicised privacy breaches involving Medicare provider numbers and Myki travel information demonstrate well-intentioned officers may not be trained to appropriately anonymise personal information,\u201d the AMA said.<\/p>\n

The medical body said the de-identification of any data should be outsourced by default, and any decision not to do this should be subject to AAT review.<\/p>\n

The scheme does not allow individuals to make complaints about the sharing of their data, with the only avenues being the Commonwealth Ombudsman and the Office of the Australian Information Commissioner. And as the AMA points out, the agencies and departments only have to comply with the new legislation to prove there has not been an interference with privacy.<\/p>\n

\u201cThis means that they will have no grounds for complaint and no right to seek compensation, regardless of how poor the agencies\u2019 processes were or the inadequacies of their risk assessment processes,\u201d the AMA said.<\/p>\n

The government should amend the legislation to make the complaints process less legalistic and to empower individuals to make complaints to the Data Commissioner, and to allow these complaints to be anonymous.<\/p><\/blockquote>\n

The Data Commissioner also came under question in the AMA submission for its conflict of interest.<\/p>\n

As the explanatory memorandum sets out, the Commissioner will \u201cprovide advice, advocacy and guidance to ensure the scheme operates as intended\u201d, while it will also \u201cwork with data scheme entities to build data capability, promote best practice data sharing and use and address cultural barriers to sharing\u201d.<\/p>\n

This dual role of advocating for the sharing of data while also regulating the sharing of data is troublesome, the AMA said.<\/p>\n

\u201cIf an agency seeks advice from the Data Commissioner prior to entering into a data sharing agreement, there is a potential conflict at the point of providing advice between the Data Commissioner\u2019s role of promoting safety and their role of promoting sharing,\u201d it said.<\/p>\n

\u201cMoreover, if the data is subsequently re-identified or a complaint is made, the Data Commissioner will be investigating a data sharing agreement that they advised on.\u201d<\/p>\n

The Privacy Commissioner should be given a greater role to combat this conflict of interest, the AMA recommended.<\/p>\n

A bipartisan group of senators have also questioned the data-sharing legislation, specifically raising concerns over a lack of detail in the legislation and the absence of privacy safeguards.<\/p>\n

The post AMA raises alarm over data sharing plan<\/a> appeared first on InnovationAus<\/a>.<\/p>\n\n

This post was originally published on InnovationAus<\/a>. <\/p>","protected":false},"excerpt":{"rendered":"

The Australian Medical Association has sounded the alarm over the federal government\u2019s flagship new data-sharing scheme, warning there are no minimum privacy protections and that private health information could be shared with insurance firms. The government introduced the Data Availability and Transparency Act to Parliament in December last year, after nearly three years of development…<\/p>\n

The post AMA raises alarm over data sharing plan<\/a> appeared first on InnovationAus<\/a>.<\/p>\n","protected":false},"author":626,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1916,1892],"tags":[],"_links":{"self":[{"href":"https:\/\/radiofree.asia\/wp-json\/wp\/v2\/posts\/90177"}],"collection":[{"href":"https:\/\/radiofree.asia\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/radiofree.asia\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/radiofree.asia\/wp-json\/wp\/v2\/users\/626"}],"replies":[{"embeddable":true,"href":"https:\/\/radiofree.asia\/wp-json\/wp\/v2\/comments?post=90177"}],"version-history":[{"count":1,"href":"https:\/\/radiofree.asia\/wp-json\/wp\/v2\/posts\/90177\/revisions"}],"predecessor-version":[{"id":90178,"href":"https:\/\/radiofree.asia\/wp-json\/wp\/v2\/posts\/90177\/revisions\/90178"}],"wp:attachment":[{"href":"https:\/\/radiofree.asia\/wp-json\/wp\/v2\/media?parent=90177"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/radiofree.asia\/wp-json\/wp\/v2\/categories?post=90177"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/radiofree.asia\/wp-json\/wp\/v2\/tags?post=90177"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}