Re: [LINK] The "health" record security model

2018-11-16 Thread David
Jim, On Tuesday, 13 November 2018 15:16:33 AEDT Jim Birch wrote: > I'm hearing what appear to me to be a lot of lot of fluffy and > unsubstantiated claims around here. [...] A list of what you think are > actual risks with a real chance of happening would help. Many people, myself included,

Re: [LINK] The "health" record security model

2018-11-14 Thread JLWhitaker
On 13/11/2018 3:16 PM, Jim Birch wrote: I'm hearing what appear to me to be a lot of lot of fluffy and unsubstantiated claims around here. One - or both of us - are off the rails. I don't have a problem changing my mind but I need evidence not narratives. A list of what you think are actual

Re: [LINK] The "health" record security model

2018-11-13 Thread David
Jim, On Tuesday, 13 November 2018 15:16:33 AEDT Jim Birch wrote: > I'm hearing what appear to me to be a lot of lot of fluffy and > unsubstantiated claims around here. [...] A list of what you think are > actual risks with a real chance of happening would help. Many people, myself included,

Re: [LINK] The "health" record security model

2018-11-12 Thread Karl Auer
On Tue, 2018-11-13 at 15:16 +1100, Jim Birch wrote: > I'm not being rhetorically obtuse.  I want explicit information: > risks, likelihood estimates. Can you provide the same for the putative benefits? Come on - explicit information please! > The reason I ask is I believe that this argument is >

Re: [LINK] The "health" record security model

2018-11-12 Thread Bernard Robertson-Dunn
On 13/11/2018 3:16 pm, Jim Birch wrote: > My approach to this would be to ask for solid quantifiable facts. So what > explicit risks do you see? How likely? How serious is the harm? (Most > importantly from my point of view how does it weigh up the the potential > benefits of the shared health

Re: [LINK] The "health" record security model

2018-11-12 Thread Jim Birch
Karl Auer Can you genuinely not see how misuse of medical information might hurt > you, or how a Government might wish to use it for purposes that we the > population may not want or approve of? If you genuinely cannot, then > say so and we will try to elucidate. But I fear you are being >

Re: [LINK] The "health" record security model

2018-11-12 Thread Karl Auer
On Tue, 2018-11-13 at 10:52 +1100, Jim Birch wrote: > David wrote: > > But the problem with MHRecord lies in it's unknown objectives > > Please explain what you imagine these "unknown objectives" might be > in concrete language and how they might hurt me. Can you genuinely not see how misuse of

Re: [LINK] The "health" record security model

2018-11-12 Thread David
On Tuesday, 13 November 2018 10:52:20 AEDT Jim Birch wrote: > David wrote: > But the problem with MHRecord lies in it's unknown objectives > Please explain what you imagine these "unknown objectives" might be in > concrete language and how they might hurt me. It sound very like fairies at >

Re: [LINK] The "health" record security model

2018-11-12 Thread Jim Birch
David wrote: But the problem with MHRecord lies in it's unknown objectives Please explain what you imagine these "unknown objectives" might be in concrete language and how they might hurt me. It sound very like fairies at the bottom on the garden talk. Sorry, goblins. > Longitudinal

Re: [LINK] The "health" record security model

2018-11-12 Thread Karl Auer
On Tue, 2018-11-13 at 09:32 +1100, Jim Birch wrote: > What are your improved design element? How often do we have to point them out? 1: Uploaded documents should be inaccessible by default (except to the user) 2: The user should be able to upload any document. 3: The user should be able to

Re: [LINK] The "health" record security model

2018-11-12 Thread Jim Birch
On Mon, 12 Nov 2018 at 17:28, David wrote: It's not even a document-management system as far as I can tell, it's more > of a badly designed drop-box. > I don't quite understand what you're saying here. It is a document management system as a matter of fact because it actually manages

Re: [LINK] The "health" record security model

2018-11-12 Thread Stephen Loosley
Perhaps of interest, an American doctor’s perspective .. “Sometimes, before I interview new patients, while I’m waiting for them to be transported from the emergency department to the medical floor, I play a game. I look through their lab tests. I peruse their imaging studies. I read other

Re: [LINK] The "health" record security model

2018-11-11 Thread Narelle Clark
On Sun, Nov 11, 2018 at 1:15 PM David wrote: > > People have until next Thursday (or will it be Wednesday?) to opt out. > Well, it just took me 43mins on the phone to opt out after the website wouldn't work for me... And they have the *most* infuriating on hold noise I can come up with. Someone

Re: [LINK] The "health" record security model

2018-11-11 Thread David
On Monday, 12 November 2018 17:06:42 AEDT Jim Birch wrote: > Back to your original question on how long is medical history useful. > > Purpose 1: Short term if you get better, longer as a managed condition. > Purpose 2: Longer term, it allows treatment of the population to be optimised > for

Re: [LINK] The "health" record security model

2018-11-11 Thread David
On Monday, 12 November 2018 15:26:09 AEDT Bernard Robertson-Dunn wrote: > I agree, but myhr isn't the way of the future. All it is is a very bad > document management system with no smarts and huge costs and risks. It's not even a document-management system as far as I can tell, it's more of a

Re: [LINK] The "health" record security model

2018-11-11 Thread Jim Birch
Hi Jan There are three basic reasons for having a shared health record 1. To help the patient by treating their conditions. Primary benefit goes to the patient. 2. To help the health system: to make the system more efficient, basically to treat more people and/or treat them better at the same

Re: [LINK] The "health" record security model

2018-11-11 Thread Bernard Robertson-Dunn
On 12/11/2018 2:45 PM, Andy Farkas wrote: > On 11/11/2018 11:48, David wrote: >> He revealed that medical information (other than a summary of any >> allergies?) isn't held in a structured database but is a collection >> of PDF documents!  Can you imagine a patient lying unconscious in ED >> while

Re: [LINK] The "health" record security model

2018-11-11 Thread Mike
Over the past 2 years I've experienced professionals in the health system at their most impressive.  Two surgeons, three oncologists, two gastroenterologists, two GPs, one hematologist, four hospitals as inpatient, three different hospital EDs, many pathologists, and more.  I soon found that not

Re: [LINK] The "health" record security model

2018-11-11 Thread Bernard Robertson-Dunn
On 12/11/2018 2:01 PM, Jim Birch wrote: > Bernard Robertson-Dunn wrote: > > On 12/11/2018 11:52 AM, Jim Birch wrote: > >   > > Are you aware that when you get a myhr it will be pretty empty and > history will not be uploaded? > > > Of course.  Are you aware that when you buy a house it

Re: [LINK] The "health" record security model

2018-11-11 Thread Karl Auer
On Mon, 2018-11-12 at 13:40 +1100, Jim Birch wrote: > Much smarter would be to drop the perfect security fetish. No-one is demanding "perfect security". They are demanding *some* security. The current model appears to have been designed by a complete fool, OR by someone who wanted to actively

Re: [LINK] The "health" record security model

2018-11-11 Thread Andy Farkas
On 11/11/2018 11:48, David wrote: He revealed that medical information (other than a summary of any allergies?) isn't held in a structured database but is a collection of PDF documents! Can you imagine a patient lying unconscious in ED while a doctor makes a cup of coffee and settles down to

Re: [LINK] The "health" record security model

2018-11-11 Thread Jim Birch
Bernard Robertson-Dunn wrote: > On 12/11/2018 11:52 AM, Jim Birch wrote: > > Are you aware that when you get a myhr it will be pretty empty and > history will not be uploaded? Of course. Are you aware that when you buy a house it is not full of furniture and homely memories? > PBS data

Re: [LINK] The "health" record security model

2018-11-11 Thread Bernard Robertson-Dunn
On 12/11/2018 1:17 PM, Jim Birch wrote: > The vast majority of patients are unable to reliably convey diagnoses, > whether they corpus mentus or not. They can usually converse about their > symptoms but patients with reliable memory of explicit diagnoses are > atypical. > > This may not apply

Re: [LINK] The "health" record security model

2018-11-11 Thread Jim Birch
"The vast majority of patients are able to converse with their doctors, usually in a practice they've been going to for years, and MHRecord is then just more paperwork" The vast majority of patients are unable to reliably convey diagnoses, whether they corpus mentus or not. They can usually

Re: [LINK] The "health" record security model

2018-11-11 Thread JLWhitaker
On 12/11/2018 12:26 PM, Bernard Robertson-Dunn wrote: BTW, only about 20-25% of existing registered users have a shared health summary - which may or may nor be accurate or complete. When 17million more are added that will drop immediately to about 9% Most of the data in a myhr will be old and

Re: [LINK] The "health" record security model

2018-11-11 Thread Bernard Robertson-Dunn
On 12/11/2018 11:52 AM, Jim Birch wrote: > What beats me about this current moral panic is the uninformed flippant > denial of the big positives of the shared health record. Are you aware that when you get a myhr it will be pretty empty and history will not be uploaded? (I'm quoting their little

Re: [LINK] The "health" record security model

2018-11-11 Thread Jim Birch
"The emergency room scenario is freighted with emotion, unstated expectations, time criticality, life-and-death decisions at their most extreme. It might be politically exciting to announce, but in practice a new system will only add to the load on THE most adrenalin-pumped, overworked, pressured

Re: [LINK] The "health" record security model

2018-11-11 Thread David
On Sunday, 11 November 2018 22:24:30 AEDT Karl Auer wrote: > The emergency room scenario is freighted with emotion, unstated expectations, > time criticality, life-and-death decisions at their most extreme. [...] It's also the place where it's critical to know the allergies, drug regimes, and

Re: [LINK] The "health" record security model

2018-11-11 Thread David
On Sunday, 11 November 2018 18:12:05 AEDT Karl Auer wrote: > But mostly I want a statement of aims first. That's absolutely critical. Too many IT projects are launched on the basis of a vague wish-list, unstated objectives, ideology, no prior stakeholder approval (perhaps so not to rock the

Re: [LINK] The "health" record security model

2018-11-10 Thread Karl Auer
On Sun, 2018-11-11 at 16:33 +1100, Bernard Robertson-Dunn wrote: > IMHO, it is more likely that the ALP will kill the thing. Well - OK. But probably not unless they are in Government? > so [ADHA] could meet their self imposed deadline of 1 July 2012. My squint-at-my-thumb estimate would be five

Re: [LINK] The "health" record security model

2018-11-10 Thread Bernard Robertson-Dunn
On 11/11/2018 4:04 PM, Karl Auer wrote: > On Sun, 2018-11-11 at 14:22 +1100, Bernard Robertson-Dunn wrote: >> The elephant in the room is Section 71 of the myhr legislation >> "Prohibitions and authorisations limited to health information >> collected by using the My Health Record system". > As

Re: [LINK] The "health" record security model

2018-11-10 Thread Karl Auer
On Sun, 2018-11-11 at 14:22 +1100, Bernard Robertson-Dunn wrote: > The elephant in the room is Section 71 of the myhr legislation > "Prohibitions and authorisations limited to health information > collected by using the My Health Record system". As was so eloquently said in quite another context

[LINK] The "health" record security model

2018-11-10 Thread Bernard Robertson-Dunn
The elephant in the room is Section 71 of the myhr legislation "Prohibitions and authorisations limited to health information collected by using the My Health Record system". This effectively says, even if there are privacy protections and access controls in the legislation, they don't apply if

Re: [LINK] The "health" record security model

2018-11-10 Thread Roger Clarke
On 11/11/18 12:48, David wrote: > ... But Prof. Vaille described MHRecord as having an appallingly bad IT security model, rather like leaving the bank unlocked because there were penalties for theft. By default, access is allowed and there are no account PINs. Furthermore, individual use is

[LINK] The "health" record security model

2018-11-10 Thread David
ABC Radio National had some interesting programs this (Sunday) morning. Round Table - https://www.abc.net.au/radionational/programs/the-roundtable/my-health-record-privacy-data/10474670 - discussed My Health Record. Two apologists for it had nothing very interesting to say, and much of it