Abstract
Profoundly more data-intensive than conventional medicine, precision medicine’s distinctive informational needs present new challenges for healthcare management. Data protection and privacy law are key determinants in precision medicine’s future. This article examines legal and regulatory barriers to the incorporation of precision medicine into healthcare. Specific attention is paid to analyzing recent health privacy laws, court cases, and medical device regulations. Considering the challenges identified, recommendations and guidance are crafted for health leaders with reference to domestic and international initiatives.
Introduction
Profoundly more data-intensive than conventional medicine, precision medicine presents new challenges for health leaders. With its potential for tailored interventions that permit early diagnosis and treatment of disease, precision medicine promises to improve disease prevention and reduce the costs associated with providing care. 1 Such interventions raise the prospect of better targeting resources for those who need them, contributing in turn to the affordability and sustainability of universal healthcare in Canada.
This article examines precision medicine’s informational needs, then focuses on health privacy law and the role health leaders must play in the creation of data-sharing frameworks that will make precision medicine possible. The article then offers guidance and recommendations for health leaders with reference to domestic and international initiatives.
Precision medicine’s informational needs
Making precision medicine a reality implicates health leaders in the creation of healthcare management infrastructure that meets precision medicine’s distinctive informational needs. Before delivering interventions tailored to the individual patient, clinicians must first understand what precisely makes this patient unique vis-à-vis the rest of the population through situating the patient in a rich network of other patients’ health, sociodemographic, and environmental data. Such an approach is in stark contrast to conventional medicine, where clinicians share patient data only for the purpose of treating that same patient. The informational infrastructure of conventional medicine reflects this: “Clinical systems are built to isolate different data sets such as imaging, pathology and laboratory tests…” 2
Precision medicine, by contrast, requires that health data flow from individual medical record into different research contexts and then back into a learning healthcare system. 3 Precision medicine is inextricably intertwined with the research context, presenting a workflow to which many health leaders are not accustomed. More concretely, data collected during the course of clinical care are essential to the study of real-world clinical outcomes, which in turn informs future courses of treatment for other patients. 2 Precision medicine blurs the boundaries between the traditional categories of “clinical” and “research” data by requiring data for multiple purposes.
Big health data
An individual’s genomic data forms the bedrock of precision medicine. With next-generation sequencing techniques, it is now faster and more cost-effective to sequence an entire genome than sequencing a single gene using traditional Sanger techniques. 4 Experience with datasets from The Cancer Genome Atlas and elsewhere has already shown the potential of genomics in clinical settings. 5 –7 For example, we have shifted from speaking of site-specific cancers to ones defined by genetic biomarkers. Parkinson’s is also now understood to be a group of diseases, each one owing to a different genetic mutation. 8
The amount of data required to move beyond cancer and rare diseases, where genomics in healthcare is beginning to show success, should not be underestimated. Due to the diversity of human genomes in modern heterogeneous populations, information from thousands of individual genomes, across diverse populations and contexts, is needed to interpret the information contained in just one. 9
An individual’s genome, however, is just one of multiple important data sources upon which precision medicine relies. The delivery of personalized, precise medical interventions is part of the larger trend of big data in health, defined as “encompass[ing] high volume, high diversity biological, clinical, environmental, and lifestyle information collected from single individuals to large cohorts, in relation to their health and wellness status, at one or several time points.” 10
Such “standardized” contributions of health and genetic information from medical care may well contribute to the well-being of both actual and future patients. Nevertheless, this would require a major shift in healthcare management infrastructure as the need for more data from diverse sources means that hospital managers and political leaders in healthcare systems will have to drive this forward at a time when an emphasis on the privacy protections of personal, individual data is expanding. Moreover, stagnating budgets coupled with growing populations make the cost-saving prospects of targeted medical inventions even more appealing.
More concretely, health leaders must take a broad view of the healthcare system, ensuring that there is strategic oversight of both infrastructure and personnel. Effective coordination and administration of infrastructure such as clinical and laboratory services, information technology (IT) systems, and data interpretation is essential. This infrastructure does not exist in a vacuum. Healthcare professionals will depend on leaders to deliver adequate training, ensuring that this new infrastructure is being effectively used and best practices are disseminated. 11 All the while, health leaders also owe patients a duty to create trustworthy data governance frameworks that accord with patient expectations regarding the privacy of their health data. 12 The UK’s new National Genomic Medicine Service, with its emphasis on coordinating informatics and clinical infrastructure along with workforce development, exemplifies the type of strategy Canadian health leaders should be working toward. 13,14 Indeed, the implementation of precision medicine in healthcare invites leaders to consider the diverse groups they serve and see to it that their needs are met.
Health privacy
Given precision medicine’s distinctive informational needs, health privacy legislation and policy will be key factors shaping medical progress. In recognition of the specificities of Personal Health Information (PHI), almost all Canadian provinces and territories have adopted legislation that governs PHI. At their core, these health privacy laws create a privacy-respecting framework for the collection, use, and disclosure of PHI.
Since just 2015, three new PHI statutes have come into force: Northwest Territories’ Health Information Act (HIA) (October 2015), Yukon’s Health Information and Privacy Management Act (August 2016), and Prince Edward Island’s HIA (July 2017). 15 –17 While our focus is legislation that deals specifically with PHI, it is worth noting that the Canadian federal government, as well as all provinces and territories, have their own public and private sector privacy legislation that governs data that are not PHI.
Defining “identifiable”
For health privacy laws, the essential question is always whether the data are personally identifiable. If not personally identifiable, such data can flow freely, not subject to the duties in the relevant privacy legislation. Data that are subject to privacy legislation change in time, moving in tandem with re-identification techniques and the existence of other samples and data on that person.
Advanced computational techniques associated with big data and genomics in healthcare present two primary difficulties. One is that as techniques evolve, the risk of identification changes over time. Data that would have once been considered de-identified are now no longer. 18 The second issue is that of genomic information’s sensitivity in light of the uniqueness of an individual’s genome. The development of novel re-identification techniques where genetic data are used has greatly narrowed the circumstances in which we can confidently say that the data cannot be traced back to an individual. 19 While researchers pursuing legitimate aims, for example, the identification of redundant individuals in data sets, 20,21 have been responsible for many of such developments, the techniques remain at the disposal of individuals who may act in bad faith.
Health leaders find themselves in a position where maintaining the trust of patients can be difficult. Indeed, a 2017 survey revealed that patients are more reluctant to share medical information in light of reports of data breaches. 22 While prohibitions on re-identifying research participants are often part of data access agreements, the deployment of security safeguards, coupled with the development of accountability and compliance frameworks, is essential in minimizing potential harms flowing from re-identification. 23 Research ethics guidelines also recommend that participants be informed of “reasonably foreseeable risks,” including potential privacy harms. 24
Compounding the problem is the fact that the definition of “identifiable” is uniform in neither law nor genetics literature. Most provinces and territories define identifiable as “reasonably foreseeable from a combination of data.” 15 –17,25 –29 Some provinces, however, define identifiable data as those data that make the identity of a person “readily ascertainable,” 30,31 as allowing for identification, 32,33 or do not clearly define it. 34 The definitions that abound in genetics literature represent a “dangerously inconsistent and confusing set of terms describing the identifiability of genetic data,” 19 which has only gotten worse in recent years.
This Tower of Babel poses a fundamental problem for data sharing. Personal health information custodians must determine whether the data are identifiable and treat it appropriately. Where an information custodian less stringently interprets “identifiable,” they risk sharing data capable of being re-identified outside of the legislation’s protective framework. At the other extreme, an overly cautious interpretation of “identifiable” may result in the needless removal of potentially valuable information from datasets, and worse, no “precise” information going back for the treatment of the individual patient. In this case, we risk stifling progress by leaving information, valuable for both research and care, underutilized. Indeed, it has been recognized that the variations in data regulations among Canadian jurisdictions hinder national and international studies. 35
This challenge is an especially important one for health leaders to confront. Achieving better outcomes does not always require incurring expenses and collecting more data. Rather, health leaders must critically take stock of the data they have and create data-sharing policies that maximize the potential utility that can be derived from such data, while complying with legal requirements.
Consent
Nestled within this complexity is consent, the fulcrum to privacy legislation in Canada. The collection, use, and disclosure of personal information and PHI all require either individual consent or authorization by law. Meaningful, specific, and informed consent is the standard in privacy legislation and in clinical settings, though broad consent, subject to oversight, is recognized for certain research settings, for example, longitudinal studies. Precision medicine, however, with its intimate link to genetic testing challenges the established paradigm in the clinical setting of an individual consenting to a procedure, as often the provision of the resulting genetic at-risk information is “the” treatment.
Biobanks are also becoming part of medical care and are key repositories of genomic and phenotypic information, providing the building blocks for understanding the multivariate relationships a given disease has with an individual. 36 Nonetheless, consent in the context of population biobank research has raised several issues because individuals consent for future, unspecified research purposes at the time biospecimens and data are taken, which will be approved by ethics boards. 37,38 Such broad consent has been recognized by the Government of Canada’s 2014 Tri-Council Policy Statement: Ethical Conduct for Research Involving Humans but not explicitly by legislation. 24 A solution for the next decade of healthcare could be to explicitly mention broad data sharing in medical care and not just research as part of hospital admission notifications while including a possible individual opt out.
Health privacy in the courts
The courts are also shaping the future of precision medicine. In a recent decision, the Quebec Court of Appeal struck down key provisions of the federal Genetic Non-Discrimination Act (2018) that protected individuals from needing to undergo or disclose genetic test results for insurance and employment contracts. 39,40 By reopening the door to legitimate public concerns about genetic discrimination, the decision risks discouraging participation in genetic testing. The very purpose of the sections that the court struck down was to allow access to the benefits of genetic testing without fear that the information could be used against genetic test participants. At the same time, the law had limited scope, internal flaws, and indirectly could be seen as exacerbating genetic exceptionalism. The saga is not over—the Canadian Coalition for Genetic Fairness has initiated an appeal at the Supreme Court of Canada, with a hearing scheduled for October 2019.
In another recent case, a unanimous Supreme Court protected the privacy of patient health records in British Columbia, finding that anonymized healthcare databases did not need to be released as evidence for the benefit of a big tobacco company’s defense. 41 While anonymized databases do not contain “personal” data, the decision forms part of the complex puzzle of maintaining the public’s trust that the privacy of health records will be preserved.
New players in the clinical setting: Cloud storage and AI
Big health data has spurred developments in data processing in the domain of cloud computing and Artificial Intelligence (AI) applications. Notably, the increased reliance of cloud computing to deliver economical, scalable solutions to the needs of big data storage and processing means that entities engaged in healthcare management and delivery are transmitting patient data to Cloud Service Providers (CSPs). This development further complicates the patchwork of laws and regulations in three ways: the division of obligations between data custodians and CSPs is unclear, the assessment of risks involved in transnational data transfers to CSPs is left to ill-equipped data custodians, and the data handling and privacy practices of CSPs are opaque. 42
Implementing machine learning and other so-called AI technologies is one of the key ways we can translate big health data into tangible clinical results. 43 Artificial intelligence technologies have already begun outperforming expert clinicians in the diagnosis of melanoma, metastatic breast cancer, and certain eye diseases. 44 –48 Yet the promise and potential of AI in healthcare is not without issue. Current regulations surrounding genomic software applications and other algorithmic technologies make determining whether such applications are clinical support tools, medical devices, or in vitro diagnostic devices is unclear and has great implications for the continued development and safe adoption of such technologies. 49
Getting strategic about solutions
Are Canadian health leaders sufficiently trained in digital health and its systemic implications? We have seen that the barriers to the creation and management of a healthcare system that delivers on the promise of precision medicine and big health data are diverse. In light of such challenges, Innovation, Science and Economic Development Canada in a 2018 report recommended a national digital health strategy built upon three pillars: interoperable systems, harmonized data and privacy frameworks, and a single electronic health record for every patient. 50 Achieving these goals will not happen without innovative leadership.
Speaking the same language—Defining “identifiable”
Health leaders have a central role to play in developing data-sharing frameworks for their organizations. The choices surrounding when data can be shared greatly relies on what is considered identifiable data. Accordingly, the definition of identifiable should be harmonized across Canada. Defining identifiability as “reasonably foreseeable from a combination of data” not only allows for a definition that responds to context but also aligns with that used in Europe. 51 Likewise, a flexible, context-specific approach should be adopted to the question of de-identification. In a recent report, the Council of Canadian Academies recommended viewing de-identification as a continuum, with access controls responding to the appropriate form of de-identification (eg, anonymization, pseudo-anonymization via coding, etc). 52 Such an approach would not only change the all-or-nothing bite of current privacy legislation but also would be responsive to changing re-identification methods and the purposes for which data are being shared.
The way that we speak about privacy and consent should also develop with advances in medicine and science. In treating privacy either in the abstract, or by solely focusing on hypothetical privacy harms, we fail to take seriously the potential benefits that flow from data sharing. A flexible, responsive approach should be adopted that balances the public’s interest in medical advances spurred by big health data with realistic privacy risks for individuals. Possible ways forward include a three-part privacy test, which takes into account the sensitivity, the potential harm resulting from re-identification, and the expectations of individuals regarding the sharing of their health data. 53 Adopting such an approach would assist in determining the degree of protection such data merits, and, in turn, under which conditions such data can be shared.
Avoiding genomic exceptionalism
We must also avoid falling into the trap of genomic exceptionalism within the privacy debate. Genomic information’s relevance to scientific progress is too great to treat it as a “no-go” zone. Code-protected genomic information should be treated in a way that accords with society’s expectations and responds to realistic potential privacy harms that can result from its improper use.
In recognition of this interdependence of precision medicine and open data, a critical rethinking of current data practices is needed. 54 Opt-out organ donation programs provide inspiration. Individual genomic information would, by default, be shared with clinicians and researchers and be accompanied by notification of this approach with a right to opt out, thereby respecting an individual’s preferences and sensitivities. Similarly, some recommend that automatic sharing of a small number of individual genetic variants (alleles) to be included in the medical record along with limited clinical info become the new norm in medical care. 9
The right to science in Canada
Inspiration can be drawn from the 1948 Universal Declaration of Human Rights and the 1976 International Covenant on Economic, Social and Cultural Rights. Both maintain the human right of everyone to enjoy the benefits of scientific progress and its applications (“the right to science”). Health leaders can help in developing the right in tandem with the informational needs of precision medicine so that everyone may benefit. For example, the Global Alliance for Genomics and Health’s 2014 Framework interprets the right to science as including the duty of scientists to “access and share genomic and health-related data across the translation continuum, from basic research through practical applications.” 55 In a similar vein, the World Health Organization has now begun advocating for global data sharing outside the contexts of public health emergencies, such as in tuberculosis clinical trials. 56
Potential lessons from Australia
Australia’s health leaders, themselves working in a federal country like Canada, have recently shown the kind of strategic, collaborative thinking integrating genomics into healthcare requires. While Australia has a federally administered national health service, the states and territories fund clinical and laboratory genetic services. Founded in 2014, the Australian Genomics Health Alliance is a partnership of 80 hospitals, research institutes, universities, and laboratories, whose aim is to “provide evidence for the equitable, effective and sustainable delivery of genomic medicine in healthcare.” 57 Its current projects include a pilot for a shared, interoperable national database of clinical genomics information. 58
With a view to appropriately harnessing the potential of genomics in the healthcare system, the Council of Australian Governments (COAG) has developed a National Health Genomics Policy Framework, with responsible data practices as one of its five strategic priorities. 59 In 2017, COAG also approved a National Digital Health Strategy, which includes interoperability of data as one of its strategic priorities. 60 In July 2016, the Australian Digital Health Agency was launched, which is tasked with the creation of an electronic health record for all Australians.
Conclusion
We will not achieve precision medicine without engaging health leaders in the construction and management of a learning health system. Such a system relies on big data to enable stratification for targeted allocation both of resources and of medical care. It supports a data trajectory from research to clinic and clinic back to research. Consents to research will necessarily vary by the specific type of research and foresee and facilitate secondary use and linkage along the trajectory. For example, broad consent is needed for longitudinal studies and for research across possibly related diseases and environments. Privacy and security protections should be proportionate to the real risks of re-identifiability. While allowing for opt-out, residual medical care samples and core elements from the medical record could, as mentioned, be automatically shared within the health learning system for improved care for all based on real-time research.
Precision medicine’s informational needs exacerbate the cacophony of privacy frameworks and uncertain regulations and further challenge fundamental concepts such as consent and the now-inextricable role of genomic data in medical care. We consider that the treatment of the informational needs of precision medicine may contribute to making Canada’s universal healthcare system sustainable and affordable for the long term via targeted approaches. Who will lead in crafting the solutions required for sustained dialogue among the panoply of stakeholders precision medicine implicates—patients, clinicians, policy-makers, IT professionals, and others? Precision medicine is simultaneously all about the individual patient and the rest of us actual and future patients, and so implies a radical shift in healthcare systems and their data management. Do we dawdle or deal with it?
