Will Blockchain Technology Usher in a Healthcare Data Revolution?
The hacker collective known as the Dark Overlord first surfaced in June 2016, when it advertised more than 600,000 patient files from three U.S. healthcare organizations for sale on the dark web. The group, which also attempted to extort ransom from its victims, soon offered another 9 million records pilfered from health insurance companies and provider networks across the country.
Since 2009, federal regulators have counted nearly 5,000 major data breaches in the United States alone, affecting some 260 million individuals.
Last October, apparently seeking publicity as well as cash, the hackers stole a trove of potentially scandalous data from a celebrity plastic surgery clinic in London—including photos of in-progress genitalia- and breast-enhancement surgeries. "We have TBs [terabytes] of this shit. Databases, names, everything," a gang representative told a reporter. "There are some royal families in here."
Bandits like these are prowling healthcare's digital highways in growing numbers. Since 2009, federal regulators have counted nearly 5,000 major data breaches in the United States alone, affecting some 260 million individuals. Although hacker incidents represent less than 20 percent of the total breaches, they account for almost 80 percent of the affected patients. Such attacks expose patients to potential blackmail or identity theft, enable criminals to commit medical fraud or file false tax returns, and may even allow hostile state actors to sabotage electric grids or other infrastructure by e-mailing employees malware disguised as medical notices. According to the consulting agency Accenture, data theft will cost the healthcare industry $305 billion between 2015 and 2019, with annual totals doubling from $40 billion to $80 billion.
Blockchain could put patients in control of their own data, empowering them to access, share, and even sell their medical information as they see fit.
One possible solution to this crisis involves radically retooling the way healthcare data is stored and shared—by using blockchain, the still-emerging information technology that underlies cryptocurrencies such as Bitcoin. And blockchain-enabled IT systems, boosters say, could do much more than prevent the theft of medical data. Such networks could revolutionize healthcare delivery on many levels, creating efficiencies that would reduce medical errors, improve coordination between providers, drive down costs, and give researchers unprecedented insights into patterns of disease. Perhaps most transformative, blockchain could put patients in control of their own data, empowering them to access, share, and even sell their medical information as they see fit. Widespread adoption could result in "a new kind of healthcare economy, in which data and services are quantifiable and exchangeable, with strong guarantees around both the security and privacy of sensitive information," wrote W. Brian Smith, chief scientist of healthcare-blockchain startup PokitDok, in a recent white paper.
Around the world, entrepreneurs, corporations, and government agencies are hopping aboard the blockchain train. A survey by the IBM Institute for Business Value, released in late 2016, found that 16 percent of healthcare executives in 16 countries planned to begin implementing some form of the technology in the coming year; 90 percent planned to launch a pilot program in the next two years. In 2017, Estonia became the first country to switch its medical-records system to a blockchain-based framework. Great Britain and Dubai are exploring a similar move. Yet in countries with more fragmented health systems, most notably the U.S., the challenges remain formidable. Some of the most advanced healthcare applications envisioned for blockchain, moreover, raise technological and ethical questions whose answers may not arrive anytime soon.
By creating a detailed, comprehensive, and immutable timeline of medical transactions, blockchain-based recordkeeping could help providers gauge a patient's long-term health patterns in a way that's never before been possible.
What Exactly Is Blockchain, Anyway?
To understand the buzz around blockchain, it's necessary to grasp (at least loosely) how the technology works. Ordinary digital recordkeeping systems rely on a central administrator that acts as gatekeeper to a treasury of data; if you can sneak past the guard, you can often gain access to the entire hoard, and your intrusion may go undetected indefinitely. Blockchain, by contrast, employs a network of synchronized, replicated databases. Information is scattered among these nodes, rather than on a single server, and is exchanged through encrypted, peer-to-peer pathways. Each transaction is visible to every computer on the network, and must be approved by a majority in order to be successfully completed. Each batch of transactions, or "block," is date- and time-stamped, marked with the user's identity, and given a cryptographic code, which is posted to every node. These blocks form a "chain," preserved in an electronic ledger, that can be read by all users but can't be edited. Any unauthorized access, or attempt at tampering, can be quickly neutralized by these overlapping safeguards. Even if a hacker managed to break into the system, penetrating deeply would be extraordinarily difficult.
Because blockchain technology shares transaction records throughout a network, it could eliminate communication bottlenecks between different components of the healthcare system (primary care physicians, specialists, nurses, and so on). And because blockchain-based systems are designed to incorporate programs known as "smart contracts," which automate functions previously requiring human intervention, they could reduce dangerous slipups as well as tedious and costly paperwork. For example, when a patient gets a checkup, sees a specialist, and fills a prescription, all these actions could be automatically recorded on his or her electronic health record (EHR), checked for errors, submitted for billing, and entered on insurance claims—which could be adjudicated and reimbursed automatically as well. "Blockchain has the potential to remove a lot of intermediaries from existing workflows, whether digital or nondigital," says Kamaljit Behera, an industry analyst for the consulting firm Frost & Sullivan.
The possible upsides don't end there. By creating a detailed, comprehensive, and immutable timeline of medical transactions, blockchain-based recordkeeping could help providers gauge a patient's long-term health patterns in a way that's never before been possible. In addition to data entered by their caregivers, individuals could use app-based technologies or wearables to transmit other information to their records, such as diet, exercise, and sleep patterns, adding new depth to their medical portraits.
Many experts expect healthcare blockchain to take root more slowly in the U.S. than in nations with government-run national health services.
Smart contracts could also allow patients to specify who has access to their data. "If you get an MRI and want your orthopedist to see it, you can add him to your network instead of carrying a CD into his office," explains Andrew Lippman, associate director of the MIT Media Lab, who helped create a prototype healthcare blockchain system called MedRec that's currently being tested at Beth Israel Deaconess Hospital in Boston. "Or you might make a smart contract to allow your son or daughter to access your healthcare records if something happens to you." Another option: permitting researchers to analyze your data for scientific purposes, whether anonymously or with your name attached.
The Recent History, and Looking Ahead
Over the past two years, a crowd of startups has begun vying for a piece of the emerging healthcare blockchain market. Some, like PokitDok and Atlanta-based Patientory, plan to mint proprietary cryptocurrencies, which investors can buy in lieu of stock, medical providers may earn as a reward for achieving better outcomes, and patients might score for meeting wellness goals or participating in clinical trials. (Patientory's initial coin offering, or ICO, raised more than $7 million in three days.) Several fledgling healthcare-blockchain companies have found powerful corporate partners: Intel for Silicon Valley's PokitDok, Kaiser Permanente for Patientory, Philips for Los Angeles-based Gem Health. At least one established provider network, Change Healthcare, is developing blockchain-based systems of its own. Two months ago, Change launched what it calls the first "enterprise-scale" blockchain network in U.S. healthcare—a system to track insurance claim submissions and remittances.
No one, however, has set a roll-out date for a full-blown, blockchain-based EHR system in this country. "We have yet to see anything move from the pilot phase to some kind of production status," says Debbie Bucci, an IT architect in the federal government's Office of the National Coordinator for Health Information Technology. Indeed, many experts expect healthcare blockchain to take root more slowly here than in nations with government-run national health services. In America, a typical patient may have dealings with a family doctor who keeps everything on paper, an assortment of hospitals that use different EHR systems, and an insurer whose system for processing claims is separate from that of the healthcare providers. To help bridge these gaps, a consortium called the Hyperledger Healthcare Working Group (which includes many of the leading players in the field) is developing standard protocols for blockchain interoperability and other functions. Adding to the complexity is the federal Health Insurance and Portability Act (HIPAA), which governs who can access patient data and under what circumstances. "Healthcare blockchain is in a very nascent stage," says Behera. "Coming up with regulations and other guidelines, and achieving large-scale implementation, will take some time."
The ethical implications of buying and selling personal genomic data in an electronic marketplace are doubtless open to debate.
How long? Behera, like other analysts, estimates that relatively simple applications, such as revenue-cycle management systems, could become commonplace in the next five years. More ambitious efforts might reach fruition in a decade or so. But once the infrastructure for healthcare blockchain is fully established, its uses could go far beyond keeping better EHRs.
A handful of scientists and entrepreneurs are already working to develop one visionary application: managing genomic data. Last month, Harvard University geneticist George Church—one of the most influential figures in his discipline—launched a business called Nebula Genomics. It aims to set up an exchange in which individuals can use "Neptune tokens" to purchase DNA sequencing, which will be stored in the company's blockchain-based system; research groups will be able to pay clients for their data using the same cryptocurrency. Luna DNA, founded by a team of biotech veterans in San Diego, plans a similar service, as does a Moscow-based startup called the Zenome Project.
Hossein Rahnama, CEO of the mobile-tech company Flybits and director of research at the Ryerson Centre for Cloud and Context-Aware Computing in Toronto, envisions a more personalized way of sharing genomic data via blockchain. His firm is working with a U.S. insurance company to develop a service that would allow clients in their 20s and 30s to connect with people in their 70s or 80s with similar genomes. The young clients would learn how the elders' lifestyle choices had influenced their health, so that they could modify their own habits accordingly. "It's intergenerational wisdom-sharing," explains Rahnama, who is 38. "I would actually pay to be a part of that network."
The ethical implications of buying and selling personal genomic data in an electronic marketplace are doubtless open to debate. Such commerce could greatly expand the pool of subjects for research in many areas of medicine, enabling the kinds of breakthroughs that only Big Data can provide. Yet it could also lead millions to surrender the most private information of all—the secrets of their cells—to buyers with less benign intentions. The Dark Overlord, one might argue, could not hope for a more satisfying victory.
These scenarios, however, are pure conjecture. After the first web page was posted, in 1991, Lippman observes, "a whole universe developed that you couldn't have imagined on Day 1." The same, he adds, is likely true for healthcare blockchain. "Our vision is to make medical records useful for you and for society, and to give you more control over your own identity. Time will tell."
Friday Five: These boots were made for walking, even for people who can't
The Friday Five covers important stories in health and science research that you may have missed - usually over the previous week but, today, we're doing a lookback on breakthrough research over the month of October. There are plenty of controversies and troubling ethical issues in science – and we get into many of them in our online magazine – but this news roundup focuses on scientific creativity and progress to give you a therapeutic dose of inspiration headed into the weekend.
Listen on Apple | Listen on Spotify | Listen on Stitcher | Listen on Amazon | Listen on Google
This Friday Five episode covers the following studies published and announced over the past month:
- New boots could have you moving like Iron Man
- The problem with bedtime munching
- The perfect recipe for tiny brains
- The best sports for kids to avoid lifelong health risks
- Can virtual reality reduce pain?
Should egg and sperm donors reveal their identities? The debate pivots on genetics and medical history.
Until age 35, Cassandra Adams assumed her mother and father were her biological parents. Then she took saliva tests through two genealogy databases—23andMe and AncestryDNA—and discovered a discrepancy in her heritage. In bringing up the matter with her parents, she learned that fertility issues had led the couple to use a sperm donor.
“Most people my age were not told,” said Adams, now 40 and a stay-at-home mom in Jersey City, New Jersey, who is involved with donor-conception advocacy. “Even now, there’s still a lot of secrecy in the industry. There are still many parents who aren’t truthful or planning not to be truthful with their children.”
While some of those offspring may never know a significant part of their medical history, Adams is grateful that she does. Surprisingly, the DNA test revealed Jewish ancestry.
“There are a lot more genetic conditions that run in Jewish families, so it was really important that I get my medical history, because it’s very different from my dad who raised me,” said Adams, who has met her biological father and two of three known half-siblings. As a result of this experience, she converted to Judaism. “It has been a big journey,” she said.
In an era of advancing assisted reproduction technologies, genetics and medical history have become front and center of the debate as to whether or not egg and sperm donations should be anonymous – and whether secrecy is even possible in many cases.
Obstacles to staying anonymous
People looking to become parents can choose what’s called an “identity-release donor,” meaning their child can receive information about the donor when he or she turns 18. There’s no way to ensure that the donor will consent to a relationship at that time. Instead, if a relationship between the donor and child is a priority, parents may decide to use a known donor.
The majority of donors want to remain anonymous, said reproductive endocrinologist Robert Kiltz, founder and director of CNY Fertility in Syracuse, New York. “In general, egg and sperm donation is mostly anonymous, meaning the recipient doesn’t know the donor and the donor doesn’t know the recipient.”
Even if the donor isn’t disclosed, though, the mystery may become unraveled when a donor-conceived person undergoes direct-to-consumer genetic testing through ancestry databases, which are growing in number and popularity. These services offer DNA testing and links to relatives with identifiable information.
In the future, another obstacle to anonymity could be laws that prohibit anonymous sperm and egg donations, if they catch on. In June, Colorado became the first state in the nation to ban anonymous sperm and egg donations. The law, which takes effect in 2025, will give donor-conceived adults the legal authority to obtain their donor’s identity and medical history. It also requires banks that provide sperm and egg collection to keep current medical records and contact information for all donors. Meanwhile, it prohibits donations from those who won’t consent to identity disclosures.
“The tradition of anonymous sperm or egg donation has created a vast array of problems, most significantly that the people thus created want to know who their mommy and daddy are,” said Kenneth W. Goodman, professor and director of the Institute for Bioethics and Health Policy at the University of Miami Miller School of Medicine.
“There are counter arguments on both sides. But the current situation has led to great uncertainty and, in many cases, grief,” Goodman said.
Donors should bear some moral responsibility for their role in reproduction by allowing their identity to be disclosed to donor-conceived individuals when they turn 18, Goodman added, noting that “there are counter arguments on both sides. But the current situation has led to great uncertainty and, in many cases, grief.”
Adams, the Jersey City woman who learned she was Jewish, has channeled these feelings into several works of art and performances on stage at venues such as the Jersey City Theater Center. During these performances, she describes the trauma of “not knowing where we come from [or] who we look like.”
In the last five years, Kathleen “Casey” DiPaola, a lawyer in Albany, New York, who focuses her practice on adoption, assisted reproduction and surrogacy, has observed a big shift toward would-be parents looking to use known sperm donors. On the other hand, with egg donation, “I’m not seeing a whole lot of change,” she said. Compared to sperm donation, more medical screening is involved with egg donation, so donors are primarily found through fertility clinics and egg donor agencies that prefer anonymity. This leads to fewer options for prospective parents seeking an egg donor with disclosed identity, DiPaola said.
Some donors want to keep in touch
Rachel Lemmons, 32, who lives in Denver, grew interested in becoming an egg donor when, as a graduate student in environmental sciences, she saw an online advertisement. “It seemed like a good way to help pay off my student loan debt,” said Lemmons, who is married and has a daughter who will turn 2-years-old in December. She didn’t end up donating until many years later, after she’d paid off the debt. “The primary motivation at that point wasn’t financial,” she said. “Instead, it felt like a really wonderful way to help someone else have a family in a few weeks’ time.”
Lemmons originally donated anonymously because she didn’t know open donations existed. She was content with that until she became aware of donor-conceived individuals’ struggles. “It concerned me that I could potentially be contributing to this,” she said, adding that the egg donor and surrogacy agency and fertility clinic wouldn’t allow her to disclose her identity retroactively.
Since then, she has donated as an open donor, and kept in touch with the recipients through email and video calls. Knowing that they were finally able to have children is “incredibly rewarding,” Lemmons said.
When to tell the kids
Stanton Honig, professor of urology and division chief of sexual and reproductive medicine at Yale School of Medicine, said for years his team has recommended that couples using donor sperm inform children about the role of the donor and their identity. “Honesty is always the best policy, and it is likely that when they become of age, they might or will be able to find out about their biological sperm donor,” he said. “Hiding it creates more of a complicated situation for children in the long run.”
Amy Jones, a 45-year-old resident of Syracuse, N.Y., has three children, including twins, who know they were conceived with anonymous donor eggs from the same individual, so they share the same genetics. Jones, who is a registered nurse and asked for her real name not to be published, told them around age seven.
“The thought of using a known donor brought more concerns—what if she wanted my babies after they were born, or how would I feel if she treated them as her own every time I saw her?” said Jones.
“I did a lot of reading, and all psychologists said that it is best to start the conversation early,” she recalled. “They understood very little of what I was telling them, but through the years, I have brought it up in discussion and encouraged them to ask questions. To this day, they don't seem to be all that interested, but I expect that later on in life they may have more questions.”
Jones and her husband opted to use a donor because premature ovarian failure at age 27 had rendered her infertile. “The decision to use an egg donor was hard enough,” she said. “The thought of using a known donor brought more concerns—what if she wanted my babies after they were born, or how would I feel if she treated them as her own every time I saw her?”
Susan C. Klock, a clinical psychologist in the section of fertility and reproductive medicine at Northwestern University Feinberg School of Medicine, said, “Anonymity is virtually impossible in the age of direct-to-consumer genetic testing.” In addition, “selecting an identity-release donor is typically not the first thing parents are looking at when they select a donor. First and foremost, they are looking for a donor with a healthy medical background. Then they may consider donor characteristics that resemble the parents.”
The donor’s medical history can be critical
Donor agencies rely on the self-reported medical history of egg and sperm donors, which can lead to gaps in learning important information. Knowing a donor’s medical history may have led some families to make different or more well-informed choices.
After Steven Gunner, a donor-conceived adult, suffered from schizophrenia and died of a drug overdose at age 27 in 2020, his parents, who live in New York, learned of a potential genetic link to his mental illness. A website, Donor Sibling Registry, revealed that the sperm donor the couple had used, a college student at the time of donation, had been hospitalized during childhood for schizophrenia and died of a drug overdose at age 46. Gunner’s story inspired Steven’s Law, a bill that was introduced in Congress in July. If passed, it would mandate sperm banks to collect information on donors’ medical conditions, and donors would have to disclose medical information the banks weren’t able to find.
With limited exceptions, the U.S. Food and Drug Administration requires donors to be screened and tested for relevant communicable disease agents and diseases such as HIV, hepatitis viruses B and C, the Zika virus and several STDs. With current technology, it is also impossible to screen for thousands of rare genetic diseases. “If a couple is using IVF (in vitro fertilization) to conceive with the donor gamete, some may opt for pre-implantation genetic testing to assess for chromosomal abnormalities,” Klock said.
Even these precautions wouldn't cover every disease, and some would-be parents don't get the genetic screening. In a situation where one donor has a large number of offspring, it is concerning that he or she can spread a rare disease to multiple people, said Nick Isel, 37, of Yorkville, Illinois, who was conceived with donor sperm due to his parents’ fertility issues. They told him the truth when he was a teenager, and he found his biological father with a journalist’s help.
Since 2016, Isel, who owns a roofing company, has been petitioning the FDA to extend the retention of medical records, requiring the fertility establishment to maintain information on sperm and egg donors for 50 years instead of the current 10-year mandate.
“The lack of family health information,” he said, “is an ongoing, slow-motion public health crisis since donor conception began being regulated by the FDA as a practice.”