Skip to main content

Main menu

  • Home
  • Content
    • Current issue
    • Past issues
    • Early releases
    • Collections
    • Sections
    • Blog
    • Infographics & illustrations
    • Podcasts
    • COVID-19 Articles
  • Authors
    • Overview for authors
    • Submission guidelines
    • Submit a manuscript
    • Forms
    • Editorial process
    • Editorial policies
    • Peer review process
    • Publication fees
    • Reprint requests
    • Open access
  • CMA Members
    • Overview for members
    • Earn CPD Credits
    • Print copies of CMAJ
  • Subscribers
    • General information
    • View prices
  • Alerts
    • Email alerts
    • RSS
  • JAMC
    • À propos
    • Numéro en cours
    • Archives
    • Sections
    • Abonnement
    • Alertes
    • Trousse média 2022
  • CMAJ JOURNALS
    • CMAJ Open
    • CJS
    • JAMC
    • JPN

User menu

Search

  • Advanced search
CMAJ
  • CMAJ JOURNALS
    • CMAJ Open
    • CJS
    • JAMC
    • JPN
CMAJ

Advanced Search

  • Home
  • Content
    • Current issue
    • Past issues
    • Early releases
    • Collections
    • Sections
    • Blog
    • Infographics & illustrations
    • Podcasts
    • COVID-19 Articles
  • Authors
    • Overview for authors
    • Submission guidelines
    • Submit a manuscript
    • Forms
    • Editorial process
    • Editorial policies
    • Peer review process
    • Publication fees
    • Reprint requests
    • Open access
  • CMA Members
    • Overview for members
    • Earn CPD Credits
    • Print copies of CMAJ
  • Subscribers
    • General information
    • View prices
  • Alerts
    • Email alerts
    • RSS
  • JAMC
    • À propos
    • Numéro en cours
    • Archives
    • Sections
    • Abonnement
    • Alertes
    • Trousse média 2022
  • Visit CMAJ on Facebook
  • Follow CMAJ on Twitter
  • Follow CMAJ on Pinterest
  • Follow CMAJ on Youtube
  • Follow CMAJ on Instagram
Commentary
Open Access

The commercialization of patient data in Canada: ethics, privacy and policy

Sheryl Spithoff, Jessica Stockdale, Robyn Rowe, Brenda McPhail and Nav Persaud
CMAJ January 24, 2022 194 (3) E95-E97; DOI: https://doi.org/10.1503/cmaj.210455
Sheryl Spithoff
Department of Family and Community Medicine (Spithoff), Women’s College Hospital; Department of Family and Community Medicine (Spithoff, Persaud), University of Toronto, Toronto, Ont.; Department of Philosophy, School of Media, Arts and Humanities (Stockdale), University of Sussex; Department of Primary Care and Public Health (Stockdale), Brighton and Sussex Medical School, Brighton, UK; Indigenous Data Team (Rowe), Health Data Research Network Canada, Vancouver, BC; ICES (Rowe); Privacy, Technology and Surveillance Project (McPhail), Canadian Civil Liberties Association; MAP Centre for Urban Health Solutions (Persaud), Li Ka Shing Knowledge Institute, St. Michael’s Hospital in Unity Health Toronto; Department of Family and Community Medicine (Persaud), St. Michael’s Hospital in Unity Health Toronto, Toronto, Ont.
  • Find this author on Google Scholar
  • Find this author on PubMed
  • Search for this author on this site
Jessica Stockdale
Department of Family and Community Medicine (Spithoff), Women’s College Hospital; Department of Family and Community Medicine (Spithoff, Persaud), University of Toronto, Toronto, Ont.; Department of Philosophy, School of Media, Arts and Humanities (Stockdale), University of Sussex; Department of Primary Care and Public Health (Stockdale), Brighton and Sussex Medical School, Brighton, UK; Indigenous Data Team (Rowe), Health Data Research Network Canada, Vancouver, BC; ICES (Rowe); Privacy, Technology and Surveillance Project (McPhail), Canadian Civil Liberties Association; MAP Centre for Urban Health Solutions (Persaud), Li Ka Shing Knowledge Institute, St. Michael’s Hospital in Unity Health Toronto; Department of Family and Community Medicine (Persaud), St. Michael’s Hospital in Unity Health Toronto, Toronto, Ont.
  • Find this author on Google Scholar
  • Find this author on PubMed
  • Search for this author on this site
Robyn Rowe
Department of Family and Community Medicine (Spithoff), Women’s College Hospital; Department of Family and Community Medicine (Spithoff, Persaud), University of Toronto, Toronto, Ont.; Department of Philosophy, School of Media, Arts and Humanities (Stockdale), University of Sussex; Department of Primary Care and Public Health (Stockdale), Brighton and Sussex Medical School, Brighton, UK; Indigenous Data Team (Rowe), Health Data Research Network Canada, Vancouver, BC; ICES (Rowe); Privacy, Technology and Surveillance Project (McPhail), Canadian Civil Liberties Association; MAP Centre for Urban Health Solutions (Persaud), Li Ka Shing Knowledge Institute, St. Michael’s Hospital in Unity Health Toronto; Department of Family and Community Medicine (Persaud), St. Michael’s Hospital in Unity Health Toronto, Toronto, Ont.
  • Find this author on Google Scholar
  • Find this author on PubMed
  • Search for this author on this site
Brenda McPhail
Department of Family and Community Medicine (Spithoff), Women’s College Hospital; Department of Family and Community Medicine (Spithoff, Persaud), University of Toronto, Toronto, Ont.; Department of Philosophy, School of Media, Arts and Humanities (Stockdale), University of Sussex; Department of Primary Care and Public Health (Stockdale), Brighton and Sussex Medical School, Brighton, UK; Indigenous Data Team (Rowe), Health Data Research Network Canada, Vancouver, BC; ICES (Rowe); Privacy, Technology and Surveillance Project (McPhail), Canadian Civil Liberties Association; MAP Centre for Urban Health Solutions (Persaud), Li Ka Shing Knowledge Institute, St. Michael’s Hospital in Unity Health Toronto; Department of Family and Community Medicine (Persaud), St. Michael’s Hospital in Unity Health Toronto, Toronto, Ont.
  • Find this author on Google Scholar
  • Find this author on PubMed
  • Search for this author on this site
Nav Persaud
Department of Family and Community Medicine (Spithoff), Women’s College Hospital; Department of Family and Community Medicine (Spithoff, Persaud), University of Toronto, Toronto, Ont.; Department of Philosophy, School of Media, Arts and Humanities (Stockdale), University of Sussex; Department of Primary Care and Public Health (Stockdale), Brighton and Sussex Medical School, Brighton, UK; Indigenous Data Team (Rowe), Health Data Research Network Canada, Vancouver, BC; ICES (Rowe); Privacy, Technology and Surveillance Project (McPhail), Canadian Civil Liberties Association; MAP Centre for Urban Health Solutions (Persaud), Li Ka Shing Knowledge Institute, St. Michael’s Hospital in Unity Health Toronto; Department of Family and Community Medicine (Persaud), St. Michael’s Hospital in Unity Health Toronto, Toronto, Ont.
  • Find this author on Google Scholar
  • Find this author on PubMed
  • Search for this author on this site
  • Article
  • Figures & Tables
  • Related Content
  • Responses
  • Metrics
  • PDF
Loading
KEY POINTS
  • In Canada, commercial data brokers collect deidentified patient data from pharmacies, private drug insurers, the federal government and medical clinics without patient consent.

  • Although pharmaceutical companies are the data brokers’ primary customers, academics and nonprofit and public entities also use commercial data sets, given the absence of a coordinated public approach to collecting these data across Canada.

  • Risks of commercialized patient data include loss of anonymity, surveillance and marketing, discrimination and violation of Indigenous data sovereignty.

  • Coordinated infrastructure for the collection and coordination of health data across Canada and updated privacy legislation would protect individuals and communities and enable appropriate data uses.

In Canada, commercial data brokers are currently able to use deidentified patient data from pharmacies, private drug insurers, the federal government and medical clinics without patient consent. They are able to do this because of a lack of privacy protections for deidentified data. A proposed federal privacy bill, the Consumer Privacy Protection Act (Bill C-11)1 would have halted disclosure of deidentified data to commercial entities, although the bill left some important issues unresolved. However, the bill died when parliament was dissolved in August 2021. Updated legislation should be strengthened to protect patient data and support appropriate uses. We discuss how deidentified patient data are currently being used, potential harms of their use, views of patients and the public about the use of their deidentified data and how legislation can be strengthened to better protect people in Canada.

Studies, including a focus group study in Canada,2–4 have shown public support for secondary uses of patient data (e.g., for research) only if the processes are conducted by a trusted academic or nonprofit research organization and if the analyses provide clear public benefits. When the commercial sector is involved, people are reluctant to share their data, deidentified or not, and they want assurances that data will be used for the public good rather than commercial reasons.2–4 Systematically marginalized groups and communities appear to be less comfortable with sharing data for secondary purposes,2 likely because of past exploitation of their data and ongoing experiences with oppression in the health system.

One multinational data broker, IQVIA, has access to deidentified, patient-level data from most Canadian pharmacies, several private drug plans and the electronic medical records of more than a million people in Canada.3,5,6 Through an agreement with Health Canada, IQVIA also has access to deidentified prescription data from many First Nations and Inuit people.7 More companies may be seeking to enter the health data market. MCI Onehealth Technologies Inc., a Canadian company that owns 25 primary care clinics, recently announced an intent to “unlock both clinical and commercial potential” in the more than 2 million electronic medical records it holds.8

Although pharmaceutical companies are health data brokers’ primary customers,3 academics and nonprofit and public entities also use the Canadian commercial data sets.5 For example, IQVIA data have been used by the Patented Medicines Prices Review Board to evaluate drugs and provide advice to federal, provincial and territorial governments.6 Government and academic researchers use commercial prescription data because no coordinated public approach to collecting these data across Canada yet exists. Without commercial data sets, they would have to cobble together data from regional and provincial sources.

Patients have good reason to be concerned about the commercial collection and use of their deidentified health data. Numerous studies have shown that some individuals can be reidentified in the data sets.9 As computational power and methods improve, reidentification will likely become easier. Although commercial data brokers are unlikely to attempt reidentification themselves, those who purchase or hack the data may venture to do so.9 Additionally, in many Canadian provinces, the commercial data sets contain physician identifiers, enabling pharmaceutical companies to monitor, and directly market to, physicians.3 Marketing to physicians is associated with higher prescribing volumes, lower quality of prescribing and increased costs.10

Even without the loss of anonymity, commercial uses of deidentified data can cause harm. For example, analysts can use deidentified health data to build a sophisticated picture of a specific group and then target tailored marketing messages to people with similar characteristics. This can influence people to act in ways that are not in their self-interest. In one such situation, Facebook used deidentified data to assist advertisers in understanding when teens might be more emotionally susceptible to advertising messages.11

Deidentified patient data may also be used to create proprietary algorithms for commercial use. Such algorithms have been shown to reflect and reinforce societal biases, often contributing to discrimination and systemic oppression, such as racism.12 As commercial algorithms are proprietary, their inherent biases are difficult to detect and to rectify.12

Moreover, commercialization of patient data exacerbates illegitimate access to and control over Indigenous data.13 The United Nations Declaration on the Rights of Indigenous Peoples affirms that Indigenous Peoples have a right to self-determination, including the right to control, protect and develop intellectual property. When deidentified data from Indigenous Peoples are disclosed without adhering to Indigenous-led processes and data principles, it undermines their sovereign rights and perpetuates harms and historical oppressions.13

Bill C-11 was an important first endeavour at providing protections to deidentified personal information. Under the act, entities engaged in commercial activities would be allowed only to disclose deidentified personal information without consent to health care institutions, governments or other specified organizations that are government-mandated to “carry out a socially beneficial purpose.”1 The legislation, however, would have permitted companies that collect personal information to use deidentified data without consent for internal research and development.1 Since many Canadian pharmacies, and an increasing number of medical clinics and virtual care platforms, are owned by large corporations, internal research and development could include very broad uses, such as the development of commercial marketing tools.

Updated legislation should instead require commercial entities to treat deidentified patient data like personal health information. It should prohibit companies from using deidentified patient data for any purpose other than for the provision of clinical care, unless they have consent. The only exception should be disclosure to health care institutions or other specified organizations, as in Bill C-11.1 Legislation should clearly place deidentified patient data within the purview of privacy regulators, as well as ensure transparency and accountability.

To address gaps that will be left if commercial data brokers no longer gather patient data, governments must urgently enable publicly funded and coordinated approaches to data collection across Canada. The collection and use of data should ensure equity, inclusivity and societal benefit (Appendix 1, www.cmaj.ca/lookup/doi/10.1503/cmaj.210455/tab-related-content). Approaches must respect Indigenous data sovereignty and allow systemically marginalized communities to have control over collection and use of their data. Given the past difficulties in accessing data,14 governments should also mandate that data custodians and service providers (e.g., vendors of electronic medical records) permit health care institutions and socially beneficial organizations to extract patient data, when appropriate, without charge. Governments should be responsible for funding and supporting the appropriate infrastructure.

Multinational data brokers do not own the patient data they profit from — the information belongs to patients. Rather than permitting pharmacists, physicians and insurance companies to feed patient data to commercial entities so that researchers and governments can buy it back, Canada needs to invest in coordinated infrastructure for data collection and pass strong data privacy legislation. This will protect individuals and communities, and enable appropriate data uses.

Acknowledgements

The authors would like to thank Tara Kiran, David Naylor, Nick Pimlott, Michelle Greiver, Quinn Grundy, Susan Phillips and the Women’s College Hospital Peer Support Writing Group for reading a draft of the manuscript and providing feedback.

Footnotes

  • Competing interests: Sheryl Spithoff reports grants from the Social Sciences and Humanities Research Council of Canada, the College of Family Physicians of Canada and the Privacy Commissioner of Canada, outside the submitted work. She is also chair of the UTOPIAN working group on relationships with industry. Nav Persaud is a member of the Canadian Task Force on Preventative Health Care and an advisor to the pan-Canadian Advisory Panel on a Framework for a Prescription Drug List. No other competing interests were declared.

  • This article has been peer reviewed.

  • Contributors: All authors contributed to the conception and design of the work. Sheryl Spithoff drafted the initial manuscript and the other authors critically revised it for important intellectual content. All authors have given final approval of the version to be published and agree to be accountable for all aspects of the work.

  • Funding: Sheryl Spithoff receives funding from a New Investigator award from the Department of Family and Community Medicine, University of Toronto. Robyn Rowe is supported by a Frederick Banting and Charles Best Award. Nav Persaud receives funding from the Canada Research Chairs program, the University of Toronto, and St. Michael’s Hospital in Unity Health Toronto.

  • Disclaimer: Nav Persaud is an associate editor for CMAJ and was not involved in the editorial decision-making process for this article.

This is an Open Access article distributed in accordance with the terms of the Creative Commons Attribution (CC BY-NC-ND 4.0) licence, which permits use, distribution and reproduction in any medium, provided that the original publication is properly cited, the use is noncommercial (i.e., research or educational use), and no modifications or adaptations are made. See: https://creativecommons.org/licenses/by-nc-nd/4.0/

References

  1. ↵
    Government Bill (House of Commons) C-11 (43-2); First Reading Digital Charter Implementation Act, 2020 Parliament of Canada. Available: https://parl.ca/DocumentViewer/en/43-2/bill/C-11/first-reading (accessed 2020 Nov. 23).
  2. ↵
    1. Kalkman S,
    2. van Delden J,
    3. Banerjee A,
    4. et al
    . Patients’ and public views and attitudes towards the sharing of health data for research: a narrative review of the empirical evidence. J Med Ethics 2019 Nov 12;medethics-2019-105651. doi: 10.1136/medethics-2019-105651. [Epub ahead of print]. Available: https://jme.bmj.com/content/early/2019/11/11/medethics-2019-105651 (accessed 2020 Dec. 4).
    OpenUrlAbstract/FREE Full Text
  3. ↵
    1. Zoutman DE,
    2. Ford BD,
    3. Bassili AR
    . The confidentiality of patient and physician information in pharmacy prescription records. CMAJ 2004;170:815–6.
    OpenUrlFREE Full Text
  4. ↵
    1. Paprica PA,
    2. de Melo MN,
    3. Schull MJ
    . Social licence and the general public’s attitudes toward research based on linked administrative health data: a qualitative study. CMAJ Open 2019;7:E40–6.
    OpenUrlAbstract/FREE Full Text
  5. ↵
    1. Cahn A,
    2. Shoshan A,
    3. Sagiv T,
    4. et al
    . Prediction of progression from pre-diabetes to diabetes: development and validation of a machine learning model. Diabetes Metab Res Rev 2020;36:e3252.
    OpenUrl
  6. ↵
    NPDUIS source materials. Ottawa: Patented Medicine Prices Review Board. Available: http://www.pmprb-cepmb.gc.ca/CMFiles/NPDUIS/refdocs/NPDUIS_Source_Materials_EN.pdf (accessed 2021 July 2).
  7. ↵
    Ownership, control, access and possession (OCAP): the path to First Nations information governance. Ottawa: First Nation Information Governance Centre; 2014. Available: https://web.archive.org/web/20200909011418/https://fnigc.ca/sites/default/files/docs/ocap_path_to_fn_information_governance_en_final.pdf (accessed 2020 Nov. 27).
  8. ↵
    MCI Onehealth: Empowering patients and doctors with advanced technologies to increase access, improve quality, and reduce the costs of healthcare. Toronto: Onehealth; 2020. Available: https://web.archive.org/web/20210209182923/https://investor.mcionehealth.com/static-files/78f6ac37-8913-44a6-852c-c9ef35a467da (accessed 2021 Feb. 9).
  9. ↵
    1. Rocher L,
    2. Hendrickx JM,
    3. de Montjoye Y-A
    . Estimating the success of re-identifications in incomplete datasets using generative models. Nat Commun 2019;10:3069.
    OpenUrlCrossRefPubMed
  10. ↵
    1. Brax H,
    2. Fadlallah R,
    3. Al-Khaled L,
    4. et al
    . Association between physicians’ interaction with pharmaceutical companies and their clinical practices: a systematic review and meta-analysis. PLoS One 2017;12:e0175493. Available: https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5391068/ (accessed 2020 Oct. 29).
    OpenUrlCrossRefPubMed
  11. ↵
    1. Machkovech S
    . Report: Facebook helped advertisers target teens who feel “worthless”. Ars Technica 2017 May 1. Available: https://arstechnica.com/information-technology/2017/05/facebook-helped-advertisers-target-teens-who-feel-worthless/ (accessed 2021 Nov. 11).
  12. ↵
    1. Benjamin R
    . Assessing risk, automating racism. Science 2019;366:421–2.
    OpenUrlAbstract/FREE Full Text
  13. ↵
    1. Walter M,
    2. Kukutai T,
    3. Carroll SR,
    4. et al.
    , editors. Indigenous data sovereignty and policy. 1st ed. London (UK): Routledge; 2020. Available: https://apo.org.au/sites/default/files/resource-files/2020-10/apo-nid310768.pdf (accessed 2021 Jan. 29).
  14. ↵
    1. Charbonneau G
    . Our power to negotiate with electronic medical record vendors. Can Fam Physician 2018;64:77.
    OpenUrlFREE Full Text
PreviousNext
Back to top

In this issue

Canadian Medical Association Journal: 194 (3)
CMAJ
Vol. 194, Issue 3
24 Jan 2022
  • Table of Contents
  • Index by author

Article tools

Respond to this article
Print
Download PDF
Article Alerts
To sign up for email alerts or to access your current email alerts, enter your email address below:
Email Article

Thank you for your interest in spreading the word on CMAJ.

NOTE: We only request your email address so that the person you are recommending the page to knows that you wanted them to see it, and that it is not junk mail. We do not capture any email address.

Enter multiple addresses on separate lines or separate them with commas.
The commercialization of patient data in Canada: ethics, privacy and policy
(Your Name) has sent you a message from CMAJ
(Your Name) thought you would like to see the CMAJ web site.
CAPTCHA
This question is for testing whether or not you are a human visitor and to prevent automated spam submissions.
Citation Tools
The commercialization of patient data in Canada: ethics, privacy and policy
Sheryl Spithoff, Jessica Stockdale, Robyn Rowe, Brenda McPhail, Nav Persaud
CMAJ Jan 2022, 194 (3) E95-E97; DOI: 10.1503/cmaj.210455

Citation Manager Formats

  • BibTeX
  • Bookends
  • EasyBib
  • EndNote (tagged)
  • EndNote 8 (xml)
  • Medlars
  • Mendeley
  • Papers
  • RefWorks Tagged
  • Ref Manager
  • RIS
  • Zotero
‍ Request Permissions
Share
The commercialization of patient data in Canada: ethics, privacy and policy
Sheryl Spithoff, Jessica Stockdale, Robyn Rowe, Brenda McPhail, Nav Persaud
CMAJ Jan 2022, 194 (3) E95-E97; DOI: 10.1503/cmaj.210455
Digg logo Reddit logo Twitter logo Facebook logo Google logo Mendeley logo
  • Tweet Widget
  • Facebook Like

Jump to section

  • Article
    • Acknowledgements
    • Footnotes
    • References
  • Figures & Tables
  • Related Content
  • Responses
  • Metrics
  • PDF

Related Articles

  • Commercialisation des données sur les patients au Canada: éthique, protection des renseignements personnels et politiques
  • PubMed
  • Google Scholar

Cited By...

  • No citing articles found.
  • Google Scholar

More in this TOC Section

  • Time for a regulatory framework for pediatric medications in Canada
  • Optimizing timing of completion of the Surgical Safety Checklist to account for emergence from anesthesia
  • Shifting from cytology to HPV testing for cervical cancer screening in Canada
Show more Commentary

Similar Articles

Collections

  • Topics
    • Canadian government
    • Health policy
    • Medical ethics
    • Medicine & the law (including forensic medicine)

 

View Latest Classified Ads

Content

  • Current issue
  • Past issues
  • Collections
  • Sections
  • Blog
  • Podcasts
  • Alerts
  • RSS
  • Early releases

Information for

  • Advertisers
  • Authors
  • Reviewers
  • CMA Members
  • Media
  • Reprint requests
  • Subscribers

About

  • General Information
  • Journal staff
  • Editorial Board
  • Advisory Panels
  • Governance Council
  • Journal Oversight
  • Careers
  • Contact
  • Copyright and Permissions
  • Accessibiity
  • CMA Civility Standards
CMAJ Group

Copyright 2022, CMA Impact Inc. or its licensors. All rights reserved. ISSN 1488-2329 (e) 0820-3946 (p)

All editorial matter in CMAJ represents the opinions of the authors and not necessarily those of the Canadian Medical Association or its subsidiaries.

To receive any of these resources in an accessible format, please contact us at CMAJ Group, 500-1410 Blair Towers Place, Ottawa ON, K1J 9B9; p: 1-888-855-2555; e: cmajgroup@cmaj.ca

Powered by HighWire