Data Sharing and Privacy: In the News

Roughly one year after the NIH and The Wellcome Trust restricted access to genome-wide association studies [see: Modifications to Genome-Wide Association Studies (GWAS) Data Access (NIH, August 28, 2008 - PDF)], data sharing is back in the news. In August, researchers in Tel Aviv and Berkeley announced a new method of protecting the privacy of individuals in genetic research studies. In the press release, one of the authors, Eran Halperin, alludes to the PLoS Genetics paper that led to the NIH's data access modifications (Homer N, et al.). As Halperin sees it, the "knee-jerk response stymied potential breakthrough genetic research." Perhaps he hopes that the new privacy approach will re-open the doors of safe data sharing. Halperin's method (published in Nature Genetics) uses a likelihood ratio (LR) test to measure the risk of exposing a single individual within a data set. Ultimately, the LR test limits the number of SNPs shared and thereby decreases the chances of privacy losses. If you would like to give this method a try, the software is available online (with registration) at SECUREGENOME.

In related news, The Toronto International Data Release Workshop (Genome Canada, May 2009) recently recommended the "rapid release of prepublication data" to speed the pace of scientific discover. The recommendation was published in a special, data sharing edition of Nature. The Workshop cites the Human Genome Project as an example of how sharing data leads to public benefits: "This experience ultimately demonstrated that the broad and early availability of sequence data greatly benefited life sciences research by leading to many new insights and discoveries, including new information on 30 disease genes published prior to the draft sequence." In a note addressing the human subjects concerns, the Workshop acknowledges the privacy risks: "Data about human subjects participating in genetic and epidemiological research require particularly careful consideration owing to privacy-protection issues and the potential harms that could arise from misuse. ... [F]or clinical and genomic data that are associated with a unique, but not directly identifiable individual, access may be restricted."

Will these developments (a proposed technical solution to the privacy barrier and a reaffirmation of the social benefits of data sharing) encourage the NIH and The Wellcome Trust to reduce some of the restrictions on data sharing? (I’d say: not yet.) While the safety of data sharing may be increased with technical solutions, it seems unlikely that all privacy risks will be eliminated. After all, if I share something "private" with you (or with anyone else), it's not so "private" any more. At the same time, if data access is restricted (for example, by using smaller, "safer" data sets), the public benefit of sharing resources declines. Clearly, we are looking for a way to eat our cake and have it too; protecting the individual's privacy while sharing for common benefits. Perhaps we should ask ourselves, what are the risks that we are willing to impose on individuals for the benefit of the common good? As an individual, exactly how private is your privacy? And at what cost?

References:

Homer N, et al. Resolving individuals contributing trace amounts of DNA to highly complex mixtures using high-density SNP genotyping microarrays. PLoS Genet. 2008 Aug 29;4(8):e1000167. PMID: 18769715

Sankararaman S, Obozinski G, Jordan MI, Halperin E. Genomic privacy and limits of individual detection in a pool. Nat Genet. 2009 Sep;41(9):965-7. Epub 2009 Aug 23. PMID: 19701190.

Toronto International Data Release Workshop Authors, et al. Prepublication data sharing. Nature. 2009 Sep 10;461(7261):168-70. PMID: 19741685.

Other Predictive Health Ethics News

Nikki Tait. Pan-European biobanking moves closer. Financial Times. September 16, 2009.

Michael Rugnetta and Whitney Kramer. Paving the Way for Personalized Medicine. Science Progress. September 14, 2009.

Daniel Vorhaus and Lawrence Moore. What happens when a personal genomics company goes bankrupt? Genetic Future. September 14, 2009.

Caroline Wright. HGC public consultation on DTC genetic testing services. PHG Foundation News. September 8, 2009.

Over Ninety Per Cent Of Pathologists Find Research Rules Too Complex. Medical News Today, September 8, 2009.

Jane E. Brody. Buyer beware of home DNA tests. The New York Times. August 31, 2009.

Brad Therrell, Harry Hannon, Don Bailey, et al. Considerations and Recommendations for a National Policy Regarding the Retention and Use of Dried Blood Spot Specimens after Newborn Screening. Genetic Alliance. August 21, 2009.

Turner Ray. Lack of Physician Education, Genetic Counseling Could Ruin Value Proposition of PGx Testing, Insurer Says. Genomeweb: Pharmacogenomics Reporter. August 12, 2009.

The Genetics and Public Policy Center. Center publishes new survey of state false advertising laws. dnapolicy.org, August 11, 2009.

• Related: State Laws Could Cover DTC Gene Testing. GenomeWeb Daily News, August 13, 2009.

- J.O.

Critiquing HHS's Summary Recommendations on Newborn Blood Spots: Opt-Out is Not Optimal

On August 21, 2009 the Department of Health and Human Services (HHS) issued “Considerations and Recommendations for a National Policy Regarding the Retention and Use of Dried Blood Spot Specimens after Newborn Screening” relating to storage and use of newborn blood spots (NBS). The agency recommendations discussed assurances of privacy and confidentiality for storage and advised that each state should disseminate policies that promote public trust, emphasize transparency, and encourage informed public participation. It promulgated seven recommendations, including: all states should have a policy in place to address NBS retention, use, and research access; states should provide educational materials to the public and expecting mothers on use and potential future uses; and states should adopt an opt-in or opt-out model if NBS are available for any process outside the screening process or internal screening test development.

However, parental attitudes and pending litigation in this area suggests that the agency’s goals to promote public trust and encourage public participation may not be achieved with these guidelines.

Tarini, et al.’s survey in Public Health Genomics examined parental willingness to permit NBS storage and research. If permission is obtained, 76.2% of parents were very or somewhat willing to permit use of NBS for research, but if permission was not obtained, only 28.2% of parents would be very or somewhat willing to permit use of NBS for research. These results show most parents will permit retention and use as long as they are asked, reiterating the importance of respecting a person’s autonomy and dignity to permit or refuse participation.

Two pending cases in Minnesota and Texas confirm the results of Tarini et al.’s study and demonstrate that collection, retention, and research use of NBS and associated PHI even if conducted or facilitated by the state department of health is biobanking research. Accordingly, it should be governed under the Common Rule and Privacy Rule, meaning actual consent is not only optimal but perhaps required.

In June 2009, Minnesota parents (Bearder, et al.) filed a civil complaint against the state of Minnesota and the Minnesota Department of Health (MDH, et al.) for failing to comply with the Minnesota Genetic Privacy Act and continuing to store and use NBS without consent. The complaint contains a litany of claims, including violation of the Minnesota Genetic Privacy Act, eight tort claims, fundamental right claims, and government taking. Plaintiffs’ claims for intrusion into seclusion, fraud and misrepresentation, and government taking summarize the essence of the alleged injury:

• A person has a privacy interest in his or her own blood (acting as guardian for the newborns’ blood) and the medical information that may be obtained from it;
• The MDH intentionally omitted that the NBS was not taken solely for screening but would be retained and used, knew that parents would provide them NBS for the purpose of screening, and parents relied on these representations but would not have consented to providing MDH the NBS had they known; and
• Blood and genetic information constitute a “valuable national resource” and a represent a “gold mine” for the state and affiliated researchers that the government cannot automatically appropriate even in the name of public health research.

In a prayer for relief, plaintiffs request damages as statutorily indicated, request an injunction, and a cease and desist order against MDH. Minnesota’s history confirms that NBS collection, retention, and research falls within its Genetic Privacy Act, meaning a separate consent is required for each activity; and importantly, that the research conducted or approved by the Minnesota Department of Health is not exempt from these requirements.

In Texas, parents (Beleno, et al.) filed a civil complaint in March 2009 against the Texas Department of State Health Services (TDSHS, et al.) claiming TDSHS has no legal authority to retain and use NBS without consent. Beleno et al. assert this practice violates the privacy principles as well as violates the prohibition against seizure. Plaintiffs request that the court order the destruction of all NBS stored without consent (around 4.2 million samples) since it began the practice in 2002 or obtain retroactive parental consent. Additionally, plaintiffs seek an order to compel TDSHS to disclose for what purposes the NBS have been used and financial transactions involving the NBS.

New legislation TX HB 1672 that implements a compromise by using an opt-out system was signed into law and will take effect September 2009. It remains to be seen whether all Texas parents will agree with this solution and how the court will address the issue of what to do with the 4.2 million NBS that were stored without consent.

If NBS constitute such a valuable resource, then it is incumbent on us to encourage transparency of state health departments’ intentions by educating parents on the importance of using NBS for research purposes, how the state plans to use them, and respect parents enough not to circumvent the law’s intent but actually obtain their consent. If not, parents could turn to the judicial system and potentially prevail, creating a costly and lengthy legal battle for the state health department as well as jeopardizing the current collection of NBS.

-Katherine Drabiak-Syed