Lawsuit against University of Chicago Medical Center and Google seeking class action status points to important privacy and security issues raised when sharing patient data for research purposes. The lawsuit alleges that patient health records were not properly de-identified by the hospital before they were shared without patient consent with Google to support the companys predictive medical data analytics technology development efforts. Google and the university touted the security measures used to transfer and store these records, along with the fact that they had been de-identified, the suit alleges.”]
Source: https://www.govinfosecurity.com/patient-data-be-truly-de-identified-for-research-a-12708