DeepMind's data deal with the NHS broke privacy law

An NHS Trust broke the law by sharing sensitive patient records with Google's DeepMind division, the UK's data watchdog has ruled. The long-awaited decision falls in line with the conclusion drawn by Dame Fiona Caldicott, the UK's National Data Guardian in May. The pair's agreement "failed to comply" with the Data Protection Act 1998, according to the Information Commissioner's Office (ICO), because patients weren't informed that their information was being used. The ICO also took issue with the size of the dataset -- 1.6 million partial patient records -- leveraged by DeepMind to test Streams, an app for detecting acute kidney injury. In April 2016, New Scientist revealed that DeepMind and Royal Free London NHS Trust were working together on a medical project. As the ICO notes in its letter to the Trust, their agreement was actually formalised in September 2015, with Royal Free serving as the data controller (owner) and DeepMind as the data processor (partner).