Insight

Project Nightingale and the Take-Away Lesson for Providers And Payors

Project Nightingale and the Take-Away Lesson for Providers And Payors

Joel K. Goloskie

Joel K. Goloskie

January 16, 2020 10:36 AM

There has been much ado lately about a newly-revealed joint venture between Ascension Medical Group and Google. Ascension is the nation’s largest non-profit health care system; Ascension Medical Group is the company’s subsidiary physician group, with facilities in more than twenty states. Google is, well, Google.

The joint venture being undertaken by these industry behemoths is known as “Project Nightingale.” Ascension and Google describe Nightingale as a treatment-focused initiative, designed to facilitate access and use of data in the medical records of Ascension’s patients. It also involves migrating Ascension’s data from proprietary storage to Google’s cloud-based storage. The software tool developed from this initiative allegedly makes it easier for a doctor to access and use specific patient data such as recent test results, medications, and more.

Such “treatment” focused use of PHI is of a type generally permitted by Subpart E of HIPAA, which governs permissible uses and disclosures by covered entities and business associates. Further, there is a colorable argument that this tool could support quality improvement activities, which would also bring it under the aegis of HIPAA’s carveout for “health care operations.” Thus, the development and use by a provider of a software tool that facilitates treatment and quality improvement would be a permissible use of a provider’s protected health information (“PHI”).

Such an initiative also seems to be squarely of the type that HIPAA would permit to be undertaken by a provider’s “business associate.” The two companies assert that they have signed a business associate agreement (“BAA”), and also assert that the terms of the agreement prohibit Google from using Ascension’s PHI for any other purpose than for provisioning this tool for use by Ascension clinicians. Further, the BAA allegedly prohibits Google from combining Ascension’s patient data with Google consumer data. There have been reports that a whistleblower who claims first-hand knowledge has expressed concerns that patients’ medical records are being shared without their consent. However, the development and use of a software tool designed to facilitate physicians’ access to and use of patients’ PHI is not something that HIPAA would require a provider to obtain patient consent to undertake. Similarly, outsourcing such an initiative to a business associate would also not require patient consent.

Nonetheless, Nightingale is now under scrutiny from the HHS Office of Civil Rights (“OCR”), the office charged with enforcing HIPAA. “OCR would like to learn more information about this mass collection of individuals’ medical records with respect to the implications for patient privacy under HIPAA,” Roger Severino, OCR’s director, said in a statement recently.

It may well be that the companies’ description of Nightingale does not adequately describe the true value-add of the initiative, either to Ascension or to Google. After all, Ascension utilizes industry-leader Cerner as its electronic medical records platform provider. If all that Ascension really sought was migration to a cloud-based platform, it seems that Cerner might have been happy to oblige. If Ascension was merely seeking improvements to its providers’ ability to access data in its Cerner EMR system, why wouldn’t it have just had Cerner make these improvements? Google isn’t in the business of creating plug-andplay upgrades to EMR platforms. Maybe all that Ascension truly wants is for Google to patch gaps in Ascension’s ability to call up data in its industry-leading EMR platform. Far more likely, however, is that the long-term goal of Nightingale is to enable Google to use its analytical powers to draw actionable insights from the data it is receiving.

One can hardly read a health care trade journal without coming across yet another study showing that the leading cause of today’s unprecedented level of physician burnout is the EMR. Physicians are simply overwhelmed with data. The problem with today’s industry-leading EMR systems is not that providers can’t access enough data. Quite to the contrary. What they need are tools that will cull and present the most relevant and actionable data, in a self-generating way that will meet the time constraints of the physician’s typical seven-minute patient encounter. This is the purview and the promise of Big Data.

Like all other massive data platforms, Google is increasingly in the business of drawing actionable insights from data. Big data, to be specific. Data of the magnitude held by the nation’s largest non-profit healthcare system. Ascension and Google assert that Nightingale complies with HIPAA. While the parties claim that Google cannot use the PHI for any other purpose, or to combine it with other Google data, those things aren’t necessary for this data to be of immense value to Google. A HIPAA-compliant BAA could allow Google to create and use de-identified health information from the millions of records it is receiving from Ascension. Even as a stand-alone data lake, deidentified health information of that scale would hold tremendous analytic and predictive value. Further, the de-identified data Google could create would likely not be subject to the parties’ prohibition against combining Ascension’s PHI with other Google data. So, why has Nightingale received such a storm of whistleblower complaints, public backlash, and regulatory scrutiny? Again, the companies assert that Google is not permitted to pool Ascension’s patient data with any other data Google possesses, or even to make any other use of this data. It is not like some Ascension patient going about an unrelated Google search will suddenly find himself being subject to pop-up ads for incontinence supplies based on a recent entry in his Ascension EMR. (In truth, he likely gets these ads already, based upon his online searches and purchases.) The simplest answer? The backlash is because it’s Google. For data platforms, a lack or loss of trust is one of the key determinants of failure.1 Trust in Facebook fell fully 66% after the Cambridge Analytica scandal.2 About 40 percent of digitally connected people worldwide said they had deleted at least one of their social media accounts in the past year because they didn’t trust that the platform would properly handle personal information.3 Google, too, continues to have issues of public trust.4

It may well be that trust in the large platforms like Google and Facebook is now so so badly broken that the public will lash out against providers and payors who share their medical records and claims data with these platforms. In a health care market like Boston, for example, where each competing health system is perceived as being world-class, a successful marketing campaign might turn on advertising built around the simple, differentiating message: “We don’t share your data with Google or Facebook.”

If Nightingale had been a joint project between Ascension and Cerner, not a single journalistic keystroke would have been expended on it. If Ascension had announced that it was engaging one of the large healthcare-specific data platforms like Inovalon, Optum, or Premier to help it develop algorithms to identify test-results with heightened probability of clinical relevance based upon each patient’s overall medical history, any press coverage would likely have been limited to the healthcare and information management trade journals, and would likely have heralded this as yet another advance in the ability of data to enhance delivery and reduce cost. There would be no whistleblowers, no public backlash, no OCR investigation.

For health care providers and payors, this may be the only thing they need to know about Project Nightingale. If you would like further information, please contact PLDO Partner Joel K. Goloskie at 401-824-5100 or email jgoloskie@pldolaw.com.

  1. David B. Yoffie, Annabelle Gawer, Michael A. Cusumano, Social Platforms – A Study of More Than 250 Platforms Reveals Why Most Fail, Harvard Business Review, May 29, 2019 (avail. at: https://hbr.org/2019/05/a-study-of-more-than-250-platforms-reveals-why-most-fail).
  2. Herb Weisbaum, Trust in Facebook has dropped by 66 percent since the Cambridge Analytica scandal, NBCNews.com, Apr. 18, 2018 (avail. at: https://www.nbcnews.com/business/consumer/trust-facebook-has-dropped-51-percent-cambridge-analytica-scandal-n867011).
  3. Kesley Sutton, Trust in Social Media Platforms Is Eroding—and Brands Have a Lot to Lose, AdWeek.com, June 18, 2018 (avail. at: https:// www.adweek.com/digital/trust-in-social-media-platforms-is-eroding-and-brands-have-a-lot-to-lose/).
  4. Owen Williams, Google Promises ‘reCAPTCHA’ Isn’t Exploiting Users. Should You Trust It?, One Zero, July 9, 2019 (avail. at: https:// onezero.medium.com/google-promises-recaptcha-isn-t-exploiting-users-should-you-trust-it-ed99f1543f28); Matthew Green, Why I’m Worried About Google, Slate.com, Oct. 30, 2018 (avail. at: https://slate.com/technology/2018/10/google-is-losing-users-trust.html).

Related Articles

WATCH: Best Lawyers Discusses COVID-19 & Health Care


by Best Lawyers

Two legal experts join the CEO of Best Lawyers to discuss the legal issues hospitals and health care providers are facing as a result of COVID-19.

COVID-19 Panel: Health Care

2019 Women in the Law at a Glance


by Best Lawyers

2019 "Women in the Law" by the numbers.

What Practices Grew the Most in 2019?

Trending Articles

Announcing the 2023 The Best Lawyers in America Honorees


by Best Lawyers

Only the top 5.3% of all practicing lawyers in the U.S. were selected by their peers for inclusion in the 29th edition of The Best Lawyers in America®.

Gold strings and dots connecting to form US map

Announcing the 2022 Best Lawyers® in the United States


by Best Lawyers

The results include an elite field of top lawyers listed in the 28th Edition of The Best Lawyers in America® and in the 2nd Edition of Best Lawyers: Ones to Watch in America for 2022.

2022 Best Lawyers Listings for United States

2021 Best Lawyers: The Global Issue


by Best Lawyers

The 2021 Global Issue features top legal talent from the most recent editions of Best Lawyers and Best Lawyers: Ones to Watch worldwide.

2021 Best Lawyers: The Global Issue

The U.S. Best Lawyers Voting Season Is Open


by Best Lawyers

The voting season for the 31st edition of The Best Lawyers in America® and the 5th edition of Best Lawyers: Ones to Watch® in America is officially underway, and we are offering some helpful advice to this year’s voters.

Golden figures of people standing on blue surface connected by white lines

How To Find A Pro Bono Lawyer


by Best Lawyers

Best Lawyers dives into the vital role pro bono lawyers play in ensuring access to justice for all and the transformative impact they have on communities.

Hands joined around a table with phone, paper, pen and glasses

The Best Lawyers in Australia™ 2024 Launch


by Best Lawyers

Best Lawyers is excited to announce The Best Lawyers in Australia™ for 2023, including the top lawyers and law firms from Australia.

Australian Parliament beside water at sunset

How Palworld Is Testing the Limits of Nintendo’s Legal Power


by Gregory Sirico

Many are calling the new game Palworld “Pokémon GO with guns,” noting the games striking similarities. Experts speculate how Nintendo could take legal action.

Animated figures with guns stand on top of creatures

What the Courts Say About Recording in the Classroom


by Christina Henagen Peer and Peter Zawadski

Students and parents are increasingly asking to use audio devices to record what's being said in the classroom. But is it legal? A recent ruling offer gives the answer to a question confusing parents and administrators alike.

Is It Legal for Students to Record Teachers?

Inflation Escalation


by Ashley S. Wagner

Inflation and rising costs are at the forefront of everyone’s mind as we enter 2023. The current volatile market makes it more important than ever to understand the rent escalation clauses in current and future commercial lease agreements.

Suited figure in front of rising market and inflated balloon

The Upcycle Conundrum


by Karen Kreider Gaunt

Laudable or litigious? What you need to know about potential copyright and trademark infringement when repurposing products.

Repurposed Products and Copyright Infringemen

8 Different Types of Criminal Defenses in Law


by Best Lawyers

Learn about the different types of criminal defenses available in law, including innocence, self-defense, insanity and more. Protect your rights today.

Silver handcuffs laying on finger printed papers

Best Lawyers: Ones to Watch in America for 2023


by Best Lawyers

The third edition of Best Lawyers: Ones to Watch in America™ highlights the legal talent of lawyers who have been in practice less than 10 years.

Three arrows made of lines and dots on blue background

A Celebration of Excellence: The Best Lawyers in Canada 2024 Awards


by Best Lawyers

As we embark on the 18th edition of The Best Lawyers in Canada™, we are excited to highlight excellence and top legal talent across the country.

Abstract image of red and white Canada flag in triangles

Wage and Overtime Laws for Truck Drivers


by Greg Mansell

For truck drivers nationwide, underpayment and overtime violations are just the beginning of a long list of problems. Below we explore the wages you are entitled to but may not be receiving.

Truck Driver Wage and Overtime Laws in the US

Choosing a Title Company: What a Seller Should Expect


by Roy D. Oppenheim

When it comes to choosing a title company, how much power exactly does a seller have?

Choosing the Title Company As Seller

The 2024 Best Lawyers in Spain™


by Best Lawyers

Best Lawyers is honored to announce the 16th edition of The Best Lawyers in Spain™ and the third edition of Best Lawyers: Ones to Watch in Spain™ for 2024.

Tall buildings and rushing traffic against clouds and sun in sky