With a rapidly changing political landscape in the United States, Canada must move quickly to safeguard valuable Canadian health data, argue the authors of a commentary published in the Canadian Medical Association Journal.
The rise of artificial intelligence (AI) and its reliance on massive amounts of data has increased the value of these data and created new risks on top of pre-existing concerns about health data being used by other countries for national security purposes.
"Serious privacy, security, and economic risks arise when companies in other countries hold and use Canadian data. Given the rapidly changing political climate in the United States, preserving the sovereignty of Canada's health data—notably, ensuring that the data are subject to Canadian laws and legal systems—requires renewed focus," writes co-author Dr. Michael Geist, a Canada Research Chair in Internet and e-Commerce Law, and professor at the Center for Law, Technology and Society, University of Ottawa.
Canada's health system is largely reliant on US providers that manage electronic medical record systems for hospitals and store encrypted data on servers or cloud servers. Although these servers are located in Canada, they are owned by the US companies Microsoft Azure, Amazon Web Services, and Google Cloud.
Europe has expressed similar concerns for their region. For example, the recent Clarifying Lawful Overseas Use of Data (CLOUD) Act in the US that potentially allows US law enforcement to access data held by US companies in other countries could be a threat.