Hacker News Reader

Comment by OutOfHere | Hacker News Reader

I would go further and say that not only the software but also the execution of the software should also be open, akin on a non-financial blockchain database, with the rules, execution, and decision recorded permanently (under an anonymous ID, of course). Anyone should be able to easily replay the execution. This would allow for citizen monitoring of government actions. If not for this, at least a weekly export of all anonymized processed claims, plus the corresponding logic rules, should be made available on the web, similarly facilitating a local replay.

The problem with a scheduled export is that a corrupt state government will gladly change your records for you (in their favor) when you go to court. This is more difficult to do with a blockchain.

View on HN

> blockchain [...] replay

That's burning down your house to kill a spider. Even in a closed system infinite replay-ability is a big headache, and adding "blockchain" adds a hundred new problems. There's already legal system which is a direct dependency, and it is more efficient and manageable. (Yes, that's right, the US legal system actually looks sane by comparison.)

Instead, make a legal requirement that patients (and sometimes other stakeholders) can demand the data/logic behind the company decisions.

If you still want very tamper-proof write-only records, that can be done way more easily/quickly/cheaply with an old-school distributed database with fixed trusted nodes, run by multiple institutions that are not likely to conspire together.

> make a legal requirement that patients (and sometimes other stakeholders) can demand the data/logic behind the company decisions.

Huh. This is already available, and it never works in the interest of the patient. Unless one has expensive attorneys, no individual has the time and patience to jump through all the hoops needed to get it to work. The point is to eliminate friction completely.

I do reiterate that scheduled data+logic exports from the government would alternatively also help, allowing the execution to similarly be replayed. A problem with a scheduled export, however, is that a corrupt state government will gladly change your records for you (in their favor) when you go to court. This is more difficult to do with a blockchain.

Ah yes, because blockchain is the 100% true source of ultimate truth.

Despite the little overlooked fact that data in it will be input by external systems and people.

If someone receives a letter in the mail with a claim rejection that contradicts what the blockchain says, that then is a very easy win in court.

The problem is not people’s denials being lies, but that they actually were denied illegally.

We're now going in circles. This has already been covered. Jump to parent comment #2 in the hierarchy.

If someone receives a letter in the mail with a claim rejection that never contradicts whatever blockchain says, they will not win in court.

Somehow you assume that data on blockchain was entered correctly and truthfully just because it's blockchain. Somehow you assume that no one will need expensive attorneys and expertise to sift through data just because it's on blockchain. Somehow you assume that there's some magic "execution" on blockchain that you can somehow easily "replay".

You obviously don't know much about how a blockchain works, haven't spent a minute thinking about the answers to your questions, and think no one else has either. Your concerns are unoriginal as far as blockchain technology is concerned, and solutions easily exist to each issue.

I know how blockchain works. For the purposes of this discussion it's an append-only distributed log.

However, blockchain proponents en masse have no idea how blockchain works or how real world works. That's why they always assign these magical properties to it: that all information added to blockchain is true and correct. That it's trivially easy for anyone to "replay" any number of any complex events containing any arbitrarily complex data to do something or reach some conclusion.

When challenged on this assumptions the answer is, inevitably, "you don't know how blockchains work" (everyone does) and "solutions to these challenges exist" (they don't).

Literally nothing in blockchain can prevent entry of bad/incorrect/falsified data. Literally nothing in blockchains makes it easy to navigate complex medical decisions without the help of experts (and in the US, lawyers) to untangle and understand the data and decisions.

I am sick and tired of the inept comment, but let's take your points, one at a time:

> Somehow you assume that data on blockchain was entered correctly and truthfully just because it's blockchain.

If the information on the blockchain contradicts a denial communication e/mailed to the patient, it will be an easy win in court. And if it's a simple data entry error, it will be fixed when reported.

Somehow you assume that no one will need expensive attorneys and expertise to sift through data just because it's on blockchain.

> There are numerous blockchain explorer websites that catalog the data and conveniently query+format it for display. These days even LLMs can write queries.

> Somehow you assume that there's some magic "execution" on blockchain that you can somehow easily "replay".

Yes, that's how it works, and there is no magic in it. The rules and claims and diagnosis codes both go on the blockchain. The client software executes the rules against the claims and diagnosis. Again, even a website can assist in it.

It is obvious that you're operating 100% in bad faith. Also, your experience of having to deal with experts and attorneys has ruined you from seeing beyond it.

> If the information on the blockchain contradicts a denial communication e/mailed to the patient, it will be an easy win in court.

And you will understand that how? As a person who is no an expert in medicine.

> There are numerous blockchain explorer websites that catalog the data and conveniently query+format it for display.

So you've got yourself hundreds of pages of medical data and decisions. Now what?

> The rules and claims and diagnosis codes both go on the blockchain. The client software executes the rules

Ah yes. The magical rules that exists just because there's blockchain. And there's magical software that can easily execute those rules just because blockchain. Because as we all know, all medical data and decisions are input into systems in easily digestible machine-readable formats and all the machine-executable rules are there.

Funny how none of that exists now, but will somehow magically appear the moment you say "blockchain".

> It is obvious that you're operating 100% in bad faith.

The only thing that's obvious is that the vast majority of blockchain proponents assume their opponents operates in bad faith the moment their opponents ask questions rooted in reality, and not in wishful thinking.

> your experience of having to deal with experts and attorneys has ruined you from seeing beyond it.

I've never dealt with experts or attorneys when it comes to medicine.

I've read enough of simple non-complicated descriptions of such simple things done to me like routine dental checkups and removal of a non-malignant tumor to see through any of the fairy tales you're trying to sell.

--- Edit ---

> https://www.ncbi.nlm.nih.gov/pmc/articles/PMC2585683/

> More than half of the physicians in this study reported engaging in some questionable hospital chart documentation practices. Many of the physicians reported using charting practices that would be considered unacceptable (e.g. charting prior to seeing the patient or without seeing the patient on the day of charting).

> The pressures that may influence physicians to engage in questionable documentation practices are numerous, including reimbursement regulations, time-constraints, fear of litigation, and quality audits.

> ... fear of litigation and the threat of malpractice liability have been cited as reasons why physicians alter their clinical behavior and practice defensive medicine

lol good luck with your "blockchain is the source of all truth and it's easy to run the rules on some client software"

I'm definitely not interested to continue this conversation, as it devolves into a well know pattern of blockchain-related delusions.

Adieu.

It is clear when someone is spreading FUD such as in your comment. As for blockchain, it is demonstrably used millions if not billions of times daily to do all the things I noted. Your limited mind can hardly comprehend the rule-based contracts that execute on Ethereum.

If left to you, civilization would never have progressed out of the stone age, and I mean the stone-throwing age, not the stone-tooling age.

An "easy" win in court can cost thousands of dollars needed up front, and may take years to achieve. For someone on Medicaid that is not easy.

Nnnnnnah, I don't want claims to be public. There's no real way to anonymize claims. e.g. someone getting specialized immune therapy in west virginia is pretty damn identifiable. Or someone being paid out in a claim of 300k+ for some highly specific antiviral.

> I don't want claims to be public.

I don't think you realize this already happens. It is already available to hundreds of organizations, both domestic and foreign. Any organization can license it really at a price. What I said would only democratize it, also mandating an appropriate level of anonymization which is currently inconsistent or missing. Also, think of the bigger picture, of the clues such data will yield for advances in healthcare.

> someone getting specialized immune therapy in west virginia is pretty damn identifiable.

Yes, despite the best anonymization, some can still be identified, but it will take significant effort, and be limited to a very small number of people, like the one in WV. Overall though, the ratio of benefits to harms from transparency would exceed 999:1.

It shouldn't be auditable by anyone. There should be an audit trail though, and it should be available to the subject of that process on request.

That would be something, but the issue is that most people don't have the time or capacity to audit their own records, or to hire an attorney to escalate it. Journalists on the other hand specialize in this; they can audit everyone's records and expose wrongdoing at a state level.

A simple request for the audit record is absolutely something that consumers should be able to do. There's no guarantee that journalist is going to look at your record to get you help. It won't help in edge cases and those people will still be screwed.

> There's no guarantee that journalist is going to look at your record

The journalists look at aggregates first, and then individuals help tell the story. The point is that both individual-audit-records and full data+logic exports serve their unique purpose. Anyone should be able to use the data+logic to replay the execution, whether for oneself or for the entire community.

"Anyone should be able to use the data+logic to replay the execution, whether for oneself or for the entire community."

No. You can't guarantee anonymity. If you want to have someone audit them, use the GAO or similar.

I would really prefer my health information not be exposed in any way, "anonymized" or otherwise, thanks.

Can you link where I can license this information?

If you offer to give $10+ million to any health insurance company or hospital IT company, they will gladly give it to you, plus more fees for updated batches. In practice it will cost much less if you negotiate well. There also are commercial data aggregators that specialize in it, that GPT can probably name for you. (I don't want to name names here.) At multiple employers, I have worked with this data from various vendors.

Which specific vendors?

Not sure if you can license it, but its possible to tap into HIEs for a lot of patient information. Or, if you have a deal with a PBM, you could literally see 100% of all prescriptions issues to americans using the PBM.

Again, i don't think you can license it, but its a data feed that is accesible incident-to providing other services.

You can build on top of that, of course, anyway you want.

I think this is plainly untrue in any of the situations relevant to what we're discussing.

Some "de-identified" health information can be used or disclosed without restriction under HIPAA, but it needs to genuinely not be possible to correlate back to an individual, which I don't think is something that's possible with what you're describing (at least if prior medical history and decisions factor into the execution of the program). Some health information can be released in the public interest (like for research) or for bettering healthcare operations, but that's not this either.

It might be worth taking a look at https://www.hhs.gov/hipaa/for-professionals/privacy/laws-reg....

This is excluding stuff like 23AndMe genome sharing / Ancestry.com law enforcement collaboration, which might be what you're alluding to, but I believe it to be irrelevant in this case.

> it needs to genuinely not be possible to correlate back to an individual

What you say is a theoretical goal. In practice, despite good efforts, there is no hard rule imposed by reality that 100% of records will totally remain anonymized.

Maybe it's unclear why I've brought this up. I understand it's not possible to keep everything locked down in a way that prevents my information from leaking.

And as unfortunate as that is, that's not my concern with your original comment.

I do not want that problem made worse. I don't care if it's already kind of bad. I have no idea why the problem already being bad would justify making it worse.

I guess you forgot the part where you're a mortal human, and where biomedical data helps discover patterns to solve problems. Just you wait until you get old. Also forgot the part about exposing statewide corruption wrt claims.

I'm not interested in your snark. I'm aware of my mortality and of statewide corruption. Those are not good reasons to publish my health data publicly even in an anonymized form. The people who might be able to fix my mortality are already allowed to have my data (whether I'm happy or not about that is moot as you've made clear yourself). That does not change my belief that the scheme you propose for "exposing statewide corruption" is a bad idea.

> are already allowed to have my data

You mean the ones that license it commercially? Their interest is not in fixing you; it is in exploiting you and your wallet, so please remember the distinction.

To really fix it (you), access to that data needs to be democratized. But since people (you) don't want that to happen, I guess mortality will remain in the cards. In the end, people (you) get what you deserve.

Yet somehow data brokers know every medical condition you've ever had and they sell it to anyone who will pay them.

https://www.scientificamerican.com/article/how-data-brokers-...

https://arstechnica.com/science/2019/11/would-you-trust-goog...

https://slate.com/technology/2022/06/health-data-brokers-pri...

If this is supposed to be some sort of "own", you're missing my point. I do not want my HIPAA-protected information going any further than it needs to, I do not want these practices to be encouraged. I understand HIPAA etc. are leaky, that people are inventing new ways to leak my information to people who want to buy it, and so on.

That is different from taking the pipeline of information directly from my insurance provider and firing it off into the public eye in a way that prevents it from being deleted or forgotten, even if it may be anonymized to some extent.

I understand the situation is not good. I want it to not be made worse. I'm not sure if you ignored the sibling thread where I felt I made myself clear.

I promise that I wasn't attacking you. More just commiserating over the sad state of the situation we find ourselves in as of right now.

I don't know what the solution to this problem will look like, but (like so many other solutions) I'm also pretty sure that it won't involve a blockchain.

I think way he meant a hashed chain: one where the history is tamper proof. The important part is that the data and logic used to process claim is digitally documented and sealed by hash. You get a copy of the hash in your claims. The hash chain is public or has to be given to an independent third-party. If you get into a kicking contest in court, the company they have to reproduce documentation with the hash. The hashing prevents forging the original documents in the process.

Reply on news.ycombinator.com