- © 2007 Canadian Medical Association or its licensors
Abstract
Privacy laws are intended to preserve human well-being and improve medical outcomes. We used the Sportstats website, a repository of competitive athletic data, to test how easily these laws can be circumvented. We designed a haphazard, unrepresentative case-series analysis and applied unscientific methods based on an Internet connection and idle time. We found it both feasible and titillating to breach anonymity, stockpile personal information and generate misquotations. We extended our methods to snoop on celebrities, link to outside databases and uncover refusal to participate. Throughout our study, we evaded capture and public humiliation despite violating these 6 privacy fundamentals. We suggest that the legitimate principle of safeguarding personal privacy is undermined by the natural human tendency toward showing off.
We are shocked! Shocked! Shocked! We are shocked at the amount of sensitive personal information being released on thousands of Canadians, including some of our country's most prominent citizens. The widespread dispersal of and the easy access to health data offends our sensibilities as medical scientists who are respectful of Canadian privacy laws. We prefer to jump through innumerable bureaucratic hoops to obtain data for research, and we believe that our rivals in other scientific fields ought to do the same.
![Figure](https://www.cmaj.ca/content/cmaj/177/12/1542/F1.medium.gif)
Image by: Andrew Young
We uphold traditional values. We reminisce about the golden age when conducting a chart review was the standard for measuring quality of care. Ethics submissions were like sustained foreplay, and privacy impact assessments provided another thrill verging on “joy of the forbidden.” The 3-week turnarounds gave us time to savour and appreciate every passing minute. And joy! Even more delays occurred when health records departments could not find the relevant charts.
Woe unto those who visit the Sportstats website (www.sportstats.ca).1 This site reveals personal data obtained from timers affixed to athletes competing in sporting events across North America. This database is thorough and is searchable for many past years. In fact, we recommend using these data if you need personal information about your neighbour, nemesis or boss. In this article, we offer pointers on 6 violations of privacy for those mavericks who flaunt the scientific establishment (not us!).
Breach anonymity
A major sin of any medical study is breaching the anonymity of the participants. In contrast, the Sportstats website can be used to fully identify individuals in all their glory. For example, you could perform a search using our names and make a head-to-head comparison of our results (Figure 1). Redelmeier seems to post faster running times than Hillmer despite a handicap of 10–15 years. Perhaps Redelmeier slacks off at work or neglects his family. Or perhaps Hillmer should ignore his Blackberry while running.
Figure 1: Screen capture from the Sportstats website comparing recent race results for Donald Redelmeier and Michael Hillmer.
Stockpile personal information
Unbridled stockpiling of personal information is generally frowned upon, yet Sportstats excels in this regard as well. Consider André Picard, arguably the most powerful medical reporter for Canada's most powerful national newspaper. André (the database is so intimate, we'll call him by his first name without permission) has completed 22 races over the past 5 years with extremely competitive times. Could this be an indicator of his speed at work? Notice too, how André travels frequently to exotic Canadian locales, such the Toronto Zoo.
Generate misquotations
Sportstats also offers splendid opportunities for misquotation and defamation. Consider David Miller, the mayor of Canada's largest city. Apparently, David completed the Ford Ironman Coeur d'Alene in June 2007 in 13h:46m:31s. Wow! A time that beats nearly 900 other competitors! Given the busy schedule of any politician, a scandalmonger may wonder whether David's work is aided by anabolic steroids. Also note that Subaru and Isuzu have sponsored other races in which David has participated, raising questions about all the public transit fare increase under his mayoralty.
Snoop on celebrities
Star worship is everywhere, and this database can also track celebrities. Consider David Sackett, arguably the father of modern day clinical epidemiology. David is about as close to a rock star as any clinician scientist can get in Canada (and he even bears a passing resemblance to David Crosby). According to Sportstats, it appears that David has children who spend a lot of time running quickly, as shown by the results of the annual Around the Bay Road Race, a 30-km race held in Hamilton, Ont. Nice to know that his kids turned out better than some other celebrity kids.
Link to outside databases
The Sportstats database also permits intrusion into a person's professional life. Consider George Smitherman, the long-term Ontario minister of health. George is quite fit and ran the Toronto Mount Sinai Hospital 10-km race in 2003. Go surf other databases (e.g., Google) and find out (faster than you can say “consent is for wimps”!) that 3 years later he announced $8 million of funding to the Mount Sinai Hospital. The link between George's performance at the Casino Niagara International Half-Marathon in 2004 and his government's permissive attitude toward gambling can't be missed either.
Uncover refusal to participate
Clinical researchers assure patients that their care won't be jeopardized if they decline to participate in a study. Sportstats, in contrast, makes no pretense at chivalry because it publicizes both active participation as well as the absence of exercise by those less aerobicly inclined. Consider performing a search for Canada's most venerated news anchor, Lloyd Robertson. This search returns no matches and implies he does not participate in running events (despite his sometimes sporty attire). Alas, another indictment of journalists as voyeurs rather than as active contributors to society.
Interpretation
These 6 violations all contradict the accepted tenets of personal privacy. In fact, Ontario's privacy regulations explicitly prohibit such uses of health data.2 We are baffled by the lack of public outcry about the breach of privacy by Sportstats. Is it possible that we are overreacting to the current privacy legislation in health care in Canada? Perhaps the message is that our research should focus more on sports medicine and less on lethal diseases.
Imagine the potential for medical research if health data were so easily obtained. Software could be integrated into websites so that novice users could conduct observational research and create their own regression models with receiver operating characteristic curves. This sort of unfettered access might help alleviate shortages in funding for health care research. Indeed, important clinical and policy questions could be answered as science fair projects by high school students!
We acknowledge that Sportstats is on to something, and they are not alone. Among those who also deserve praise is, of course, the Ontario government, whose “sunshine” laws publicize large salaries as an indicator of each person's financial health.3 For example, consider David Naylor who earned $374 220 as president of the University of Toronto last year. He's worth every penny. Now, if only someone could release an electronic medical record to make researchers' lives easier.
Footnotes
-
Acknowledgements: Michael Hillmer is supported by the Canadian Institutes of Health Research. Donald Redelmeier holds a Canada Research Chair in medical decision science and is supported by the Canadian Institutes of Health Research and the Physicians' Services Incorporated Foundation.
Sadly, neither author is sponsored by Gatorade, Nike or other elite sports companies (but we are happy to entertain offers!). Drafts of this manuscript were kept away from the Privacy Commission for Ontario, the privacy officer of the Institute for Clinical Evaluative Sciences, the ethics committee at Sunnybrook Health Sciences Centre and our spouses. We also failed to act on helpful comments from several other people, including Nick Daneman, Dan Hackam, David Hodgson, Jan Hux, David Juurlink, Michael Schull, Steve Shumak, Matthew Stanbrook and Jack Williams.