Both workshops ran for around 2.5 hours, with the focus groups taking up 1.5 hours of this time. A total of 16 consumers (18% of those invited) participated in the workshops (workshop 1=7 participants; workshop 2=9 participants). Participants were aged between 62 and 83 years, with an equal mix of genders (8 women and 8 men), and the majority were born in Australia (n=12; 75%). All participants resided in the Frankston/Mornington Peninsula region of Victoria, Australia, and spoke English. Each CAG (online supplemental material 1) was represented by at least one participant.
Overarching theme: varying levels of trust in the use of EHR data for research
The overarching theme was that participants conveyed varying levels of trust in the use of EHR data for research. Despite most participants reporting many benefits of sharing data for research purposes, a few questioned the trustworthiness of the findings of research studies. Some participants expressed uncertainty around data collection processes, especially how and why their data are collected within the healthcare system and whether or not the accuracy of their data was sufficient for research purposes. Many participants reported data sharing fears, which led to them feeling cautious about sharing their data. Despite this, some participants were still willing to share their data, whereas others wanted additional actions to be taken to address their fears, such as research organisations actively publicising how secure their IT systems are. The three themes within the overarching theme all reflect participants’ levels of trust.
The themes are described in detail below with illustrative participant quotes. Ellipses have been used where quotes have been abbreviated and square brackets represent additional text inserted to provide context to the quote. Themes, subthemes, codes and raw data (quotes) are presented in online supplemental material 3.
Theme 1: benefits of sharing data
Participants reported many benefits to sharing their personal health data for research purposes, including benefits to consumers, to their family and to themselves. Public benefits included improvements to current health practice and the development of new medications and treatment; the latter being illustrated by one participant using COVD-19 as an example:
The rapidity with which we were able to discover the COVID immunisations, all related initially to the data collection on what was happening to people, where it was hitting, et cetera, et cetera. I also assume that’s helped them to identify where it’s come from. (female participant; workshop 1)
Another benefit to sharing data for research, specifically genetic data, as expressed by one participant, was that the health of future generations can be improved: Most of my conditions are genetic, therefore me sharing my information will directly help members of my family to come - helping other people, helping family directly. This will directly assist research by sharing our data (male participant; workshop 1). A few participants agreed that if the findings of research into high priority areas (eg, mental health) were publicised appropriately in the media, government bodies would prioritise funding to this area to either improve current resources or to enable further research:
I think it will get out there into the media and they'll be saying ‘Because of the research into mental health, we now are able to supply better funding, we can train more doctors, because we know the information is out there with more people with mental health issues’… the data can be used for funding, to do more research to help people (female participant; workshop 2)
Sharing data for research could also be in one’s own ‘self-interest’ where one’s own health and well-being could benefit from the results of research in the long term: Hopefully it will come back to help you later on. For me, it’s about getting better care across the board (female participant; workshop 2). A few participants discussed that through gaining knowledge from the findings of different research studies, they felt more empowered to be able to participate in the shared decision-making process with their healthcare team:
The consumer knowing more about (research), it’s terribly important that we know what’s happening with ourselves and that we're able to ask questions, because doctors aren't the font of all knowledge. It needs to be that partnership. So, if you’re well-informed, you've got the knowledge (female participant; workshop 1)
Although the majority of participants could see the benefits to sharing their data for research, there was a minority who felt that one cannot be entirely trusting of the findings of all research studies. One participant in particular discussed how research can sometimes appear to highlight an issue that perhaps isn’t one:
I'm not at all convinced that we are having more people with mental health issues these days. I can remember back when this question was never sort of raised because it didn't seem to be a problem. Anyone who did have [a] mental health [issue], they used to be put into a mental hospital. Now, how many of those have we got? They're now letting these people into the community. That’s why it appears to be more of it, because they're out amongst us, not research (male participant; workshop 1)
Theme 2: uncertainty around data collection processes
Many participants expressed their frustrations with how their data is collected in the health system. Electronic medical record data are collected for clinical and operational purposes. In Australia, when data are released for research, the project is reviewed by a HREC. In situations where it is not feasible to obtain informed consent, and where the benefits of the research outweigh the potential harms, data may be provided to researchers with a waiver of consent. As such, some participants were concerned that consumers do not always understand how and why their data are collected within the health system. Furthermore, these participants explained that consumers attending a health service may not be aware that their data could be used for research purposes and how these data are managed. They believed that this could be due to several communication barriers; including culture, language and religion.
A lot of people don’t understand how the data is collected and managed. Privacy, culture, language, religion - these things come into it… I think we need to start thinking about data gathering, how do we need to change our messaging from a cultural point of view. That’s really for me the key message here (female participant; workshop 1)
Another concern for some participants was the accuracy of data collected in the health system, particularly due to the omission of consumer data: It’s counterproductive. If people are strange, I might shut up because you're not being nice to me, and so I won't tell you about something that’s going to help me and help you. Is it [the data] correct?” (male participant; workshop 2). Some participants felt too embarrassed to share some aspects of their personal health information such as prostate issues or a urinary tract infection, whereas a few others discussed feeling patronised by younger health professionals because of their age and subsequently feeling hesitant to share their health data:
The attitude of the medicos. In other words, a younger doctor talking down to an older person… quite often you'll get a 50-year-old saying, ‘All right dear’… but to us it’s important because we’ve gone to them and the last thing you want is to feel stupid. (female participant; workshop 2)
Negative perceptions towards data collection processes may also stem from how data are perceived to be insidiously collected in society through channels such as social media and Artificial Intelligence, without consumers knowing. One participant stated:
I have been inundated with all these calls at home. I have a private number on my mobile. I don't even answer Peninsula Health anymore because I'm hesitant. Do you want led lights in your house or a new shower? It’s just, I don’t know where they get all that information? (female participant; workshop 2)
Theme 3: data sharing fears
Participants conveyed various levels of caution around sharing their data. A few participants discussed being completely open to sharing their data during the receipt of healthcare for research purposes and were indifferent to who had access to their data:
I shared, and I’ll give them everything and I don’t care who sees it (female participant; workshop 1)
On the other hand, a large portion of participants discussed the many threats or fears that shaped their concerns in sharing their data; including breaches of confidentiality and potential abuses of their personal health data. It was apparent that these concerns stemmed from an inherent fear of sharing personal data within broader society, particularly the susceptibility of their personal data to hackers or cyber criminals: Have you taken into account the Russian hackers? People are worried about their medical data, and I say, “What about your bank?” The bank can be hacked too (male participant; workshop 2).
Some participants feared the negative implications of data leaks, such as family members discovering information they did not want them to know about or having one’s career jeopardised as a result of specific data being revealed. One participant spoke about the potential consequences of data being shared externally to the healthcare system and being seen by certain people, such as a health or travel insurer:
One of the biggest problems we have within - it’s not only the hospital, but anywhere with anything is litigation, that we’re so worried about giving information out and therefore hesitant to share. The thing that maybe life insurance companies and things like this [might see my data], travel insurance even… (male participant; workshop 2)
Some participants expressed that data sharing can be seen as a ‘double-edged sword’. They explained that there are many perceived risks to sharing data; however, also acknowledged that if we do not share our data, we would not get the benefits of research such as new treatments or improved healthcare provision. For example, one participant discussed how people are fearful of pharmaceutical companies, especially due to their bad reputation. However, they acknowledged that we rely on them to keep us alive with tablets and it is therefore essential that they have access to our data. Another participant explained that we live in an era of increased data misuse, and that we may need to put up with it, especially when considering the sharing of personal data for research purposes, where data security is often perceived to be more safe or controllable:
Those [data security] problems will probably go away, but they don't. They're here, and we live with it now. We have to put up with it. What’s being suggested here is a minor contrivance. It’s easily controllable (male participant, workshop 1)
To create trust, it is apparent that one needs to address and reduce the fears that consumers have in sharing their data. As one participant discussed, although she fears her data being leaked, she is happy to share her information, if the research institution holding her data reduces this fear by actively publicising how secure their information technology systems are. Another facilitator of trust mentioned by a few participants was research organisations being accountable for data breaches including penalties or punishment. One participant stated:
Once we have this system going there has to be accountability, especially if our human rights and our privacy is being taken. It’s all good putting all this together, but if research organistaions do use it incorrectly, they must be punished (female participant; workshop 2)
However, even if research organisations are open and transparent with how they handle consumer data, some participants expressed they may still not believe or trust in these processes: Is my name withheld? That would be the question. Is it really? Is it really withheld? You're telling me it is, but do I believe you? And I think that’s a lot of the fear. (female participant; workshop 1). For some consumers, to develop trust, they may need to have a more active role in the control of their data. One participant expressed a desire to have more knowledge over what data are collected and the opportunity to review the accuracy of that data:
At an individual level, I'd want to know that I can challenge and/or change information, and every now and then find out what it is that you've got, because otherwise I'm not even going to know what you're keeping… (male participant; workshop 2)