May 19, 2020
Puerto Rico, GovTech, and Health
Government Tech, or how it is commonly known GovTech, is novel technology implemented to address people’s issues by a given government. This government can be local, municipal, tribal, provincial, statal, or national, what matters is that it uses the technology in benefit of its people and not to their hinderement. Part of the meaning around this is that governments ought to use cutting edge technology while maintaining for example the privacy and security of the users of a given service. We have seen over the last few weeks in Puerto Rico, both a lack of adequate management of technology and an inability both from contractors and agencies to maintain modern standards and techniques. However, the purpose of this article is not to attack agencies or any given individual but to share and highlight possible solutions to the problems the government is facing. Currently, when a government agency in Puerto Rico needs a technological solution implemented they hire software companies to do so. For example, the Health Department has awarded contracts to Wovenware, the Police Department and the Municipality of San Juan have awarded contracts to Geographic Mapping Technologies, and the Department of Labor and the Department of Family have awarded contracts to Evertec. However other dependencies such as the Demographic Registry haven’t had access to this resources and they lack modern-enough infrastructure for the needs that arise in 2020.
The latest example of this lack of infrastructure was demonstrated a week and a half ago with the management of the mortality database handled by the Demographic Registry. The Center for Investigative Journalism (CPI, by its Spanish initials) filed a lawsuit in the San Juan Justice Court to compile the Registry to give them access to the full mortality database from 2007 to the latest data available of this year. After a couple of weeks of deliberations the Court decided to grant the petition of the lawsuit to the CPI and within days the Registry complied and sent the database to the CPI. The same day that the CPI received the database they published it in its entirety in a blatant disregard for the privacy and security of whose information was published there. To make things clear, the database contained not only information about the deceased, but also about who informed the deaths to the authorities and their addresses, as well as the license numbers of the medical professionals who certified the deaths. The following date to the publication of the data the CPI took it down from their Dropbox and asked people to sign a waiver to then receive the dataset. There are many things that could have prevented this situation from the beginning. One of them was the methodologies the Registry implements to handle vital statistics. No one should be given access to the raw data like the CPI was awarded to, but I also understand the need for accountability and transparency. Gladly, computer science and mathematics have a solution for this problem, the concept of Differential Privacy states that we can publish a dataset with the same statistical properties as the raw data without giving access to the individual data points. To achieve continuous access to this differentiated dataset, the Registry could implement a REST or GraphQL API endpoint so that users can programmatically query the dataset. This also serves as an opportunity to highlight the need of Puerto Rico’s agencies to modernize its infrastructure.
Last week, Arnaldo Cruz, former director and founder of Abre Puerto Rico (NGO focused on open data) and now Director of Research & Policy of the Oversight Board, published an article in which he called for the strengthening of public health digital infrastructure. One of the bullet points he raised is the following:
Migrate existing IT infrastructure to open source tools and cloud services, to guarantee continuous availability and flexibility to model and merge diverse sources of information into a compliant dataset for analysis and visualization. Cloud-based technology and analysis tools allow the government to share information with health providers and critical stakeholders easily.