GAO Technology Assessment GAO-20-215SP 61
Policy Option: Data Access
Policymakers could create mechanisms or incentives for increased
sharing of high-quality secured data held by public or private actors,
while also ensuring protection of patient data.
Potential Opportunities Potential Considerations
• Could shorten the length of the drug development process and reduce costs.
To promote greater availability of data, policymakers could consider forming
or facilitating research consortia that allow for secure data sharing. As
discussed in chapter 3, the MELLODDY consortium is one example of how
different entities are using partnerships to share data. One expert suggested
that rewarding researchers based on how often others used their data
could incentivize the generation of more open and accessible data. For
example, when reviewing grant applications, grant-making organizations
could consider how often others have used the applicant researcher’s
data.
Policymakers could also consider creating a data repository through
encouraging an industry-driven solution, establishing a public-private
partnership, or creating a repository of all data under their control. For
example, the NIH runs the website ClinicalTrials.gov, which hosts data on
over 300,000 research studies. As described earlier, more data could
decrease the time to complete clinical trials. However, one of our experts
said the website contained data not readily usable for machine learning.
• Could help companies identify unsuccessful drug candidates earlier in the
development process, conserving resources. For example, cost reductions
could occur within each step of drug development or as a new compound
moves from one step to another.
62
As described earlier, studies have
estimated the average cost per new FDA-approved drug between $0.6 and
$1.4 billion.
63
• Would likely require coordination between various stakeholders and incur
setup and maintenance costs.
64
Stakeholders, including federal agencies,
would likely need to carefully coordinate across each other’s respective
domains to minimize duplication and overlap.
65
Previous GAO reports
describe how interagency coordination and collaboration can be
challenging.
66
For example, a lack of information on roles and responsibilities
and lack of coordination mechanisms can hinder effective interagency
collaboration. Costs could include computing software and hardware,
energy, and staffing needs. Consortia of academic and public entities could
combine their efforts to create a repository, spreading the time and cost
required across the organizations.
• Improper data sharing or use could have legal consequences. Increased data
sharing could therefore require a careful review of the legal ramifications,
because data are often gathered through a wide variety of mechanisms and
governed by multiple legal frameworks.
• Cybersecurity risks could increase and those threats would likely take
additional time and resources to mitigate. For example, if data were stored
in a central repository and that system was breached, it could cause a large
amount of sensitive data to be exposed at once. In a prior report, we found
that cybersecurity breaches in 2015 caused over 113 million individual health
care records to be compromised.
67
In May 2015, the University of California,
Los Angeles Health network discovered a cyberattack in which individuals
had personally identifiable information compromised, including medical
record numbers, Medicare or health plan ID numbers, and some medical
information.
• Organizations with proprietary data could be reluctant to participate. As we
discussed earlier, drug companies consider their data valuable, proprietary,
and a competitive edge. Data sharing could raise issues related to ownership
or protection of intellectual property. Therefore, incentives may be
necessary to encourage the sharing of data. For example, one expert
suggested extending patent protection for drugs already developed if drug
companies that developed those drugs agreed to release new data.
Source: GAO. | GAO-20-215SP
62
We did not perform an economic analysis to attempt to quantify cost savings.
63
DiMasi, Grabowski, and Hansen, “Innovation in the Pharmaceutical Industry,” and Prasad and Mailankody, “Spending to Bring Single Cancer Drug to Market and
Revenues After Approval.”
64
We did not perform an economic analysis to attempt to quantify costs that could be incurred.
65
We did not estimate the quantity and quality of coordination needed to implement these policy options.
66
GAO, Interagency Collaboration: Key Issues for Congressional Oversight of National Security Strategies, Organizations, Workforce, and Information Sharing, GAO-09-
904SP (Washington, D.C.: Sept. 25, 2009). GAO, Results-Oriented Government: Practices That Can Help Enhance and Sustain Collaboration among Federal Agencies,
GAO-06-15 (Washington, D.C.: Oct. 21, 2005).
67
This number is based on reported breaches of 500 or more individuals. GAO, Electronic Health Information: HHS Needs to Strengthen Security and Privacy Guidance
and Oversight, GAO-16-771 (Washington, D.C.: Aug. 26, 2016).