Learning objectives

• You will identify the most important GDPR requirements for AI tools in healthcare and classify which data requires special protection.
• You will distinguish between anonymized, pseudonymized, and personal data and determine which data set is permissible for AI training in your organization.
• You will verify whether a legal basis such as consent or legitimate interests exists and derive concrete protective measures from this.
• You will implement Data Privacy by Design in your AI project by embedding and documenting data protection measures as early as the planning phase.
• You will determine whether a data protection impact assessment is necessary and outline the key steps to systematically assess and mitigate risks.