Which are the data protection obligations arising by the use of AI technology in Virtual Voice Assistants (VVAs – as Siri and Alexa) in healthcare? What transparency obligations does the current legislative framework impose?
Our senior associate Gianna Zafeiriou, has participated on May 25th at the Komotini Law School, where the MASTER in LAW AND INFORMATICS of UOM and the Alumni Association “Law and Informatics” organized the 2nd Interdisciplinary Conference “Law and Informatics: Exploring the aspects of Artificial Intelligence – Cutting-edge technologies as a legislative challenge”.
Her presentation involved the “The Legal Framework for the Use of Virtual Voice Assistants (VVAs) in the Health Sector” during which she elaborated the chain of factors that intervene from the design and commissioning of VVAs and their data protection obligations according to the applicable data protection legislation according to their roles, the categories of personal data processed through the training and use of the VVAs as well as the findings of the recent case-law regarding data-scraping, the principles they need to abide to and the reflections involved by the use of AI, the recommended mechanism on the response to data subjects’ rights, taking also into account profiling. Additionally, the transparency obligations to end users of the entities using them as digital tools for the provision of services according to AI ethics and Law 4961/2022 (registry and code of conduct/ethics), GDPR obligations (according to article 13 and 14) and AI ACT (according to article 50). Finally, the synergy of the indicative legislation on liability from the use of AI in VVAs was listed as well as reflections regarding the new era initiating by the transition to the evolution of Generative AI and the specific requirements of AI ACT as well as the current data protection legislation and guidelines of the competent bodies concerning these systems.
