Privacy regulators call for health data protection in AI systems, laws and regulations

The Office of the Privacy Commissioner of Canada says the resolution was passed at the recent annual meeting of federal, provincial, and territorial information and privacy commissioners and ombuds, hosted in Ottawa[2].The regulators warn in their news release that inadequate protections, accountability, and oversight could lead to significant consequences[2], including the unauthorized collection, use, and disclosure of personal health information[2] and systemic discrimination[2].The release says the regulators are urging governments to update laws so that AI systems meet six core principles[2]: being privacy protective, valid and reliable, safe, human rights affirming, transparent and accountable. The regulators also want governments to legally require all relevant parties who develop, procure, and use AI systems in health care to establish effective AI governance and accountability frameworks.[2]According to the release, the regulators are also asking Canada's health research agencies to update national research ethics policies[2] to give more guidance on AI research involving human participants.Privacy Commissioner of Canada Philippe Dufresne said in the release that "Privacy matters to Canadians – especially when it comes to sensitive health information."[2]Ontario's Information and Privacy Commissioner, Patricia Kosseim, said in a statement carried by Newswire that the resolution is a call to "ensure that strong safeguards are in place to protect people seeking care."[3]According to Newswire, the regulators also commit to continue to advocate for laws and regulations governing the responsible use of AI in health[3] and to work together where they can on joint enforcement and guidance.