Balancing Bias Mitigation and Data Protection in AI-Driven Healthcare

Insights from the European Health Data Space, AI Act and GDPR

Authors

  • Fatma Sümeyra Doğan Jagiellonian University

DOI:

https://doi.org/10.25365/vlr-2025-9-3-99

Keywords:

EHDS, bias mitigation, AI Act, GDPR, secondary use of health data, anonymisation, pseudonymisation

Abstract

This paper examines the regulatory tensions between algorithmic bias mitigation and data protection in AI-driven healthcare within the European Union’s legal framework. Through analysis of the European Health Data Space Regulation, AI Act, and General Data Protection Regulation, the study reveals a fundamental paradox: while the EHDS promotes data anonymization for secondary use, effective bias detection in high-risk AI systems often requires access to the very demographic data that anonymization obscures. The research highlights documented cases of algorithmic bias in healthcare, including racial disparities in skin cancer diagnosis and gender biases in heart attack prediction systems, demonstrating the practical importance of this regulatory challenge. The findings illustrate how the EHDS’s opt-out mechanism may disproportionately exclude vulnerable populations from datasets, further compromising representativeness. This study contributes to the discourse by identifying an “identification paradox” where data protection measures may inadvertently perpetuate algorithmic discrimination. The paper concludes by proposing potential regulatory and technical approaches to reconcile privacy protection with algorithmic fairness, ensuring healthcare AI systems can deliver equitable outcomes while respecting fundamental rights to data protection.

Author Biography

Fatma Sümeyra Doğan, Jagiellonian University

Fatma Sümeyra Doğan is a PhD candidate and MSCA fellow in the Legality Attentive Data Scientists project at Jagiellonian University. She focuses on data protection law, AI and health data governance, with particular interest in the intersection of European digital regulation and healthcare technologies. She obtained her Master's degree in Private Law from Istanbul Medeniyet University, with a thesis on the patentability of computer-implemented inventions under EU law. Her current research within the Legality Attentive Data Scientists project explores the regulatory challenges of AI-driven healthcare, data anonymization techniques and the implementation of the European Health Data Space under GDPR and the AI Act.

Downloads

Published

2025-10-30