CPDP.ai 2025

by Katja Hartl, Saskia Kaltenbrunner, Kseniia Guliaeva and Mariana Rissetto

We’re honored to have had the opportunity to host a workshop at this year’s CPDP.ai jointly hosted by the ID Law Team of the University of Vienna as part of the OPTIMA project together with the Data Protection Moot Court, where we delved into the evolving challenges of data protection litigation in the fast-moving world of healthcare and artificial intelligence.

Through a dynamic, fictional case scenario, participants were invited to step into the shoes of practitioners dealing with real-world issues: a healthcare facility on the path to modernization, seeking to deploy an AI tool for cancer prediction, diagnosis, and treatment.

The scenario sparked a rich and thought-provoking discussion around some of today’s most pressing data protection issues, including:

  • the right to erasure and the technical hurdles of enforcing it within complex AI systems,
  • storage limitation and the need to align data retention with legal and ethical expectations,
  • Data minimization and the imperative to collect only what is necessary for medical insights,
  • Privacy-by-design, a foundational principle in ensuring the rights of data subjects are built into AI systems from the ground up.

We were deeply impressed by the level of thoughtfulness and critical engagement participants brought to the session. Their ability to capture the complexity and nuance of these intersecting legal, ethical, and technical challenges reaffirmed the relevance and urgency of the topic—especially in a domain as sensitive and vital as health.

We are grateful to everyone who joined us and contributed to the dialogue. We look forward to continuing these important conversations as AI continues to reshape the future of healthcare.