Skip to main content
Springer Nature Link
Log in

Legal, Privacy, Social and Ethical Requirements and Impact Assessment for an Artificial Intelligence Based Medical Imaging Project

  • Conference paper
  • First Online:
Systems, Software and Services Process Improvement (EuroSPI 2022)

Part of the book series: Communications in Computer and Information Science ((CCIS,volume 1646))

Included in the following conference series:

Abstract

The use of Artificial Intelligence (AI) systems in the health domain requires developers of these systems to consider a wider view of requirements beyond traditional data security requirements. Data controllers of these systems should also include requirements that consider legal, privacy, fundamental rights, social, and ethical values. However, harmonized guidelines around AI principles and requirements are not agreed and divergent. This requires a creative approach with the development of these requirements for AI projects. Furthermore, many of the guidelines fail to establish a link between principles and actionable requirements. In this paper we present the methodology used to develop the legal, privacy, social and ethical requirements for an AI based medical imaging project entitled Medical Imaging Ireland (Med-I). Furthermore, we provide an overview of an assessment of these requirements implementation within the Med-I project.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution

Subscribe and save

Springer+ Basic
$34.99 /Month
  • Get 10 units per month
  • Download Article/Chapter or eBook
  • 1 Unit = 1 Article or 1 Chapter
  • Cancel anytime
Subscribe now

Buy Now

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Similar content being viewed by others

References

  1. Solove, D.J.: Understanding Privacy. The George Washington University Law School Public Law And Legal Theory Working Paper No. 420 Legal Studies Research Paper, No. 420, pp. 1–25. Harvard University Press, Cambridge, Massachusetts, (2008)

    Google Scholar 

  2. Nissenbaum, H.: Privacy in context: technology, policy, and the integrity of social life. In: Privacy in Context. Stanford University Press, Redwood City (2009)

    Google Scholar 

  3. EU General Data Protection Regulation (GDPR), Regulation (EU) 2016/679 of the European Parliament and of the council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC. EU, pp. 1–88 (2016)

    Google Scholar 

  4. Ayling, J., Chapman, A.: Putting AI ethics to work: are the tools fit for purpose? AI Ethics, 1–25 (2021).https://doi.org/10.1007/s43681-021-00084-x

  5. Schiff, D., Borenstein, J., Biddle, J., Laas, K.: AI Ethics in the public, private, and NGO sectors: a review of a global document collection. IEEE Trans. Technol. Soc. 2(1), 31–42 (2021)

    Article  Google Scholar 

  6. Ryan, M.L., O’Donovan, T., McNulty, J.P.: Artificial intelligence: the opinions of radiographers and radiation therapists in Ireland. Radiography 27, S74–S82 (2021)

    Article  Google Scholar 

  7. Muller, H., Mayrhofer, M.T., Ben Van Veen, E., Holzinger, A.: The ten commandments of ethical medical AI. Computer (Long. Beach. Calif). 54(7), 119–123 (2021)

    Google Scholar 

  8. Geis, J.R., et al.: Ethics of artificial intelligence in radiology: summary of the joint European and North American multisociety statement. Radiology 293(2), 436–440 (2019)

    Article  Google Scholar 

  9. Geismann, J., Gerking, C., Bodden, E.: Towards ensuring security by design in cyber-physical systems engineering processes. In: Proceedings of the 2018 International Conference on Software and System Process, pp. 123–127. Gothenburg, Sweden (2018)

    Google Scholar 

  10. Razzak, M.I., Naz, S., Zaib, A.: Deep learning for medical image processing: overview, challenges and the future. Lect. Notes Comput. Vis. Biomech. 26, 323–350 (2018)

    Article  Google Scholar 

  11. Vanclay, F., Baines, J.T., Taylor, C.N., Vanclay, F.J., Baines, T., Taylor, C.N.: Principles for ethical research involving humans : ethical professional practice in impact assessment part I. Impact Assess. Proj. Appraisal 31(4), 243–253 (2013)

    Article  Google Scholar 

  12. Mantelero, A.: AI and big data: a blueprint for a human rights, social and ethical impact assessment. Comput. Law Secur. Rev. 34(4), 754–772 (2018)

    Article  Google Scholar 

  13. Floridi, L., Cowls, J.: A unified framework of five principles for AI in society. Harv. Data Sci. Rev. Summer (1.1), 1–17 (2019)

    Google Scholar 

  14. Fjeld, J., Achten, N., Hilligoss, H., Nagy, A., Srikumar, M.: Principled artificial intelligence: mapping consensus in ethical and rights-based approaches to principles for AI. Berkman Klein Center Research Publication, (2020)

    Google Scholar 

  15. Falabiba, N.E.: Communication from the Commission to the European Parliament, the European Council, the Council, the European Economic and Social Committee and the Committee of the Regions. Fostering a European approach to Artificial Intelligence, Brussels (2021)

    Google Scholar 

  16. AI HLEG, Ethics Guidelines for Trustworthy AI, 32, 1–41 (2019)

    Google Scholar 

  17. AI HLEG, Policy and Investment Recommendations for Trustworthy AI. European Commission, Brussels, 1–52 (2019). https://www.europarl.europa.eu/italy/resource/static/files/import/intelligenza_artificiale_30_aprile/ai-hleg_policy-and-investment-recommendations.pdf. Accessed 17 June 2022

  18. AI HLEG, The Assessment List for Trustworthy Artificial Intelligencer (ALTAI) for self assessment. EU Publications Office, Brussels, pp. 1–38 (2020). https://digital-strategy.ec.europa.eu/en/library/assessment-list-trustworthy-artificial-intelligence-altai-self-assessment. Accessed 17 June 2022

  19. Government of Ireland, Data Protection Act 2018 (Section 36(2)) (Health Research) Regulations 2018 (S.I. No. 314/2018). Ireland (2018)

    Google Scholar 

  20. Mee, B., et al.: What GDPR and the health research regulations (HRRs ) mean for Ireland : a research perspective. Irish J. Med. Sci. 190(2), 505–514 (2021)

    Article  Google Scholar 

  21. Elshekeil, S.A., Laoyookhong, S.: GDPR Privacy by Design. Stockholm (2017)

    Google Scholar 

  22. Data Protection Commission Ireland, Guide to Data Protection Impact Assessments (DPIAs). October. Data Protection Commissioner, Ireland (2019)

    Google Scholar 

  23. Bieker, F.: Privacy technologies and policy, In: Proceedings of the 4th Annual Privacy Forum, (APF 2016), 10518 (October), pp. 21–37. Springer, Frankfurt/Main, Germany (2017)

    Google Scholar 

  24. ICO, What is a DPIA?, Data Protection Impact Assessments (DPIAs) (2020). https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/data-protection-impact-assessments-dpias/what-is-a-dpia/. Accessed 17 June 2022

  25. Glinz, M.: On non-functional requirements. In: 15th IEEE International Requirements Engineering Conference, pp. 21–26. IEEE, Delhi, India (2007)

    Google Scholar 

  26. Eckhardt, J., Vogelsang, A., Fernández, D.M.: Are non-functional requirements really non-functional? an investigation of non-functional requirements in practice. In: Proceedings of the 38th International Conference on Software Engineering, pp. 832–842 NY, United States (2016)

    Google Scholar 

  27. ISO/IEC 29134:2017 Information technology — Security techniques — Guidelines for privacy impact assessment. BSI Standards Publication (2017)

    Google Scholar 

  28. Deng, M., Wuyts, K., Scandariato, R., Preneel, B., Joosen, W.: A privacy threat analysis framework: supporting the elicitation and fulfillment of privacy requirements. Requir. Eng. 1(16), 3–32 (2011)

    Article  Google Scholar 

Download references

Author information

Authors and Affiliations

  1. Regulated Software Research Centre, Dundalk Institute of Technology, Dundalk, Ireland

    Ceara Treacy & Gilbert Regan

  2. University College Dublin, Belfield, Dublin 4, Ireland

    Arsalan Shahid

  3. IBM, Dublin, Ireland

    Brian Maguire

Authors
  1. Ceara Treacy
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Gilbert Regan
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Arsalan Shahid
    View author publications

    You can also search for this author in PubMed Google Scholar

  4. Brian Maguire
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Ceara Treacy .

Editor information

Editors and Affiliations

  1. Gazi University, Ankara, Turkey

    Murat Yilmaz

  2. Dublin City University, Dublin, Ireland

    Paul Clarke

  3. I.S.C.N. GesmbH, Graz, Austria

    Richard Messnarz

  4. Paracelsus Medical University, Salzburg, Austria

    Bruno Wöran

Rights and permissions

Reprints and permissions

Copyright information

© 2022 Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Treacy, C., Regan, G., Shahid, A., Maguire, B. (2022). Legal, Privacy, Social and Ethical Requirements and Impact Assessment for an Artificial Intelligence Based Medical Imaging Project. In: Yilmaz, M., Clarke, P., Messnarz, R., Wöran, B. (eds) Systems, Software and Services Process Improvement. EuroSPI 2022. Communications in Computer and Information Science, vol 1646. Springer, Cham. https://doi.org/10.1007/978-3-031-15559-8_3

Download citation

  • DOI: https://doi.org/10.1007/978-3-031-15559-8_3

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-031-15558-1

  • Online ISBN: 978-3-031-15559-8

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics