Top privacy and Hronček & Partners at ICBBTM 2026: How to Navigate the AI Act, GDPR, and EHDS in Healthcare and Safely Share Medical Records.
At the international conference ICBBTM 2026, held September 23–25, 2026, at the Aula Magna in Martin, Eva Winter and Peter Čičala spoke on behalf of Hronček & Partners and Top privacy. In the Digital Health, AI & Data Science session, they joined Matej Mihalech from Touch4IT to present “The Triple Crown of Digital Trust: Turning GDPR, the AI Act, and the EHDS into a Competitive Advantage”.
Today, the healthcare sector sits at the intersection of three regulatory frameworks: the AI Act, the European Health Data Space (EHDS), and the GDPR. The presentation focused on what this intersection means for healthcare providers in practice:
- The legal role of a hospital under the AI Act depends on the purpose and manner of use of the AI system.
- AI literacy does not mean training in prompt engineering, but rather an understanding of the system’s limitations.
- The GDPR applies in full even to AI, and the responsibility lies with the hospital, not the tool provider.
- For AI tools, the contractual and technical framework in which they are used is particularly decisive.
Part of the presentation was also devoted to the practical procedure for external consultation of medical records. Standard digital redaction of data in PDFs is often not irreversible, and the hidden data can be recovered. Therefore, it is safer to print the document and scan it again. The password for the encrypted file must be sent via a different communication channel than the file itself.
We would like to thank our partner Touch4IT for joining us, the conference organizers for their excellent work, and all participants for the stimulating discussion.
