Skip to main content Accessibility help
Hostname: page-component-7479d7b7d-qlrfm Total loading time: 0 Render date: 2024-07-13T17:31:10.811Z Has data issue: false hasContentIssue false

9 - The Next Challenge for Data Protection Law

AI Revolution in Automated Scientific Research

from Part III - Knowledge, Risk and Control

Published online by Cambridge University Press:  08 September 2022

Marcelo Corrales Compagnucci
University of Copenhagen
Michael Lowery Wilson
University of Turku, Finland
Mark Fenwick
Kyushu University, Japan
Nikolaus Forgó
Universität Wien, Austria
Till Bärnighausen
Universität Heidelberg
Get access


A considerable amount of literature has been published on autonomous vehicles, robotics in healthcare, and the danger of losing jobs and human control as a result of automation. However, there has been relatively little discussion about how AI might change scientific research. AI-assisted scientific research is already offering a significant boost to the process of scientific discovery. Not surprisingly, this radical change in scientific research will have significant consequences. First, if the research process becomes automated, it may be conducted by anyone, which puts citizen science in a new context. Just as developments in hardware and software made personal computers feasible for individual use, automated research may affect science in the future. Second, unlike researchers, AI and neural networks cannot explain their thinking yet. The fully automated research expands the ‘black box’, making oversight and ethical review problematic in systems opaque to outside scrutiny. Automated research raises many further questions about regulation, safety, funding and patentability. This chapter will focus on the issues connected with privacy and data protection, from the EU GDPR point of view.

AI in eHealth
Human Autonomy, Data Governance and Privacy in Healthcare
, pp. 251 - 276
Publisher: Cambridge University Press
Print publication year: 2022

Access options

Get access to the full version of this content by using one of the access options below. (Log in options will check for institutional or personal access. Content may require purchase if you do not have access.)


Act No. 78-17 of 6 January 1978 on Information Technology, Data Files and Civil Liberties, France,, accessed 24 February 2021.Google Scholar
Article 29 Working Party, ‘Guidelines on Automated Individual Decision-Making and Profiling for the Purposes of Regulation 2016/679’, 2018 as last Revised and Adopted on 6 February 2018,, accessed 24 February 2021.Google Scholar
Bonney, R, ‘Citizen Science: A Lab Tradition’ (1996) 15(4) Living Birds 7–15.Google Scholar
C-311/18 Data Protection Commissioner V Facebook Ireland and Maximillian Schrems (2020).Google Scholar
Ceccaroni, L and others, ‘Opportunities and Risks for Citizen Science in the Age of Artificial Intelligence’ (2019) 4(1) Citizen Science: Theory and Practice 1–14.Google Scholar
‘Citizen Science’ Oxford English Dictionary, 2020.Google Scholar
‘Citizen Scientist’ Oxford English Dictionary, 2019.Google Scholar
Clarke, R, ‘Regulatory Alternatives for AI’ (2019) 35(4) Computer Law and Security Review.Google Scholar
Corrales Compagnucci, M and others, ‘Homomorphic Encryption: The “Holy Grail” for Big Data Analytics & Legal Compliance in the Pharmaceutical and Healthcare Sector?’ (2019) 3(4) European Pharmaceutical Law Review 144–55.CrossRefGoogle Scholar
Corrales Compagnucci, M, Big Data, Databases and ‘Ownership’ Rights in the Cloud’ (Springer 2020).Google Scholar
Corrales Compagnucci, M and others, ‘Lost on the High Seas Without a Safe Harbor or a Shield? Navigating Cross-Border Data Transfers in the Pharmaceutical Sector After Schrems II Invalidation of the EU-US Privacy Shield’ (2020) 4(3) European Pharmaceutical Law Review 153–60.CrossRefGoogle Scholar
Council of Europe, ‘The Protection of Individuals with Regard to Automatic Processing of Personal Data in the Context of Profiling’ Recommendation CM/Rec (2010)13 and explanatory memorandum, 23 November 2010,, accessed 17 May 2021.Google Scholar
David, PA, ‘The Historical Origins of “Open Science”: An Essay on Patronage, Reputation and Common Agency Contracting in the Scientific Revolution’ (2008) 3(2) Capitalism and Society 5–14.Google Scholar
Deng, D and others, ‘Using Social Media for Collaborative Species Identification and Occurrence: Issues, Methods, and Tools’ in Goodchild, M, Pfoser, D and Sui, D (eds), Proceedings of the 1st ACM SIGSPATIAL International Workshop on Crowdsourced and Volunteered Geographic Information (2012),, accessed 24 February 2021.Google Scholar
Esteva, A and others, ‘Deep Learning-Enabled Medical Computer Vision’ (2021) 4 npj Digital Medicine 5,, accessed 24 February 2021.CrossRefGoogle ScholarPubMed
EU GDPR, ‘Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Natural Persons with Regard to the Processing of Personal Data and on the Free Movement of Such Data, and Repealing Directive 95/46/EC’ (General Data Protection Regulation), OJ 2016 L 119/1,, accessed 24 February 2021.Google Scholar
European Commission, ‘High-Level Expert Group on Artificial Intelligence’,, accessed 12 October 2020.Google Scholar
European Commission, Open Innovation, Open Science, Open to the World: A vision for Europe (Publications Office of the European Union 2016).Google Scholar
European Commission, ‘Open Innovation, Open Science, Open to the World – A Vision for Europe’ White Paper, 2016,, accessed 24 February 2021.Google Scholar
European Parliament Committee on Legal Affairs, Report with Recommendations to the Commission on Civil Law Rules on Robotics’ 27 January 2017,, accessed 17 May 2021.Google Scholar
European Parliamentary Research Service, ‘How the General Data Protection Regulation Changes the Rules for Scientific Research’ 2019,, accessed 17 May 2021.Google Scholar
Flach, P and others, ‘Abduction, Induction, and the Logic of Scientific Knowledge Development’ ECAI ’06 workshop on Abduction and Induction in AI and Scientific Modelling, 2006,, accessed 17 May 2021.Google Scholar
High-Level Expert Group on Artificial Intelligence, ‘Ethics Guidelines for Trustworthy AI’ 2018,, accessed 24 February 2021.Google Scholar
Humerick, M, ‘Taking AI Personally: How the E.U. Must Learn to Balance the Interests of Personal Data Privacy & Artificial Intelligence’ (2018) 34(4) Santa Clara High Technology Law Journal 393,, accessed 24 February 2021.Google Scholar
IMDB, ‘Ghost in the Machine’,, accessed 15 December 2020.Google Scholar
Information Commissioner’s Office, ‘Security Outcomes’,, accessed 11 October 2020.Google Scholar
Irwin, Al, Citizen Science: A Study of People, Expertise, and Sustainable Development (Routledge 1995).Google Scholar
Joppa, LN, ‘The Case for Technology Investments in the Environment’ (2017) 552(7685) Nature 325–27.Google Scholar
King, RD and others, ‘The Automation of Science’ (2009) 324(5923) Science 2–3.Google Scholar
Kitano, H, ‘Artificial Intelligence to Win the Nobel Prize and Beyond: Creating the Engine for Scientific Discovery’ (2016) 37(1) AI Magazine,, accessed 17 May 2021.Google Scholar
Lenat, DB and Brown, JS, ‘Why AM and EURISKO Appear to Work’ (1984) 23(3) Artificial Intelligence 236–40.CrossRefGoogle Scholar
Lindsay, RK and others, ‘DENDRAL: A Case Study of the First Expert System for Scientific Hypothesis Formation’ (1993) 61(2) Artificial Intelligence 209–61.CrossRefGoogle Scholar
MacDonald, EA, ‘Aurorasaurus: A Citizen Science Platform for Viewing and Reporting the Aurora’ (2015) 13(9) Space Weather 1–12.Google Scholar
Meszaros, J and Ho, C-H, ‘Big Data and Scientific Research: The Secondary Use of Personal Data Under the Research Exemption in the GDPR’ (2018) 59(4) Acta Juridica Hungarica 403–19.Google Scholar
Meszaros, J, Ho, C-H and Corrales Compagnucci, M, ‘Nudging Consent & the New Opt-Out System to the Processing of Health Data in England’ in Corrales Compagnucci, M and others (eds), Legal Tech and the New Sharing Economy (Springer 2020).Google Scholar
Minssen, T and others, ‘The EU-US Privacy Shield Regime for Cross-Border Transfers of Personal Data Under the GDPR: What are the Legal Challenges and How Might these Affect Cloud-Based Technologies, Big Data, and AI in the Medical Sector?’ (2020) 4(1) European Pharmaceutical Law Review 34–50.Google Scholar
OECD, Frascati Manual: Guidelines for Collecting and Reporting Data on Research and Experimental Development (OECD 2015).Google Scholar
OECD, ‘Making Open Science a Reality’ Technology and Industry Policy Papers, No. 25, OECD Publishing, Paris (2015),, accessed 24 February 2021.Google Scholar
Pagallo, U and others, ‘The Rise of Robotics & AI: Technological Advances & Normative Dilemmas’ in Corrales, M and others (eds), Robotics, AI and the Future of Law (Springer 2018) 1–13.Google Scholar
Royal Society of Chemistry, ‘Digital futures, a new frontier for science exploration and invention’ 2020,, accessed 17 May 2021.Google Scholar
Schüritz, R and others, ‘Capturing Value from Data: Revenue Models for Data-Driven Services’ Proceedings of the 50th Hawaii International Conference on System Sciences (2017). doi:10.24251/HICSS.2017.648CrossRefGoogle Scholar
Sparkes, A and others, ‘Towards Robot Scientists for Autonomous Scientific Discovery’ (2010) 2 (1) Automated Experimentation 1–11.CrossRefGoogle ScholarPubMed
Suman, AB and Pierce, R, ‘Challenges for Citizen Science and the EU Open Science Agenda Under the GDPR’ (2018) 4(3) European Data Protection Law Review 1–12.Google Scholar
Szalay, A and Gray, J, ‘2020 Computing: Science in an Exponential World’ (2006) 440(7083) Nature 413–14.CrossRefGoogle Scholar
The Future of Life Institute, ‘Asilomar AI principles’ developed in conjunction with the 2017 Asilomar Conference (2017),, accessed 17 May 2021.Google Scholar
United States Code, 2012 Edition, Supplement 4, Title 15 – COMMERCE AND TRADE 15 U.S.C. 3724 – Crowdsourcing and citizen science (2016),, accessed 24 February 2021.Google Scholar

Save book to Kindle

To save this book to your Kindle, first ensure is added to your Approved Personal Document E-mail List under your Personal Document Settings on the Manage Your Content and Devices page of your Amazon account. Then enter the ‘name’ part of your Kindle email address below. Find out more about saving to your Kindle.

Note you can select to save to either the or variations. ‘’ emails are free but can only be saved to your device when it is connected to wi-fi. ‘’ emails can be delivered even when you are not connected to wi-fi, but note that service fees apply.

Find out more about the Kindle Personal Document Service.

Available formats

Save book to Dropbox

To save content items to your account, please confirm that you agree to abide by our usage policies. If this is the first time you use this feature, you will be asked to authorise Cambridge Core to connect with your account. Find out more about saving content to Dropbox.

Available formats

Save book to Google Drive

To save content items to your account, please confirm that you agree to abide by our usage policies. If this is the first time you use this feature, you will be asked to authorise Cambridge Core to connect with your account. Find out more about saving content to Google Drive.

Available formats