• The application of artificial intelligence (AI) has transformed the existing notion of the health care system. The concept of AI is not new, but increasing computational power and big data, the Internet of Things, and advanced analytical power ushers in new opportunities to realize the full potential of AI. Recently, there has been an increased application of AI in the health care system, potentially raising questions about patient safety, privacy, security, and confidentiality, specifically data protection. • The present study focuses on the effectiveness of the Malaysian data protection law in addressing the issue of health data protection in the wake of proliferated use of AI in the health care system. The Malaysian Personal Data Protection Act (PDPA) has to face challenges in applying AI because the data processing mechanism of AI has fundamentally challenged the adequacy and sustainability of present data protection principles and associated rights of individuals. • However, as nearly a decade-old law, the current PDPA requires some amendments to its provisions, for instance, the introduction of the mandatory requirement of data protection impact assessment and privacy by design for high-risk data (ie health data) processing and human involvement in automated decision-making process among others. Besides, ensuring more accountability and transparency on the part of the data users by introducing a comprehensive code of practice about the processing of health data would help data users comply with data protection legislation.

中文翻译：

---

医疗保健中的人工智能：马来西亚的数据保护问题

• 人工智能 (AI) 的应用改变了医疗保健系统的现有概念。人工智能的概念并不新鲜，但不断增长的计算能力和大数据、物联网和先进的分析能力为实现人工智能的全部潜力带来了新的机遇。最近，人工智能在医疗保健系统中的应用越来越多，这可能会引发有关患者安全、隐私、安全和机密性的问题，特别是数据保护。• 本研究侧重于马来西亚数据保护法在解决医疗保健系统中大量使用人工智能后的健康数据保护问题方面的有效性。马来西亚个人数据保护法（PDPA）在应用人工智能方面必须面临挑战，因为人工智能的数据处理机制从根本上挑战了现行数据保护原则和个人相关权利的充分性和可持续性。• 然而，作为已有近十年历史的法律，现行的 PDPA 需要对其条款进行一些修改，例如，对高风险数据（即健康数据）处理引入数据保护影响评估和设计隐私的强制性要求以及人工参与自动化决策过程等。此外，通过引入有关处理健康数据的全面操作守则确保数据用户的更多责任和透明度，将有助于数据用户遵守数据保护立法。