{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,12]],"date-time":"2026-08-12T06:30:43Z","timestamp":1786516243854,"version":"build-2736575974"},"reference-count":44,"publisher":"Frontiers Media SA","license":[{"start":{"date-parts":[[2026,8,12]],"date-time":"2026-08-12T00:00:00Z","timestamp":1786492800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["frontiersin.org"],"crossmark-restriction":true},"short-container-title":["Front. Public Health"],"abstract":"<jats:p>Medical artificial intelligence applies advanced AI technologies to enhance the efficiency and quality of clinical diagnosis and treatment. The extensive processing of personal health information in medical AI applications have further accelerated the digital transformation of healthcare services. However, medical AI also introduces new challenges for personal health information protection. In this context, health information faces not only continuous processing but also uncertain processing purposes, involvement of multiple processing entities, and accumulating algorithmic risks, all of which may weaken individuals\u2019 control over their health information and increase the risk of privacy infringement. Although China has established a preliminary legal framework for personal information protection, existing rules remain fragmented and insufficiently targeted. Specifically, the concept and scope of personal health information remain insufficiently defined, the legal bases for its processing require further clarification, and traditional informed consent rules are difficult to apply effectively in medical AI environments. Against this background, this article argues for the enactment of dedicated legislation on personal health information protection to establish a more systematic regulatory framework for defining health information and governing its processing. With respect to informed consent, the existing uniform requirement of separate consent should be refined through a tiered consent framework based on information classification and contextual risk assessment, complemented by dynamic consent mechanisms to enhance individuals\u2019 continuous control over their health information throughout the data-processing lifecycle. Furthermore, in response to emerging risks arising from the application of medical AI algorithms, a lifecycle governance framework covering algorithm design, training, and deployment should be established to enhance the accountability and safety of algorithmic processing.<\/jats:p>","DOI":"10.3389\/fpubh.2026.1855457","type":"journal-article","created":{"date-parts":[[2026,8,12]],"date-time":"2026-08-12T05:55:27Z","timestamp":1786514127000},"update-policy":"https:\/\/doi.org\/10.3389\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Legal protection of personal health information in medical AI applications in China: challenges and regulatory responses"],"prefix":"10.3389","volume":"14","author":[{"given":"Longmei","family":"Tian","sequence":"first","affiliation":[{"name":"School of Law, Tongji University","place":["Shanghai, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ruohua","family":"Ning","sequence":"additional","affiliation":[{"name":"Business School, Xianda College of Economics and Humanities Shanghai International Studies University","place":["Shanghai, China"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1965","published-online":{"date-parts":[[2026,8,12]]},"reference":[{"key":"ref1","doi-asserted-by":"publisher","first-page":"862322","DOI":"10.3389\/fsurg.2022.862322","article-title":"Legal and ethical consideration in artificial intelligence in healthcare: who takes responsibility?","volume":"9","author":"Naik","year":"2022","journal-title":"Front Surg"},{"key":"ref2","doi-asserted-by":"publisher","first-page":"44","DOI":"10.1038\/s41591-018-0300-7","article-title":"High-performance medicine: the convergence of human and artificial intelligence","volume":"25","author":"Topol","year":"2019","journal-title":"Nat Med"},{"key":"ref3","year":"2023"},{"key":"ref4","year":"2023"},{"key":"ref5","first-page":"40","article-title":"Status quo and enlightenment of private data protection in medical informatization domain home and abroad","volume":"40","author":"Wang","year":"2019","journal-title":"J Med Inform"},{"key":"ref6","author":"Kharpal","year":"2017"},{"key":"ref7","doi-asserted-by":"publisher","first-page":"909","DOI":"10.1001\/jama.2024.1110","article-title":"Health care AI and patient privacy\u2014Dinerstein v Google","volume":"331","author":"Duffourc","year":"2024","journal-title":"JAMA"},{"key":"ref8","doi-asserted-by":"publisher","first-page":"34","DOI":"10.19752\/j.cnki.1004-6607.2024.03.006","article-title":"Discuss the protection of personal medical and health information on the view of personal information protection law","volume":"32","author":"Ge","year":"2024","journal-title":"China\u2019s Health Law System"},{"key":"ref9","doi-asserted-by":"publisher","first-page":"60","DOI":"10.3969\/j.issn.1008-4622.2026.02.006","article-title":"Large language models and the conflict with and adaptation to the purpose limitation principle for personal information","volume":"29","author":"Zong","year":"2026","journal-title":"J East China Univ Polit Sci Law"},{"key":"ref10","doi-asserted-by":"publisher","first-page":"101","DOI":"10.15984\/j.cnki.1005-9512.2026.01.002","article-title":"On the regime of personal information protection in the context of artificial intelligence: challenges and responses","author":"Ding","year":"2026","journal-title":"Polit Law"},{"key":"ref11","doi-asserted-by":"publisher","first-page":"137","DOI":"10.16614\/j.gznuj.skb.2021.02.015","article-title":"Legal protection of personal health information from the perspective of Covid-19","author":"Du","year":"2021","journal-title":"J. Guizhou Norm. Univ."},{"key":"ref12","year":""},{"key":"ref13","year":"2016"},{"key":"ref14","year":""},{"key":"ref15","year":"2020"},{"key":"ref16","doi-asserted-by":"publisher","first-page":"830","DOI":"10.3969\/j.issn.1004-4663.2007.12.017","article-title":"Discussion on individual medical information and its right protection","volume":"33","year":"2007","journal-title":"China Health Care Manag"},{"key":"ref17","doi-asserted-by":"publisher","first-page":"1","DOI":"10.13376\/j.cbls\/2022001","article-title":"Finding the balance between security protection and open sharing in life and health big data \u2014 reflections on the personal information protection law of the people\u2019s republic of China","volume":"34","author":"Wu","year":"2022","journal-title":"Chin Bull Life Sci"},{"key":"ref18","doi-asserted-by":"publisher","first-page":"060","DOI":"10.1055\/s-0038-1667071","article-title":"Access and disclosure of personal health information: a challenging privacy landscape in 2016-2018","volume":"27","author":"Kloss","year":"2018","journal-title":"Yearb Med Inform"},{"key":"ref19","doi-asserted-by":"publisher","first-page":"88","DOI":"10.3969\/j.issn.1004-9517.2022.05.008","article-title":"Protection and limitation of medical and health personal information from the perspective of public health security","volume":"32","author":"Mo","year":"2022","journal-title":"Electronic Intellectual Property"},{"key":"ref20","doi-asserted-by":"publisher","first-page":"122","DOI":"10.1186\/s12910-021-00687-3","article-title":"Privacy and artificial intelligence: challenges for protecting health information in a new era","volume":"22","author":"Murdoch","year":"2021","journal-title":"BMC Med Ethics"},{"key":"ref21","author":"Zhao","year":"2025"},{"key":"ref22","doi-asserted-by":"publisher","first-page":"865","DOI":"10.5937\/socpreg59-58559","article-title":"Sociological and ethical aspects of oncology patients\u2019 informed consent within the legal framework of the republic of Serbia","volume":"59","author":"Vukadinovi\u0107","year":"2025","journal-title":"Sociol Pregl"},{"key":"ref23","doi-asserted-by":"publisher","first-page":"18","DOI":"10.2139\/ssrn.2972855","article-title":"Slave to the algorithm? Why a\u2019right to an explanation\u2019is probably not the remedy you are looking for","volume":"16","author":"Edwards","year":"2017","journal-title":"Duke L & Tech Rev"},{"key":"ref24","first-page":"1","article-title":"Collection of personal information: restricting the application of the principle of informed consent","volume":"33","author":"Zhang","year":"2019","journal-title":"Comp Law Stud"},{"key":"ref25","doi-asserted-by":"publisher","first-page":"117","DOI":"10.5937\/spm95-61716","article-title":"The application of artificial intelligence in healthcare: diagnostic potential, legal framework and ethical challenges","volume":"95","author":"Vukadinovi\u0107-Markovi\u0107","year":"2026","journal-title":"Srpska Polit Misao"},{"key":"ref26","volume-title":"Research Handbook on Health, AI and the Law","author":"Roberts","year":"2024"},{"key":"ref27","doi-asserted-by":"publisher","first-page":"447","DOI":"10.1126\/science.aax2342","article-title":"Dissecting racial bias in an algorithm used to manage the health of populations","volume":"366","author":"Obermeyer","year":"2019","journal-title":"Science"},{"key":"ref28","doi-asserted-by":"publisher","first-page":"357","DOI":"10.2139\/ssrn.3921003","article-title":"Information privacy and the inference economy","volume":"117","author":"Solow-Niederman","year":"2022","journal-title":"Nw U L Rev"},{"key":"ref29","doi-asserted-by":"publisher","first-page":"20180083","DOI":"10.1098\/rsta.2018.0083","article-title":"Algorithms that remember: model inversion attacks and data protection law","volume":"376","author":"Veale","year":"2018","journal-title":"Philos Trans R Soc A Math Phys Eng Sci"},{"key":"ref30","year":"2016"},{"key":"ref31","year":"2003"},{"key":"ref32","year":"2004"},{"key":"ref33","year":"1988"},{"key":"ref34","doi-asserted-by":"publisher","first-page":"113","DOI":"10.13796\/j.cnki.1001-5019.2025.05.013","article-title":"Dynamic contextual refinement of rules governing consent to personal information processing","volume":"49","author":"Xia","year":"2025","journal-title":"J Anhui Univ"},{"key":"ref35","doi-asserted-by":"publisher","first-page":"1","DOI":"10.3969\/j.issn.1674-7526.2026.02.001","article-title":"On consent rules for the processing of personal medical and health information during public health emergencies\u2014\u2014from the perspective of articles 29 and 13 of the Personal Information Protection Law","volume":"18","author":"Liu","year":"2026","journal-title":"Med Law"},{"key":"ref36","first-page":"119","article-title":"Privacy as contextual integrity","volume":"79","author":"Nissenbaum","year":"2004","journal-title":"Wash L Rev"},{"key":"ref37","doi-asserted-by":"crossref","DOI":"10.1515\/9780804772891","volume-title":"Privacy in Context: Technology, Policy, and the Integrity of Social Life","author":"Nissenbaum","year":"2009"},{"key":"ref38","doi-asserted-by":"publisher","first-page":"141","DOI":"10.1038\/ejhg.2014.71","article-title":"Dynamic consent: a patient interface for twenty-first century research networks","volume":"23","author":"Kaye","year":"2015","journal-title":"Eur J Hum Genet"},{"key":"ref39","doi-asserted-by":"publisher","first-page":"596","DOI":"10.1038\/ejhg.2012.237","article-title":"A tiered-layered-staged model for informed consent in personal genome testing","volume":"21","author":"Bunnik","year":"2013","journal-title":"Eur J Hum Genet"},{"key":"ref40","volume-title":"Ethics and Governance of Artificial Intelligence for Health: WHO Guidance","year":"2021"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.2139\/ssrn.3529576","article-title":"Informed consent and medical artificial intelligence: what to tell the patient?","author":"Cohen","year":"2020","journal-title":"SSRN J"},{"key":"ref42","doi-asserted-by":"publisher","first-page":"2929","DOI":"10.1038\/s41591-023-02608-w","article-title":"The value of standards for health datasets in artificial intelligence-based applications","volume":"29","author":"Arora","year":"2023","journal-title":"Nat Med"},{"key":"ref43","doi-asserted-by":"publisher","first-page":"105956","DOI":"10.1016\/j.clsr.2024.105956","article-title":"Tell me something new: data subject rights applied to inferred data and profiles","volume":"52","author":"Custers","year":"2024","journal-title":"Comput Law Secur Rev"},{"key":"ref44","first-page":"1322","author":"Fredrikson","year":"2015"}],"container-title":["Frontiers in Public Health"],"original-title":[],"link":[{"URL":"https:\/\/www.frontiersin.org\/articles\/10.3389\/fpubh.2026.1855457\/full","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,12]],"date-time":"2026-08-12T05:55:35Z","timestamp":1786514135000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.frontiersin.org\/articles\/10.3389\/fpubh.2026.1855457\/full"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,8,12]]},"references-count":44,"alternative-id":["10.3389\/fpubh.2026.1855457"],"URL":"https:\/\/doi.org\/10.3389\/fpubh.2026.1855457","relation":{},"ISSN":["2296-2565"],"issn-type":[{"value":"2296-2565","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,8,12]]},"article-number":"1855457"}}