Introduction
This Research Topic shows that AI in public health cannot be regulated in terms of an exchange between innovation and privacy alone. In all the articles, which range from preparedness among clinicians, explainability, data regulation, equity, community engagement, and large language models, the common theme is how institutions should regulate AI from inception through to its life cycle stages. From data collection and modeling, validation, implementation, monitoring, and correction, the key questions that arise are about performance and quality of data, transparency, justice, safety, accountability, professionalism, patient autonomy, governance, and trust. The larger context is important since the AI system in public health does more than optimizing current methods and processes; it also involves distribution of epistemic power and responsibility and the representation of people and communities.
Thematic synthesis of the Research Topic
The first theme relates to legitimacy that goes beyond the issue of good performance metrics. Perrella et al., Nasir et al., Giorgetti et al., and Jha et al., all touch upon this theme. While their approaches are distinct—focusing on preparedness and regulation, critical analysis of practices of data marginalization, explainability and liability, and the governance of foundational models for medical imaging, respectively—the authors agree on one important point. To be able to deliver value to the public health sphere, an AI solution should be developed by professionals, well-documented, interpretable, and have clearly delineated routes for institutional accountability.
Health data governance, consent, secondary uses, and commodification constitute the next group of themes. Al Qwaid, Liang, Shaikh et al., and Fan et al. demonstrate that besides legal permission to use data, the success of responsible AI development relies on whether data practices are understandable, appropriate, protected from unauthorized access and use, and consistent with the public interest. Taken together, the mentioned authors address issues such as ownership, consent, privacy-preserving design, fairness-aware training, traceability, and responsibility throughout the entire research and development cycle. As a common implication of their findings, one can argue that the ethical foundation of datafication becomes unstable whenever it becomes either opaque or exploitative.
A third theme relates to issues of equity, safety, and public trust. Balakrishnan et al., Li et al., Rice et al., and Townsend et al. reveal how bias can manifest itself in clinical and workforce-related contexts, how diagnostic error is intertwined with opacity and lack of accountability, the importance of participant-centered and historically informed governance for Indigenous peoples' health care systems, and the nature of public concern extending beyond malfunctions to social, psychological, and regulatory aspects. In public health care systems, it is unjustifiable to accept average benefits alongside the preventable concentrations of risk. In other words, fairness should be integrated into the processes of representation and design prospectively.
The question of professional responsibility and human oversight emerges yet again in multiple contributions. Nofal et al. make clear that preparing staff for using AI is more than just implementing a solution, whereas it is rather about proper decision-making related to escalation, documentation, etc. Holmes et al. and Xiong et al., in their way show how generation of synthetic data challenges patient agency, communicative reliability, and trustworthiness: in synthetic/hybrid environments, the link between personal experience and organizational expertise can be weakened, while some recommendations generated by AI tools can prove themselves to be ethically problematic. Human oversight thus cannot be reduced to post facto human presence.
To summarize, the Research Topic highlights several operational requirements for AI solutions in the context of public health care. Namely, before deployment, institutions need to clarify intended use, targeted population groups, data provenance and validation criteria, duties and responsibilities, and escalation pathways; during deployment—monitor performance, possible biases, misuse, drifts, professional reliance, and patient communication; and, after deployment—create audit trails, incident reports, post-market correction, and means of redress. Such measures are medico-legal in nature since they ensure that once harm arises due to AI tools, it will become possible to trace who designed, purchased, authorized, relied on, monitored, and corrected the system at hand.
Toward accountable life-cycle governance
This transition from abstraction into practical governance is buttressed by the existing regulatory regime. GDPR and EU AI Act offer critical foundations for lawful activity, data protection, risk management, transparency, human control, and post-market monitoring (, ). The EHDS and DGA contribute additional sector-specific and infrastructural elements via the linkage of electronic health data, interoperability, re-use, public interest objectives, and confidence in data sharing (, ). WHO, UNESCO, OECD guidelines, and the Framework Convention of the Council of Europe bring human rights, public benefit, democratic accountability, and institutional accountability into the scope of AI governance (–). EDPB and EDPB-EDPS publications are especially relevant, since they address the relationship between AI and legal basis for processing, anonymization, legitimate interests, data protection by design, and data protection vs. AI regulation (–). However, as the present Research Topic demonstrates, compliance is not the only pillar of trustworthy public health AI. Ethical acceptability hinges upon the capacity of those impacted by the AI process to comprehend, challenge, and place trust in such decisions, and of organizations to monitor, repair, and, if required, suspend such operations following deployment.
Conclusion
Collectively, the contributions indicate that the use of AI in public health should not be managed in terms of the traditional tension between innovation and privacy. Rather, a better perspective is that of life-cycle governance, where considerations such as data quality, privacy, transparency, equity, safety, accountability, professionalism, patient autonomy, organizational oversight, and public trust must be viewed as interlocking prerequisites for legitimacy. In this sense, the primary contribution of this Research Topic is both theoretical and practical. It demonstrates that responsible AI in public health requires proactive, multi-disciplinary, and verifiable forms of governance that can be sustainably implemented at all stages.
Statements
Author contributions
GR: Conceptualization, Writing – original draft, Writing – review & editing. PB: Conceptualization, Writing – original draft, Writing – review & editing. FG: Conceptualization, Writing – original draft, Writing – review & editing.
Conflict of interest
The author(s) declared that this work was conducted in the absence of any commercial or financial relationships that could be construed as a potential conflict of interest.
Publisher’s note
All claims expressed in this article are solely those of the authors and do not necessarily represent those of their affiliated organizations, or those of the publisher, the editors and the reviewers. Any product that may be evaluated in this article, or claim that may be made by its manufacturer, is not guaranteed or endorsed by the publisher.
References
1.
European Parliament Council Council of the European Union. Regulation (EU) 2016/679 of 27 April 2016 on the Protection of Natural Persons With Regard to the Processing of Personal Data and on the Free Movement of Such Data. Office Journal of the European Union, L119 (2016). p. 1–88. Available online at: https://eur-lex.europa.eu/eli/reg/2016/679/oj (Accessed April 29, 2026).
2.
European Parliament Council Council of the European Union. Regulation (EU) 2024/1689 of 13 June 2024 Laying Down Harmonised Rules on Artificial Intelligence and Amending Certain Union Legislative Acts (Artificial Intelligence Act). Office Journal of the European Union, L2024/1689 (2024). Available online at: https://eur-lex.europa.eu/eli/reg/2024/1689/oj (Accessed April 29, 2026).
3.
European Parliament Council Council of the European Union. Regulation (EU) 2025/327 of 11 February 2025 on the European Health Data Space and Amending Directive 2011/24/EU and Regulation (EU) 2024/2847. Office Journal of the European Union, L2025/327 (2025). Available online at: https://eur-lex.europa.eu/eli/reg/2025/327/oj (Accessed April 29, 2026).
4.
European Parliament Council Council of the European Union. Regulation (EU) 2022/868 of 30 May 2022 on European Data Governance and Amending Regulation (EU) 2018/1724 (Data Governance Act). Office Journal of European Union, L152 (2022). p. 1–44. Available online at: https://eur-lex.europa.eu/eli/reg/2022/868/oj (Accessed April 29, 2026).
5.
World Health Organization. Ethics and Governance of Artificial Intelligence for Health: WHO Guidance. Geneva: World Health Organization (2021). Available online at: https://www.who.int/publications/i/item/9789240029200 (Accessed April 29, 2026).
6.
World Health Organization. Ethics and Governance of Artificial Intelligence for Health: Guidance on Large Multi-Modal Models. Geneva: World Health Organization (2025). Available online at: https://www.who.int/publications/i/item/9789240084759 (Accessed April 29, 2026).
7.
UNESCO. Recommendation on the Ethics of Artificial Intelligence.Paris: UNESCO (2021). Available online at: https://unesdoc.unesco.org/ark:/48223/pf0000381137 (Accessed April 29, 2026).
8.
Organisation for Economic Co-operation and Development. Recommendation of the Council on Artificial Intelligence, OECD/LEGAL/0449. Paris: OECD (2019, amended 2024). Available online at: https://legalinstruments.oecd.org/en/instruments/OECD-LEGAL-0449 (Accessed April 29, 2026).
9.
Council of Europe. Council of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law, CETS No. 225. Strasbourg: Council of Europe (2024). Available online at: https://www.coe.int/en/web/artificial-intelligence/the-framework-convention-on-artificial-intelligence (Accessed April 29, 2026).
10.
European Data Protection Board. Opinion 28/2024 on Certain Data Protection Aspects Related to the Processing of Personal Data in the Context of AI Models. Brussels: EDPB (2024). Available online at: https://www.edpb.europa.eu/our-work-tools/our-documents/opinion-board-art-64/opinion-282024-certain-data-protection-aspects_en (Accessed April 29, 2026).
11.
European Data ProtectionBoardEuropean Data ProtectionSupervisor. EDPB-EDPS Joint Opinion 5/2021 on the Proposal for a Regulation Laying Down Harmonised Rules on Artificial Intelligence. Brussels: EDPB/EDPS (2021). Available online at: https://www.edpb.europa.eu/our-work-tools/our-documents/edpbedps-joint-opinion/edpb-edps-joint-opinion-52021-proposal_en (Accessed April 29, 2026).
12.
European Data Protection Board. Guidelines 1/2026 on Processing Personal Data for Scientific Research Purposes, Version for Public Consultation. Brussels: EDPB (2026). Available online at: https://www.edpb.europa.eu/our-work-tools/documents/public-consultations/2026/guidelines-12026-processing-personal-data_en (Accessed April 29, 2026).
Summary
Keywords
accountability, artificial intelligence, fairness, health data governance, human oversight, privacy, public health, public trust
Citation
Ricci G, Bailo P and Gibelli F (2026) Editorial: Ethical and legal implications of artificial intelligence in public health: balancing innovation and privacy. Front. Med. 13:1885165. doi: 10.3389/fmed.2026.1885165
Received
19 May 2026
Accepted
19 May 2026
Published
28 May 2026
Volume
13 - 2026
Edited and reviewed by
Beatriz S. Lima, Research Institute for Medicines (iMed.ULisboa), Portugal
Updates
Copyright
© 2026 Ricci, Bailo and Gibelli.
This is an open-access article distributed under the terms of the Creative Commons Attribution License (CC BY). The use, distribution or reproduction in other forums is permitted, provided the original author(s) and the copyright owner(s) are credited and that the original publication in this journal is cited, in accordance with accepted academic practice. No use, distribution or reproduction is permitted which does not comply with these terms.
*Correspondence: Filippo Gibelli, filippo.gibelli@unicam.it
Disclaimer
All claims expressed in this article are solely those of the authors and do not necessarily represent those of their affiliated organizations, or those of the publisher, the editors and the reviewers. Any product that may be evaluated in this article or claim that may be made by its manufacturer is not guaranteed or endorsed by the publisher.