AI and GDPR compliance in health: feedback from Artic with Adequacy

As part of their clinical research activities, healthcare professionals face complex regulations. Calixte Descamps, Privacy Officer and AFNOR-certified DPO at Adequacy, interviewed Eve Lepicard (Scientific Director) and Sophie Malabous (Administrative and Financial Manager) from the Artic association about their use of the software.

‍

Founded by Professor Stéphane Oudard of the Georges Pompidou European Hospital, the ARTIC association supports innovative clinical research while offering human and multidisciplinary support before, during, and after cancer. Thanks to a dedicated team of therapists providing close support, it leverages human expertise for the benefit of others, ensuring no one faces illness uninformed.

‍

‍

‍

‍

User-friendly and intuitive compliance software

‍

If you had to summarize Adequacy software in three words, which would you choose?

Eve Lepicard and Sophie Malabous:

‍The software is, above all, ergonomic, user-oriented and particularly educational.

‍

How does the tool help you structure and maintain your record of processing activities?

Eve Lepicard and Sophie Malabous:

‍

Adequacy enables us to quickly create processing records by building on existing data.

‍

‍

Structuring the record of processing activities using guided mode

‍

‍

How does the guided and assisted mode support you in monitoring processing activities?

Eve Lepicard and Sophie Malabous:

‍

At Artic, GDPR is not an area of expertise for us, so being able to switch the processing register to assisted mode enables operational teams to complete and maintain the information

‍

The magic wand helps us understand what is expected under this regulation which is not our primary focus. The explanations are clear and unambiguous.

‍

How do the assistants and the connected register make your use easier?

Eve Lepicard and Sophie Malabous:

‍

‍The data entry assistant is a real asset for securing the collection of technical information.

‍

‍

‍

‍

The impact of Adequacy's skill-based volunteering and partner network

‍

‍

Did you benefit from Adequacy's partner network?

Eve Lepicard and Sophie Malabous:

‍

‍Yes, particularly for connecting with external DPOs and specialized lawyers. It's very valuable to be able to discuss with our software vendor to identify the most suitable support for our specific situation.

‍

Did the skill-based volunteering offered by Adequacy meet your needs?

Eve Lepicard and Sophie Malabous:

‍

Skills-based volunteering offered by Adequacy far exceeded our expectations. We expected a simple onboarding to the Adequacy software. In reality, we benefited fromhigh-value support. Thanks to a series ofparticularly well-designed workshops, Calixte Descamps first educated us on the logic of GDPR and then translated it into concrete operational deliverables, with the creation of our processing register and standard forms.

‍

Thanks to targeted regulatory reminders, concrete examples from the field and taking into account the unique aspects of our clinical research activity, Calixte enabled us to effectively adopt the Adequacy solution, perfectly suited to our team's size and our need for agility of our association.

‍

‍

How would you describe the overall support provided?

Eve Lepicard and Sophie Malabous:

‍

Adequacy's support stands out for its quality, clarity, and decidedly operational focus.

It enabled us to comply with a simple tool, including numerous educational resources and data entry aids particularly useful for deciphering GDPR terminology and understanding the requirements in operational terms. This approach greatly facilitates theUnderstanding requirements regulatory by non-specialized teams.

The ability to create a customizable standard processing template for each study provides a significant time saving in our processes.

Theassignment of tasks and to communicate among team members through the tool is also a significant advantage.

Finally, itsonline accessibility also simplifies its use, perfectly suited to our collaborative and multicenter studies.

‍

‍

FAQ - AI and health compliance management

‍

‍

Why use compliance software for GDPR and the AI Act?

‍Dedicated software allows for centralizing technical documentation, automating the creation of the record of processing activities, and guiding non-expert teams through intelligent assistants.

‍

How to manage the record of processing activities in clinical research?

‍The solution is to use adaptable template forms for each study, saving time while complying with the requirements of the AI Act and GDPR.

‍

What are the advantages of a guided mode for a DPO or CISO?

‍The guided mode allows for delegating data entry to operational teams while ensuring data quality through educational explanations and consistency checks.

‍

‍