arXiv: PrivDNN: A Secure Multi-Party Computation Framework for Deep Learning using Partial DNN Encryption

This publication introduces PrivDNN, a technical framework for secure multi-party computation in deep learning that uses partial encryption of deep neural networks. While not a regulatory change itself, it represents a significant advancement in privacy-preserving AI that directly impacts compliance with the EU AI Act and GDPR. The framework allows multiple parties to collaboratively train or use AI models without exposing their raw data or the full model parameters, addressing key requirements for data minimization and purpose limitation under Article 5 of the GDPR.

Organizations in highly regulated sectors such as healthcare, finance, and critical infrastructure that rely on shared AI models or federated learning will be most affected. This includes any entity processing personal data across borders or with third-party AI providers, as the framework offers a technical means to reduce data exposure risks. Compliance teams in these sectors should evaluate whether their current AI deployments involve data sharing that could benefit from partial encryption techniques to strengthen their data protection impact assessments.

Compliance teams should first review their existing AI systems for any multi-party data processing arrangements and assess whether PrivDNN-style encryption could reduce their risk profile. Next, they should update their internal AI governance documentation to reference this technical capability as a potential mitigation measure for data protection by design. Finally, they should monitor the European Commission’s standardization efforts under the AI Act to see if such frameworks become recommended or required for high-risk AI systems involving collaborative data processing.