arXiv: Secure Aggregation for Privacy-Preserving Federated Learning on Clinical EEG Data

A new research paper proposes a technical framework for applying secure aggregation to federated learning models trained on clinical electroencephalogram (EEG) data. Federated learning allows multiple hospitals to train a shared AI model without directly sharing raw patient records, but standard methods can still leak sensitive information through model updates. The paper introduces a cryptographic secure aggregation protocol that ensures individual hospital contributions remain hidden from all other parties, including the central server, while still producing a combined model. This is a methodological publication, not a new law or regulation, but it directly addresses a core tension in the EU AI Act and GDPR: how to process health data for AI without violating data minimisation and purpose limitation principles.

The primary affected organisations are hospitals, clinical research networks, and medical device developers operating in the EU that use or plan to use federated learning on neurological data. Also relevant are cloud service providers and AI vendors offering privacy-enhancing technologies to the healthcare sector. Compliance teams in these organisations should treat this paper as a signal that privacy-preserving techniques are maturing, but they must not assume the technique alone ensures compliance. The secure aggregation method does not eliminate the need for a lawful basis under GDPR, nor does it remove obligations for data protection impact assessments, transparency to patients, or adherence to the AI Act’s risk management requirements for high-risk medical AI.

Next steps for compliance teams are threefold. First, review any existing or planned federated learning projects to assess whether secure aggregation is technically feasible and whether it can be documented as a technical safeguard in your DPIA. Second, engage with data protection officers and legal counsel to confirm that the residual risks of inference attacks are adequately mitigated, as secure aggregation does not prevent all model inversion. Third, monitor the European Health Data Space and AI Act delegated acts for explicit recognition of such techniques as acceptable safeguards. Do not rely on this paper as a compliance silver bullet, but use it as a basis for updating your technical and organisational measures documentation.