In this lecture from Yale's Introduction to Medical Software, the instructor addresses data privacy, a growing concern in medical software development, by unpacking the requirements of major regulations including HIPAA in the United States and GDPR in Europe. The session explains how these frameworks govern the collection, storage, and sharing of patient health information, and what obligations they place on developers building software that touches clinical data. Students learn how privacy compliance intersects with the technical design of medical software systems, from access controls to data retention policies. The lecture extends the course's regulatory focus from device approval into the ongoing data-handling obligations that persist after a product reaches the market.