The first point is that privacy has to drive the design. Medical images have to pass a specialized data flow in which there are clear points for origin, removal of identifiable information, encryption ...