While the GDPR aims to facilitate research by providing some related exceptions (cf. Art. 89), experiences since its adoption raise questions as to whether it really achieves that goal. Several challenges have been identified so far including the fragmentation of research-related rules in the national laws, uncertainty about international data transfer frameworks (e.g. the adequacy decisions for the US), etc. The recent case law (i.e. SRB case) re-opens the debate on what is to be understood as personal data. Although the AI Act was adopted not-so-long-ago, the Digital Omnibus Proposal has several points related to personal data, research, innovation, AI training. However, the implications of all these are unclear regarding international medical research developing AI, which require vast amount of health data. Through small group discussions, this workshop will be a platform for lawyers and researchers to exchange and, collaboratively, propose best practices for research, considering the evolving regulatory environment.