journal article·2026-02-23Open access

Privacy-by-Design in AI-Assisted Systems for Caregivers of Children with Autism: A Secure Multi-Agent Architecture

Ionuț Croitoru, Cristina Elena Turcu, Corneliu Octavian Turcu

Applied Sciences· Volume 16· Issue 4

Abstract

Caregivers of children with Autism Spectrum Disorder (ASD) frequently experience chronic psychological stress, thereby necessitating accessible support. Although artificial intelligence (AI)-based assisted technologies have the potential to reduce caregiver workload, most existing solutions lack robust privacy control and clinical interoperability, which significantly limits their adoption in regulated healthcare environments. To address these challenges, this paper proposes a Privacy-by-Design (PbD) multi-agent architecture that enables consent-aware, auditable, and privacy-preserving AI-assisted support for caregivers of children with ASD. The effectiveness of the proposed architecture was evaluated using two datasets: one focusing on clinically grounded autism-related knowledge and another reflecting naturalistic caregiver observation language. System performance was assessed using a Retrieval-Augmented Generation Assessment (RAGAs)-based framework with a Large Language Model (LLM)-as-a-Judge approach implemented via a locally deployed Llama 3 8B model. The system achieved answer relevancy scores of 0.767 for the clinical dataset and 0.750 for the observational dataset, with corresponding Recall@K values of 0.400 and 0.742, respectively. Context precision ranged from 0.599 to 0.631, and no harmful content was detected. Overall, the proposed architecture demonstrates secure caregiver–specialist collaboration through consent-aware routing, anonymised data storage, and controlled data reconstruction, providing a regulation-aligned design option for privacy-preserving AI integration in assisted care platforms.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Autism Spectrum Disorder Research · Digital Mental Health Interventions · Family and Disability Support Research

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

Faculty of Electrical Engineering and Computer Science, Ștefan cel Mare University of Suceava, 720229 Suceava, Romania

References (100+)

Show source-provided references
1. Global Prevalence of Autism: A Systematic Review Update10.1002/aur.2696 ↗
2. Gentles, S.J., McLaughlin, J., and Schneider, M.A. (2024). Stress among Caregivers of Autistic Children: Conceptual Analysis and Verification Using Two Qualitative Datasets. PLoS ONE, 19.10.1371/journal.pone.0312391 ↗
3. Sánchez Amate, J.J., and Luque De La Rosa, A. (2024). The Effect of Autism Spectrum Disorder on Family Mental Health: Challenges, Emotional Impact, and Coping Strategies. Brain Sci., 14.10.3390/brainsci14111116 ↗
4. Psychological Distress Among Informal Caregivers of Children with Autism: A Thematic Analysis
5. Daharlı, E., Yılmaz, S., and Koşan, Z. (2025). A Cross-Sectional Study of Caregiver Burden Levels and Associated Factors Among Parents of Individuals with Autism Spectrum Disorder. J. Psychosoc. Rehabil. Ment. Health, 1–9.10.1007/s40737-025-00475-x ↗
6. Tang, C.S.-K., Yu, I.C.-Y., Ng, K., and Kwok, H.S.-H. (2025). An Ecological Approach to Caregiver Burnout: Interplay of Self-Stigma, Family Resilience, and Caregiver Needs among Mothers of Children with Special Needs. Front. Psychol., 16.10.3389/fpsyg.2025.1518136 ↗
7. Impact of Autism in Adolescents on Parental Quality of Life10.1007/s11136-014-0635-6 ↗
8. The Impact of Parenting Stress: A Meta-Analysis of Studies Comparing the Experience of Parenting Stress in Parents of Children with and Without Autism Spectrum Disorder10.1007/s10803-012-1604-y ↗
9. Aiello, S., Leonardi, E., Cerasa, A., Servidio, R., Famà, F.I., Carrozza, C., Campisi, A., Marino, F., Scifo, R., and Baieli, S. (2022). Video-Feedback Approach Improves Parental Compliance to Early Behavioral Interventions in Children with Autism Spectrum Disorders during the COVID-19 Pandemic: A Pilot Investigation. Children, 9.10.3390/children9111710 ↗
10. Autism Assistant: A Platform for Autism Home-Based Therapeutic Intervention10.1109/ACCESS.2023.3310397 ↗
11. Use of Social Robots in Mental Health and Well-Being Research: Systematic Review10.2196/13322 ↗
12. Enhancing Autism Care through Remote Support: A Family-Centered Approach
13. Effects of Remote Support Courses on Parental Mental Health and Child Development in Autism: A Randomized Controlled Trial10.5498/wjp.v14.i12.1892 ↗
14. Telerehabilitation for Children and Youth with Developmental Disabilities and Their Families: A Systematic Review10.1080/01942638.2022.2106468 ↗
15. Liu, S., Wu, D., Li, J., and Yin, H. (2025). Latent Profile Analysis of Parental Burnout among Parents of Children with and without Autism Spectrum Disorder. Front. Psychol., 16.10.3389/fpsyg.2025.1581321 ↗
16. Challenges and Assistive Technology during Typical Routines: Perspectives of Caregivers of Children with Autism Spectrum Disorders and Other Disabilities10.1080/1034912X.2019.1578864 ↗
17. Rouzbahani, H.M., and Karimipour, H. (2024). Application of Artificial Intelligence in Supporting Healthcare Professionals and Caregivers in Treatment of Autistic Children. arXiv.
18. Iannone, A., and Giansanti, D. (2023). Breaking Barriers—The Intersection of AI and Assistive Technology in Autism Care: A Narrative Review. J. Pers. Med., 14.10.3390/jpm14010041 ↗
19. Cobigo, V., Czechowski, K., Chalghoumi, H., Gauthier-Beaupre, A., Assal, H., Jutai, J., Kobayashi, K., Grenier, A., and Bah, F. (2020). Protecting the Privacy of Technology Users Who Have Cognitive Disabilities: Identifying Areas for Improvement and Targets for Change. J. Rehabil. Assist. Technol. Eng., 7.10.1177/2055668320950195 ↗
20. (2025, July 22). NVIDIA FLARE Overview—NVIDIA FLARE 2.4.0 Documentation. Available online: https://nvflare.readthedocs.io/en/main/flare_overview.html.
21. Galtier, M.N., and Marini, C. (2019). Substra: A Framework for Privacy-Preserving, Traceable and Collaborative Machine Learning. arXiv, arXiv.1910.11567.
22. Dritsas, E., and Trigka, M. (2025). Federated Learning for IoT: A Survey of Techniques, Challenges, and Applications. J. Sens. Actuator Netw., 14.10.3390/jsan14010009 ↗
23. Belcak, P., Heinrich, G., Diao, S., Fu, Y., Dong, X., Muralidharan, S., Lin, Y.C., and Molchanov, P. (2025). Small Language Models Are the Future of Agentic AI. arXiv.
24. European Union (2016). General Data Protection Regulation, Publications Office of the European Union. Regulation (EU) 2016/679.
25. (2025, July 22). EU AI Act: First Regulation on Artificial Intelligence. Available online: https://www.europarl.europa.eu/topics/en/article/20230601STO93804/eu-ai-act-first-regulation-on-artificial-intelligence.
26. Cavoukian, A. (2011). Privacy by Design The 7 Foundational Principles, Information and Privacy Commissioner of Ontario.
27. (2025, July 22). Office for Civil Rights (OCR). Summary of the HIPAA Security Rule, Available online: https://www.hhs.gov/hipaa/for-professionals/security/laws-regulations/index.html.
28. (2025, July 22). 16 CFR Part 312—Children’s Online Privacy Protection Rule (Coppa Rule), Available online: https://www.ecfr.gov/current/title-16/part-312.
29. Du, H., Thudumu, S., Vasa, R., and Mouzakis, K. (2024). A Survey on Context-Aware Multi-Agent Systems: Techniques, Challenges and Future Directions. arXiv, arXiv.2402.01968.
30. A Survey on LLM-Based Multi-Agent Systems: Workflow, Infrastructure, and Challenges10.1007/s44336-024-00009-2 ↗
31. Wooldridge, M.J. (2012). An Introduction to Multiagent Systems, Wiley. [2nd ed.]. repr.
32. Dodig-Crnkovic, G., and Burgin, M. (2024). A Systematic Approach to Autonomous Agents. Philosophies, 9.10.3390/philosophies9020044 ↗
33. Bandi, A., Kongari, B., Naguru, R., Pasnoor, S., and Vilipala, S.V. (2025). The Rise of Agentic AI: A Review of Definitions, Frameworks, Architectures, Applications, Evaluation Metrics, and Challenges. Future Internet, 17.10.3390/fi17090404 ↗
34. AI Agents and Agentic Systems: A Multi-Expert Analysis
35. United States Government Accountability Office (2025, July 22). Science & Tech Spotlight: AI Agents|U.S. GAO, Available online: https://www.gao.gov/products/gao-25-108519.
36. Wang, L., Ma, C., Feng, X., Zhang, Z., Yang, H., Zhang, J., Chen, Z., Tang, J., Chen, X., and Lin, Y. (2024). A Survey on Large Language Model Based Autonomous Agents. Front. Comput. Sci., 18.10.1007/s11704-024-40231-1 ↗
37. A Survey on Agents Applications in Healthcare: Opportunities, Challenges and Trends10.1016/j.cmpb.2023.107525 ↗
38. Positioning and Presenting Design Science Research for Maximum Impact110.25300/MISQ/2013/37.2.01 ↗
39. The Emergence of Edge Computing10.1109/MC.2017.9 ↗
40. A Microservice Architecture for Real-Time IoT Data Processing: A Reusable Web of Things Approach for Smart Ports10.1016/j.csi.2021.103604 ↗
41. Stop Explaining Black Box Machine Learning Models for High Stakes Decisions and Use Interpretable Models Instead10.1038/s42256-019-0048-x ↗
42. Rescorla, E. (2018). The Transport Layer Security (TLS) Protocol Version 1.3, Internet Engineering Task Force. RFC 8446.10.17487/RFC8446 ↗
43. (2022). Information Security, Cybersecurity and Privacy Protection—Information Security Management Systems—Requirements (Standard No. ISO/IEC 27001:2022).
44. (2025). Information Security, Cybersecurity and Privacy Protection—Privacy Information Management Systems—Requirements and Guidance (Standard No. ISO/IEC 27701:2025). Available online: https://www.iso.org/standard/27701.
45. Timofte, E.M., Dimian, M., Graur, A., Potorac, A.D., Balan, D., Croitoru, I., Hrițcan, D.-F., and Pușcașu, M. (2025). Federated Learning for Cybersecurity: A Privacy-Preserving Approach. Appl. Sci., 15.10.20944/preprints202505.1775.v1 ↗
46. Security in Cloud-Native Services: A Survey10.3390/jcp3040034 ↗
47. (2025, July 22). Data Protection Impact Assessments. Available online: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/accountability-and-governance/guide-to-accountability-and-governance/data-protection-impact-assessments/.
48. European Union Agency for Cybersecurity (2024). Engineering Personal Data Protection in EU Data Spaces, Publications Office.
49. Security Policy as Code10.1109/MSEC.2025.3535803 ↗
50. Lodderstedt, T., Bradley, J., Labunets, A., and Fett, D. (2025). Best Current Practice for OAuth 2.0 Security, RFC Editor. RFC 9700.10.17487/RFC9700 ↗
51. Campbell, B., Bradley, J., Sakimura, N., and Lodderstedt, T. (2020). OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens, Internet Engineering Task Force. RFC 8705.10.17487/RFC8705 ↗
52. Doshi-Velez, F., and Kim, B. (2017). Towards A Rigorous Science of Interpretable Machine Learning. arXiv, arxiv.1702.08608.
53. Explainable Artificial Intelligence (XAI): Concepts, Taxonomies, Opportunities and Challenges toward Responsible AI10.1016/j.inffus.2019.12.012 ↗
54. (2025, July 22). Vault|HashiCorp Developer. Available online: https://developer.hashicorp.com/vault.
55. Pham, N.T., Kieu, T., Nguyen, D.-M., Xuan, S.H., Duong-Trung, N., and Le-Phuoc, D. (2025). SLM-Bench: A Comprehensive Benchmark of Small Language Models on Environmental Impacts—Extended Version. arXiv, arxiv.2508.15478.10.18653/v1/2025.findings-emnlp.1165 ↗
56. Haas, S., Hegestweiler, K., Rapp, M., Muschalik, M., and Hüllermeier, E. (2024). Stakeholder-Centric Explanations for Black-Box Decisions: An XAI Process Model and Its Application to Automotive Goodwill Assessments. Front. Artif. Intell., 7.10.3389/frai.2024.1471208 ↗
57. Joint Task Force Interagency Working Group (2020). Security and Privacy Controls for Information Systems and Organizations, National Institute of Standards and Technology. [5th ed.].
58. Barker, E. (2020). Recommendation for Key Management: Part 1—General, National Institute of Standards and Technology.10.6028/NIST.SP.800-57pt1r5 ↗
59. (2025, August 17). JetStream|NATS Docs. Available online: https://docs.nats.io/using-nats/developer/develop_jetstream.
60. (2025, July 22). Apache Kafka 4.0 Documentation. Available online: https://kafka.apache.org/documentation/.
61. (2025, July 22). Redis Persistence. Available online: https://redis.io/docs/latest/operate/oss_and_stack/management/persistence/.
62. (2025, August 27). Trace Context-W3C Recommendation. Available online: https://www.w3.org/TR/trace-context/.
63. (2025, July 22). CloudEvents Specification. Available online: https://github.com/cloudevents/spec/blob/ce@v1.0.2-branch/cloudevents/spec.md.
64. (2025, July 22). Production-Grade Container Orchestration. Available online: https://kubernetes.io/.
65. Kubernetes Scheduling: Taxonomy, Ongoing Issues and Challenges
66. (2025, July 22). Network Policies. Available online: https://kubernetes.io/docs/concepts/services-networking/network-policies/.
67. (2025, July 22). Pod Security Standards. Available online: https://kubernetes.io/docs/concepts/security/pod-security-standards/.
68. Sharvari, T., and Sowmya Nag, K. (2019). A Study on Modern Messaging Systems- Kafka, RabbitMQ and NATS Streaming. arXiv, arxiv.1912.03715.
69. (2025, July 22). Enterprise Power Without Enterprise Complexity. Available online: https://linkerd.io/.
70. Istio (2025, July 22). Available online: https://istio.io/latest/.
71. Li, W., Lemieux, Y., Gao, J., Zhao, Z., and Han, Y. (2019, January 4–9). Service Mesh: Challenges, State of the Art, and Future Research Opportunities. Proceedings of the 2019 IEEE International Conference on Service-Oriented System Engineering (SOSE), San Francisco, CA, USA.10.1109/SOSE.2019.00026 ↗
72. (2025, July 22). Hierarchical Navigable Small Worlds (HNSW)|Pinecone. Available online: https://www.pinecone.io/learn/series/faiss/hnsw/.
73. (2025, July 22). Milvus and 10x faster. Get Started IVF_PQ|Milvus Documentation. Available online: https://milvus.io/docs/ivf-pq.md.
74. Das, B.C., Amini, M.H., and Wu, Y. (2024). Security and Privacy Challenges of Large Language Models: A Survey. arXiv, arxiv.2402.00888.
75. (2025, July 22). SmartNoise—OpenDP SmartNoise. Available online: https://docs.smartnoise.org/.
76. (2023). Privacy Technologies—Consent Record Information Structure (Standard No. ISO/IEC TS 27560:2023). Available online: https://www.iso.org/standard/80392.html.
77. (2025, July 22). Kafka Logs—Concepts, Configurations and Policies. Available online: https://www.redpanda.com/guides/kafka-performance-kafka-logs.
78. (2025, July 22). Documentation. Available online: https://opentelemetry.io/docs/.
79. (2025, July 22). Elasticsearch: The Official Distributed Search & Analytics Engine|Elastic. Available online: https://www.elastic.co/elasticsearch.
80. (2025, July 22). Logstash: Collect, Parse, Transform Logs. Available online: https://www.elastic.co/logstash.
81. (2025, July 22). OpenSearch Dashboards. Available online: https://docs.opensearch.org/latest/dashboards/.
82. (2025, July 22). Stanza—A Python NLP Package for Many Human Languages. Available online: https://stanfordnlp.github.io/stanza/.
83. (2025, July 22). LangChain. Available online: https://www.langchain.com.
84. (2025, July 22). Qdrant. Available online: https://qdrant.tech/documentation/.
85. (2025, July 22). Scikit-Learn: Machine Learning in Python—Scikit-Learn 1.7.1 Documentation. Available online: https://scikit-learn.org/stable/.
86. A Perspective on Explainable Artificial Intelligence Methods: SHAP and LIME10.1002/aisy.202400304 ↗
87. (2025, July 22). Grafana: The Open and Composable Observability Platform. Available online: https://grafana.com/.
88. (2025, July 22). Jaeger: Open Source, Distributed Tracing Platform. Available online: https://www.jaegertracing.io/.
89. Robust and Reusable LINDDUN Privacy Threat Knowledge10.1016/j.cose.2025.104419 ↗
90. (2025, July 22). Redis Streams. Available online: https://redis.io/docs/latest/develop/data-types/streams/.
91. Rose, S., Borchert, O., Mitchell, S., and Connelly, S. (2020). Zero Trust Architecture, National Institute of Standards and Technology.10.6028/NIST.SP.800-207-draft2 ↗
92. Newman, C., and Klyne, G. (2002). Date and Time on the Internet: Timestamps, Internet Engineering Task Force. RFC 3339.
93. Time Will Not Tell: Temporal Approaches for Privacy-Preserving Trajectory Publishing10.1016/j.compenvurbsys.2024.102154 ↗
94. Bender, D., and Sartipi, K. (2013, January 20–22). HL7 FHIR: An Agile and RESTful Approach to Healthcare Information Exchange. Proceedings of the 26th IEEE International Symposium on Computer-Based Medical Systems, Porto, Portugal.10.1109/CBMS.2013.6627810 ↗
95. Vector Database Management Systems: Fundamental Concepts, Use-Cases, and Current Challenges10.1016/j.cogsys.2024.101216 ↗
96. Huang, Y.-H., Tsai, Y., Hsiao, H., Lin, H.-Y., and Lin, S.-D. (2024). Transferable Embedding Inversion Attack: Uncovering Privacy Risks in Text Embeddings without Model Queries. arxiv, arxiv.2406.10280.10.18653/v1/2024.acl-long.230 ↗
97. (2025, July 22). Pseudonymisation Techniques and Best Practices|ENISA. Available online: https://www.enisa.europa.eu/publications/pseudonymisation-techniques-and-best-practices.
98. (2025, July 22). AI Privacy Risks & Mitigations Large Language Models (LLMs)|European Data Protection Board. Available online: https://www.edpb.europa.eu/our-work-tools/our-documents/support-pool-experts-projects/ai-privacy-risks-mitigations-large_en.
99. (2025, August 28). Consent-FHIR v5.0.0. Available online: https://hl7.org/fhir/consent-definitions.html.
100. A Practical Solution for Modelling GDPR-Compliance Based on Defeasible Logic Reasoning10.1016/j.eswa.2025.127140 ↗