Data Protection Law

Nowhere is sensitive personal data processed on such a large scale as in medical practices, hospitals, and care facilities. What is at stake here is health data – information of the highest sensitivity. Data protection in healthcare therefore confronts controllers with particular challenges. Advancing digitalization – especially the introduction of the electronic patient record and telemedicine—adds further complexity.

We advise healthcare institutions comprehensively on data protection law: from a command of the legal framework – such as the GDPR, the BDSG, and the state hospital acts – through the creation and updating of data protection documentation and the data-protection-compliant engagement of external service providers, to the implementation of technical and organizational measures.

We also support you in cooperating with supervisory authorities and communicating with data subjects, help to limit the damage when the worst happens, and accompany you through court proceedings. In this way, we help you prevent future incidents through robust structures.