Digital services
Medical practice and hospital information systems, email, laboratory connections, backups and AI applications: digital services shape everyday medical work.
MedData Check · For healthcare facilities
Patient data.Cloud.Clarity.
Do you know whether your patients’ data in the cloud are adequately protected?
With MedData Check Basic, for CHF 990 (excluding VAT) you receive an initial legal assessment of your IT contracts and data protection organisation, clearly explained, structured and accompanied by specific recommendations for action.
You will then know where further review is needed, which questions to ask your IT providers and which measures take priority.
Basic package · Up to three IT or cloud contractual relationships
Digitalisation meets responsibility
Your IT continues to evolve.
Your responsibility remains.
Legal requirements
Health data are particularly sensitive. Data protection and medical professional secrecy impose requirements on their processing and disclosure.
Guidance from the FDPICGuidance for everyday operations
Which contracts are available? Who is allowed access? Where are data processed? The check brings your information and documents together.
Even where data processing is outsourced, the healthcare facility remains responsible for data protection. Cloud contracts, data locations and external access therefore form part of the legal review.
The FDPIC on cloud data processingFrom question to recommendation
A clear path. Five steps.
Select a step to see what your facility prepares and what you receive from us.
Your starting point
Understand what is reviewed.
You learn about the scope of the service and establish whether MedData Check is suitable for your facility.
Before the check
The result
A clear framework for the initial legal review.
The result for your facility
You know where you stand.
And what to do first.
Your traffic-light report shows which points need clarification and which measures take priority. Select an area of the sample report to see how a finding becomes a specific recommendation for action.
A look at a sample reportFictional example
Cloud contracts
- Basis in the example
- A main agreement and general terms and conditions are available. A data processing agreement and security documentation are missing.
- Legal assessment
- The contractual basis cannot yet be fully assessed from the available documents.
- Recommendation
- Complete the contractual documentation and review the provider’s obligations.
The colours indicate qualitative review priorities. They are not measured risk values and do not confirm comprehensive data protection compliance. The rating results from the legal review; ‘unknown’ initially leads to a follow-up question.
What the next steps could look like
- 01
Complete the cloud contractual documentation
- 02
Clarify data locations and support access
- 03
Review internal data protection instructions
MedData Check Basic
A clear basis for decisions.
Specific next steps.
For medical practices, hospitals and other healthcare facilities: you gain guidance for dealing with your IT providers and can plan the next steps on a basis reviewed by a lawyer.
For more extensive reviews
For more complex IT structures, multiple locations or a need for a more extensive review, we tailor the scope to your facility and prepare an individual proposal. Support with implementing the recommendations can be provided under a separate engagement.
Basic package
CHF 990
excluding VAT
- Online questionnaire and submission of your documents
- Initial review of up to three IT or cloud contractual relationships
- Written traffic-light report with specific recommendations and questions for your IT providers
- 45-minute personal discussion of the results
The scope of services and fee are agreed before engagement. The fixed fee assumes complete documentation and a limited scope of review.
Service limitations
A full compliance audit, technical security review, contract negotiations, contract drafting and implementation of the recommendations are not included.
SwissLegal · Your MedData Check team
Your issue. Our team.
Three people, clear responsibilities: we combine experience in data and technology law with a careful review of your documents and processes.
Engagement lead
Roman Gubser
Attorney-at-law · Executive MBA HSG
Roman Gubser leads MedData Check and is your first point of contact. He combines legal advice on digitalisation and IT and cloud outsourcing with many years of management experience in the financial sector. Together with you, he assesses the results and clarifies the next steps.
- Data law
- IT & cloud outsourcing
- Governance
- Compliance
Start well prepared
What you should know about the check.
The focus is on a clear scope and transparent, reasoned results.
Your facility as the starting point
Four topics.
Twelve questions.
Describe your situation step by step. Each question has an expandable explanation and an example. You can note outstanding points and save your progress as a file.
Entries and documents are processed locally. You send the generated email file yourself. Please do not attach patient records or access credentials.
- A
Facility and IT organisation
Questions 1–3
- B
IT systems, cloud and patient data
Questions 4–7
- C
Contracts and data security
Questions 8–10
- D
Data protection organisation
Questions 11–12
What the review is based on
Grounded in professional expertise.
Assessed for your facility.
MedData Check combines statutory requirements with the FMH’s practical resources and the guidance of the Federal Data Protection and Information Commissioner (FDPIC). We use these to develop the legal assessment of your situation.
Legal framework
Patient data & professional secrecy
Health data require special protection. We consider data protection and medical professional secrecy together and clarify which federal or cantonal requirements apply to hospitals.
More on this topicContracts
Cloud & service providers
The FMH contract checklist structures the document review. FDPIC guidance complements it with responsibility for outsourced data processing, sub-processors and access from abroad.
More on this topicData security
Access & recovery
The FMH baseline IT protection guidance helps identify responsibilities, user permissions, backups and incident procedures. For hospitals and other healthcare facilities, we place this guidance in the context of their particular organisation and IT structure.
More on this topicReview method
From twelve questions to the report
Each finding is linked to your answer or a document. The legal assessment distinguishes documented action required, outstanding information and further reviews.
More on this topicFMH resources are recommendations. The applicable law and the specific arrangements for your data processing remain decisive. Our traffic-light report makes the basis and limitations of each assessment clear.
Explore the professional foundations