Care providers face stricter rules than many other websites because health data is processed in their environment. This category sets out the requirements: imprint and privacy policy, consent for cookies and external services, data processing agreements with hosts and service providers, secure transmission of contact and application forms, handling photos of residents and staff, and confidentiality in public communication. Added to this are advertising rules in the health sector and the accessibility requirements that increasingly apply to care organisations too. The articles do not replace legal advice, but they provide a solid basis for discussions with data protection officers and lawyers. We also describe the internal agreements needed so that staff do not accidentally disclose personal data on social networks.
On this page you will find all posts on the topic “Law & data protection”. The newest posts are at the top.
Below each title there is a short text about it. Click on a post. Then you can read the whole text.
Above the list you also see the other topics. At the bottom, a link takes you back to all posts.
The ePA in care: what the care service sees, who adds entries, how relatives object or act as representatives, and how a guide page answers these questions.
Internal reporting office from 50 employees: how a care website carries the reporting route with its own page, a confidential form, deadlines and privacy notes.
The PNOG cabinet draft: how care services keep advice pages on the relief amount and care allowance dated and switch them over when the reform takes effect.
Two months, three months, a buffer: which periods apply after a rejection, what the careers page has to state and how deletion becomes a routine step.
Round-the-clock care on a nursing website: describe shift times, on-call duty and costs so that the promise holds up to scrutiny and matches what you deliver.
Domain, DNS, hosting and mailboxes: when access sits with a former supplier, every switch turns risky. How care services take back control of their website.
Since 1 January 2026 the German Nursing Competence Act (BEEP) applies. How care services communicate the new powers on their website - for patients and staff.
GDPR-compliant contact and application forms for care services: handle sensitive health data, choose hosting in Germany, use SSL and a clean data flow.
A complete imprint under the DDG, reachable in two clicks, plus the HWG limits on advertising claims for care: how a care website becomes legally sound.