تخطى إلى المحتوى

Healthcare

تعزيز تقنية عيادة رعاية صحية وفق قانون حماية البيانات

كيف قسّمت ميجنت شبكة عيادة في دبي وشفّرت نسخ المرضى وربطت ضوابط قانون حماية البيانات دون إيقاف ساعات العيادة.

العميل:
Multi-doctor clinic, Dubai
القطاع:
Healthcare
تاريخ النشر:
تعزيز تقنية عيادة رعاية صحية وفق قانون حماية البيانات

نظرة عامة

0

Clinic-hour outages during rollout

PDPL

Controls mapped & evidenced

24/7

Monitoring after go-live

نظرة عامة

A growing Dubai clinic ran EMR, imaging and guest Wi-Fi on a flat network, with backups sitting on the same NAS as production. Leadership needed UAE PDPL-ready controls without taking rooms offline during clinic hours.

Mignet segmented clinical, guest and medical-device VLANs, moved backups to an immutable target, rolled out MFA and EDR, and produced a records-of-processing pack the clinic’s DPO could defend.

التحدي

  • Patient data on a flat LAN shared with guest Wi-Fi
  • Backups on the same NAS as the EMR
  • No MFA on clinical mailboxes
  • Change windows limited to evenings and Fridays
  • Need for PDPL evidence, not just tools

منهجيتنا

  1. 01

    Discovery without disruption

    • Mapped devices, EMR vendor and imaging flows after hours
    • Identified personal-data stores for the PDPL record
    • Agreed a phased VLAN cutover with a rollback
  2. 02

    Controls

    • Clinical / guest / device segmentation
    • Immutable backups with a restore test
    • MFA, EDR and email security
    • Admin logging retained for 12 months
  3. 03

    Evidence & handover

    • Access-review export for the DPO
    • Incident playbook and after-hours number
    • AMC covering 24/7 monitoring

النتائج

  • No clinic-hour outage during the cutover
  • Guest Wi-Fi can no longer reach EMR
  • Restore test completed inside the agreed RTO
  • PDPL technical measures documented for the next audit
They worked around our lists. Patients never noticed — and we finally have a pack we can show an auditor.
Practice manager, client clinic

الأسئلة الشائعة

Will this work with our existing EMR?

Yes. We design around the vendor’s supported topology rather than forcing a rip-and-replace.

Is this a legal PDPL opinion?

No — we implement and evidence technical measures. Legal opinions stay with your counsel.

دراسات حالة أخرى

دراسات الحالة

تعزيز تقنية عيادة وفق قانون حماية البيانات | دراسة حالة