Skip to content

Healthcare

Healthcare Clinic PDPL IT Hardening

How Mignet segmented a Dubai clinic network, encrypted patient backups and mapped UAE PDPL controls — without interrupting clinic hours.

Client:
Multi-doctor clinic, Dubai
Industry:
Healthcare
Published:
Healthcare Clinic PDPL IT Hardening

At a glance

0

Clinic-hour outages during rollout

PDPL

Controls mapped & evidenced

24/7

Monitoring after go-live

Overview

A growing Dubai clinic ran EMR, imaging and guest Wi-Fi on a flat network, with backups sitting on the same NAS as production. Leadership needed UAE PDPL-ready controls without taking rooms offline during clinic hours.

Mignet segmented clinical, guest and medical-device VLANs, moved backups to an immutable target, rolled out MFA and EDR, and produced a records-of-processing pack the clinic’s DPO could defend.

The challenge

  • Patient data on a flat LAN shared with guest Wi-Fi
  • Backups on the same NAS as the EMR
  • No MFA on clinical mailboxes
  • Change windows limited to evenings and Fridays
  • Need for PDPL evidence, not just tools

Our approach

  1. 01

    Discovery without disruption

    • Mapped devices, EMR vendor and imaging flows after hours
    • Identified personal-data stores for the PDPL record
    • Agreed a phased VLAN cutover with a rollback
  2. 02

    Controls

    • Clinical / guest / device segmentation
    • Immutable backups with a restore test
    • MFA, EDR and email security
    • Admin logging retained for 12 months
  3. 03

    Evidence & handover

    • Access-review export for the DPO
    • Incident playbook and after-hours number
    • AMC covering 24/7 monitoring

Results delivered

  • No clinic-hour outage during the cutover
  • Guest Wi-Fi can no longer reach EMR
  • Restore test completed inside the agreed RTO
  • PDPL technical measures documented for the next audit
They worked around our lists. Patients never noticed — and we finally have a pack we can show an auditor.
Practice manager, client clinic

Frequently asked questions

Will this work with our existing EMR?

Yes. We design around the vendor’s supported topology rather than forcing a rip-and-replace.

Is this a legal PDPL opinion?

No — we implement and evidence technical measures. Legal opinions stay with your counsel.

More case studies

Case Studies

Healthcare Clinic PDPL IT Hardening | Case Study | Mignet