{"id":25163,"date":"2025-04-23T09:36:35","date_gmt":"2025-04-23T07:36:35","guid":{"rendered":"https:\/\/compleye.io\/?p=25163"},"modified":"2026-01-30T10:53:57","modified_gmt":"2026-01-30T09:53:57","slug":"is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine","status":"publish","type":"post","link":"https:\/\/compleye.io\/es\/articulos\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\/","title":{"rendered":"Is processing patient data as a data processor enough to send shivers down your spine?"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"25163\" class=\"elementor elementor-25163\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4401f95d e-flex e-con-boxed e-con e-parent\" data-id=\"4401f95d\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7da8eb4a elementor-widget elementor-widget-text-editor\" data-id=\"7da8eb4a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p id=\"ember60\" class=\"ember-view reader-text-block__paragraph\"><strong>5 Step-Recovery-Plan for Data Processors in Healthcare Industry<span class=\"white-space-pre\"> <\/span><\/strong><span class=\"white-space-pre\"> <\/span><\/p>\n<p class=\"ember-view reader-text-block__paragraph\">In the age of GDPR, handling sensitive information, such as patient data, can often feel like navigating a legal labyrinth.&nbsp; Questions regarding the adequacy of legal bases for processing patient data, along with the measures in place for GDPR compliance, may keep you up at night!<span class=\"white-space-pre\"> <\/span><\/p>\n<p id=\"ember62\" class=\"ember-view reader-text-block__paragraph\">Let&#8217;s unravel the mystery behind GDPR compliance in 5 easy steps and explore whether managing patient data truly merits genuine concern.<span class=\"white-space-pre\"> <\/span><\/p>\n<p id=\"ember63\" class=\"ember-view reader-text-block__paragraph\"><strong>STEP 1: Understanding your Roles and Responsibilities<\/strong><span class=\"white-space-pre\"> <\/span><\/p>\n<p id=\"ember64\" class=\"ember-view reader-text-block__paragraph\">When navigating your role as a data processor under GDPR, clarity is key. It&#8217;s important to understand and own what you are required to do. As a data processor, you are responsible for handling personal data on behalf of the data controller, such as pharmaceutical companies, healthcare providers, or any organization dealing with patient data. Thus, you must act under the strict instructions of the data controller, and your role is limited to that of a data processor. Data processing should be limited to the specified purposes outlined in the data processing agreement.<span class=\"white-space-pre\"> <\/span><\/p>\n<p id=\"ember65\" class=\"ember-view reader-text-block__paragraph\">Going off-script during processing activities is strictly forbidden!<span class=\"white-space-pre\"> <\/span><\/p>\n<p id=\"ember66\" class=\"ember-view reader-text-block__paragraph\"><strong>STEP 2: Finding Your Legal Basis in GDPR<\/strong><span class=\"white-space-pre\"> <\/span><\/p>\n<p id=\"ember67\" class=\"ember-view reader-text-block__paragraph\">Before diving into the sea of patient data, ensure that the data controller established the lawful basis for processing patient data. This may include consent, contract performance, legal obligations, vital interests, public tasks, or legitimate interests. Just as the data controller needs a valid legal basis for processing data, you as a data processor must also have a legal basis for handling entrusted data.&nbsp; In your case, the basis for processing personal data would usually be the performance of the contract for products and services provided to the data controller.<span class=\"white-space-pre\"> <\/span><\/p>\n<p id=\"ember68\" class=\"ember-view reader-text-block__paragraph\"><strong>STEP 3: Understanding Categories of Data<\/strong><span class=\"white-space-pre\"> <\/span><\/p>\n<p id=\"ember69\" class=\"ember-view reader-text-block__paragraph\">Nailing down data categories from the get-go is key. When handling patient data, ambiguity is a no-go. The data processing agreement must thoroughly and distinctly outline the data categories. The controller should detail them with precision to match the accuracy of the data.<span class=\"white-space-pre\"> <\/span><\/p>\n<p id=\"ember70\" class=\"ember-view reader-text-block__paragraph\">Under GDPR, health data is classified as a special category. Therefore, when collecting patient information, you are entering this special zone. This refers to personal information about an individual&#8217;s physical or mental health including:<span class=\"white-space-pre\"> <\/span><\/p>\n<ul>\n<li>Details such as injury, illness, disability, or disease susceptibility are included in medical history, diagnoses, and interventions.<span class=\"white-space-pre\"> <\/span><\/li>\n<li>Health data encompasses information from medical examinations, test outcomes, and data from medical and fitness devices.<span class=\"white-space-pre\"> <\/span><\/li>\n<li>Information from health service registration, appointments, reminders, and invoices provides insights into an individual&#8217;s health.<span class=\"white-space-pre\"> <\/span><\/li>\n<li>Unique and non-disclosive identifiers linked to health status are crucial.<span class=\"white-space-pre\"> <\/span><\/li>\n<li>Health data encompasses past, present, and anticipated health conditions, providing comprehensive insights.<span class=\"white-space-pre\"> <\/span><\/li>\n<\/ul>\n<p id=\"ember72\" class=\"ember-view reader-text-block__paragraph\">The GDPR prohibits the processing of special category data, except for ten exceptions known as &#8216;conditions for processing special category data.&#8217; Just remember, as a data processor, it&#8217;s the controller&#8217;s job to collect that data by the book.<span class=\"white-space-pre\"> <\/span><\/p>\n<p id=\"ember73\" class=\"ember-view reader-text-block__paragraph\"><strong>STEP 4: Seal the Deal: Agreeing to the Data Processing Agreement (DPA)!<\/strong><span class=\"white-space-pre\"> <\/span><\/p>\n<p id=\"ember74\" class=\"ember-view reader-text-block__paragraph\">Crafting a comprehensive DPA with the data controller is crucial. This written agreement should cover all the requirements mandated by Article 28 of the GDPR. It is important to delve into critical details such as data categories, processing duration, nature and purpose, data subject categories, and both parties&#8217; obligations and right. Don&#8217;t skimp on confidentiality, security, and breach notification provisions either, as they are integral to the GDPR game plan!<span class=\"white-space-pre\"> <\/span><\/p>\n<p id=\"ember75\" class=\"ember-view reader-text-block__paragraph\"><strong>STEP 5: Must-Haves for Your GDPR-Compliant Data Processing<\/strong><span class=\"white-space-pre\"> <\/span><\/p>\n<p id=\"ember76\" class=\"ember-view reader-text-block__paragraph\">Ensuring that your processing activities comply with GDPR regulations is a must. Let&#8217;s break it down:<span class=\"white-space-pre\"> <\/span><\/p>\n<ul>\n<li><strong>Data Minimization:<\/strong><span class=\"white-space-pre\"> <\/span>Less is more! Assess and justify the minimum amount of special category data required.&nbsp; Discuss with the data controller to determine essential data points.&nbsp; Collect only relevant information, minimizing non-essential data. Avoid gathering excessive or irrelevant data, focusing on information directly contributing to the processing purpose.<\/li>\n<li><strong>Security measures:<\/strong><span class=\"white-space-pre\"> <\/span>It is important to implement strong security measures, especially when dealing with special category data. Consider obtaining an ISO 27001 certification to demonstrate your commitment to security and privacy.<\/li>\n<li><strong>Transparency: The<\/strong><span class=\"white-space-pre\"> <\/span>data controller should ensure that privacy notices are clear, especially when handling special category data. It is important to be transparent and spell out all details for everyone to understand.<\/li>\n<li><strong>Rights related to automated decision-making:<\/strong><span class=\"white-space-pre\"> <\/span>Fairness is key! If automated decisions using patient data could significantly impact individuals, the data controller must obtain explicit consent or have a solid public interest reason before proceeding.<\/li>\n<li><strong>Data Protection Officer (DPO) or Privacy Officer (PO)<\/strong>: If the main activities include extensive processing of special category data, both the data processor and data controller need their own DPO or POto keep things afloat.<\/li>\n<li><strong>EU representative:<span class=\"white-space-pre\"> <\/span><\/strong>If the data controller operates outside of the EU but serves or monitors individuals within EU member states and handles large volumes of special category data, they must appoint a representative within the EU.<span class=\"white-space-pre\"> <\/span><\/li>\n<\/ul>\n<ol><\/ol>\n<ol><\/ol>\n<ol><\/ol>\n<ol><\/ol>\n<ol><\/ol>\n<p id=\"ember83\" class=\"ember-view reader-text-block__paragraph\"><span class=\"white-space-pre\"> <\/span><strong>Conclusi\u00f3n<\/strong><span class=\"white-space-pre\"> <\/span><\/p>\n<p class=\"ember-view reader-text-block__paragraph\">At the onset of patient data management, it&#8217;s vital to establish mutual understanding with the data controller regarding processing purposes and responsibilities for handling personal data on both ends.&nbsp;This ensures careful and fair handling of patient data, promotes transparent communication between the data controller and data processor, and ultimately safeguards individuals&#8217; rights.<span class=\"white-space-pre\"> <\/span><\/p>\n<p id=\"ember85\" class=\"ember-view reader-text-block__paragraph\">Let&#8217;s imagine a future where data privacy is not just a requirement, but also a fundamental pillar of trust in the digital domain.<span class=\"white-space-pre\"> <\/span><\/p><p id=\"ember85\" class=\"ember-view reader-text-block__paragraph\"><br><\/p>\n<p id=\"ember87\" class=\"ember-view reader-text-block__paragraph\">\n<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>5 Step-Recovery-Plan for Data Processors in Healthcare Industry In the age of GDPR, handling sensitive information, such as patient data, can often feel like navigating a legal labyrinth.\u00a0 Questions regarding the adequacy of legal bases for processing patient data, along with the measures in place for GDPR compliance, may keep [&hellip;]<\/p>","protected":false},"author":17,"featured_media":25164,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[129],"class_list":["post-25163","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-lean","tag-iso"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2<\/title>\n<meta name=\"description\" content=\"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/compleye.io\/es\/articulos\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2\" \/>\n<meta property=\"og:description\" content=\"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/compleye.io\/es\/articulos\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\/\" \/>\n<meta property=\"og:site_name\" content=\"compleye.io\" \/>\n<meta property=\"article:published_time\" content=\"2025-04-23T07:36:35+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-01-30T09:53:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/compleye.io\/wp-content\/uploads\/2026\/01\/1713853486382.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"1079\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Karolin Kruiskamp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Karolin Kruiskamp\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\\\/\"},\"author\":{\"name\":\"Karolin Kruiskamp\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/person\\\/0cec6d61467336a3c2ea74f0beb84bc3\"},\"headline\":\"Is processing patient data as a data processor enough to send shivers down your spine?\",\"datePublished\":\"2025-04-23T07:36:35+00:00\",\"dateModified\":\"2026-01-30T09:53:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\\\/\"},\"wordCount\":887,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/1713853486382.jpeg\",\"keywords\":[\"ISO\"],\"articleSection\":[\"Compleye Lean Compliance Designers\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/compleye.io\\\/articles\\\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\\\/\",\"url\":\"https:\\\/\\\/compleye.io\\\/articles\\\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\\\/\",\"name\":\"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/1713853486382.jpeg\",\"datePublished\":\"2025-04-23T07:36:35+00:00\",\"dateModified\":\"2026-01-30T09:53:57+00:00\",\"description\":\"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/compleye.io\\\/articles\\\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\\\/#primaryimage\",\"url\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/1713853486382.jpeg\",\"contentUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2026\\\/01\\\/1713853486382.jpeg\",\"width\":1079,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/compleye.io\\\/articles\\\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/compleye.io\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Is processing patient data as a data processor enough to send shivers down your spine?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#website\",\"url\":\"https:\\\/\\\/compleye.io\\\/\",\"name\":\"compleye.io\",\"description\":\"security and privacy compliance getting done\",\"publisher\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/compleye.io\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#organization\",\"name\":\"Compleye\",\"url\":\"https:\\\/\\\/compleye.io\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Compleye_Logo_Logo_Black.png\",\"contentUrl\":\"https:\\\/\\\/compleye.io\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Compleye_Logo_Logo_Black.png\",\"width\":2451,\"height\":892,\"caption\":\"Compleye\"},\"image\":{\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/c-board\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCpe1Z7aynfqWSrjgJORgKXw\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/compleye.io\\\/#\\\/schema\\\/person\\\/0cec6d61467336a3c2ea74f0beb84bc3\",\"name\":\"Karolin Kruiskamp\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g\",\"caption\":\"Karolin Kruiskamp\"},\"url\":\"https:\\\/\\\/compleye.io\\\/es\\\/articles\\\/author\\\/karolin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2","description":"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/compleye.io\/es\/articulos\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\/","og_locale":"es_ES","og_type":"article","og_title":"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2","og_description":"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.","og_url":"https:\/\/compleye.io\/es\/articulos\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\/","og_site_name":"compleye.io","article_published_time":"2025-04-23T07:36:35+00:00","article_modified_time":"2026-01-30T09:53:57+00:00","og_image":[{"width":1079,"height":720,"url":"https:\/\/compleye.io\/wp-content\/uploads\/2026\/01\/1713853486382.jpeg","type":"image\/jpeg"}],"author":"Karolin Kruiskamp","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"Karolin Kruiskamp","Tiempo de lectura":"4 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/compleye.io\/articles\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\/#article","isPartOf":{"@id":"https:\/\/compleye.io\/articles\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\/"},"author":{"name":"Karolin Kruiskamp","@id":"https:\/\/compleye.io\/#\/schema\/person\/0cec6d61467336a3c2ea74f0beb84bc3"},"headline":"Is processing patient data as a data processor enough to send shivers down your spine?","datePublished":"2025-04-23T07:36:35+00:00","dateModified":"2026-01-30T09:53:57+00:00","mainEntityOfPage":{"@id":"https:\/\/compleye.io\/articles\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\/"},"wordCount":887,"commentCount":0,"publisher":{"@id":"https:\/\/compleye.io\/#organization"},"image":{"@id":"https:\/\/compleye.io\/articles\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\/#primaryimage"},"thumbnailUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2026\/01\/1713853486382.jpeg","keywords":["ISO"],"articleSection":["Compleye Lean Compliance Designers"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/compleye.io\/articles\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/compleye.io\/articles\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\/","url":"https:\/\/compleye.io\/articles\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\/","name":"Lean Compliance Collaboration Platform | Compleye.io | ISO 27001 | ISO 9001 | SOC 2","isPartOf":{"@id":"https:\/\/compleye.io\/#website"},"primaryImageOfPage":{"@id":"https:\/\/compleye.io\/articles\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\/#primaryimage"},"image":{"@id":"https:\/\/compleye.io\/articles\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\/#primaryimage"},"thumbnailUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2026\/01\/1713853486382.jpeg","datePublished":"2025-04-23T07:36:35+00:00","dateModified":"2026-01-30T09:53:57+00:00","description":"Lean Compliance Collaboration Platform to help SaaS Companies towards their ISO 27001, ISO 9001 or SOC-2 certification and stronger performance on privacy and security.","breadcrumb":{"@id":"https:\/\/compleye.io\/articles\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/compleye.io\/articles\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/compleye.io\/articles\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\/#primaryimage","url":"https:\/\/compleye.io\/wp-content\/uploads\/2026\/01\/1713853486382.jpeg","contentUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2026\/01\/1713853486382.jpeg","width":1079,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/compleye.io\/articles\/is-processing-patient-data-as-a-data-processor-enough-to-send-shivers-down-your-spine\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/compleye.io\/"},{"@type":"ListItem","position":2,"name":"Is processing patient data as a data processor enough to send shivers down your spine?"}]},{"@type":"WebSite","@id":"https:\/\/compleye.io\/#website","url":"https:\/\/compleye.io\/","name":"compleye.io","description":"security and privacy compliance getting done","publisher":{"@id":"https:\/\/compleye.io\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/compleye.io\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/compleye.io\/#organization","name":"Compleye","url":"https:\/\/compleye.io\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/compleye.io\/#\/schema\/logo\/image\/","url":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/03\/Compleye_Logo_Logo_Black.png","contentUrl":"https:\/\/compleye.io\/wp-content\/uploads\/2023\/03\/Compleye_Logo_Logo_Black.png","width":2451,"height":892,"caption":"Compleye"},"image":{"@id":"https:\/\/compleye.io\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/c-board\/","https:\/\/www.youtube.com\/channel\/UCpe1Z7aynfqWSrjgJORgKXw"]},{"@type":"Person","@id":"https:\/\/compleye.io\/#\/schema\/person\/0cec6d61467336a3c2ea74f0beb84bc3","name":"Karolin Kruiskamp","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e9c574805c26ff058e494916fb42a856824ea78280afec8044becfcbddce78c7?s=96&d=mm&r=g","caption":"Karolin Kruiskamp"},"url":"https:\/\/compleye.io\/es\/articles\/author\/karolin\/"}]}},"_links":{"self":[{"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/posts\/25163","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/comments?post=25163"}],"version-history":[{"count":6,"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/posts\/25163\/revisions"}],"predecessor-version":[{"id":25175,"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/posts\/25163\/revisions\/25175"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/media\/25164"}],"wp:attachment":[{"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/media?parent=25163"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/categories?post=25163"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/compleye.io\/es\/wp-json\/wp\/v2\/tags?post=25163"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}