Even the smallest practice processes especially sensitive health data. And the revised Data Protection Act applies to it just as much as to a large hospital. We make compliance affordable: with ready-made templates, an outsourced data-protection adviser without a new hire, and Swiss tooling for a small monthly fee.
For GP practices, specialist practices, group practices, dental practices and small clinics
There is no size exemption: anyone processing patient data carries the same core duties, whether a solo practice or a small clinic.
Health data counts as especially sensitive personal data. The revised Data Protection Act requires a record of processing activities, appropriate technical and organisational measures, transparent information for patients, and notification of data-security breaches to the Federal Data Protection and Information Commissioner. These duties attach to the processing, not to headcount.
Important for small operations: the fines under the revised Data Protection Act are criminal in nature and target the responsible natural person, typically the practice owner or managing director, not primarily the practice as a company. Intentional breaches can carry fines of up to CHF 250,000. That makes personal diligence a leadership matter, unlike the turnover-based corporate fines of the European GDPR.
The good news: for a practice, compliance need be neither expensive nor complicated. Most duties can be met with proven templates, clear procedures and a little training. That is exactly why we have built template-based packages that bring small operations to an audit-ready state within a few weeks, without building an in-house data-protection team.
Practice Data-Protection Package
Fixed fee
The template-based entry point: an audit-ready data-protection baseline for your practice within a few weeks.
Outsourced Data-Protection Adviser
from a small monthly retainer
Your external data-protection adviser under the revised Data Protection Act, ongoing support instead of a one-off binder. No internal role, no payroll overhead.
EPR Readiness & Awareness
Fixed fee
The build-on to the practice package: readiness for a future connection to the electronic patient record plus awareness basics for the team.
Priverion Platform
small monthly fee
Swiss data-protection management software where your record, templates and evidence live in one place, hosted in Switzerland, easy for small teams.
Few, clearly timed steps. We deliberately keep the effort for your team small.
A generic checklist from the internet does not protect the responsible person. A legally led baseline does.
Our templates come from doctorate-level lawyers with CIPP/E, not from an anonymous generator. They are tailored to Swiss data-protection law and everyday practice, and therefore hold up when it matters.
Because we build on proven templates, you do not pay for a bespoke build from scratch. You get a clear fixed-fee package instead of an open consulting bill, fitting the budget of a small practice.
You need neither create a data-protection role nor build internal specialist knowledge. Our outsourced data-protection adviser takes on the ongoing responsibility as an external function, predictable and for a small monthly fee.
The electronic patient record is being modernised and broader connection is planned. We get your practice into a clean starting position today, so that a future EPR connection does not become an ordeal.
We deliver templates, patient information and training in German, French and English. Practices in French-speaking Switzerland in particular receive their documents directly in French, without a translation detour.
Where a SIDD lawyer advises in a legal capacity, your information may be covered by professional secrecy under Art. 321 of the Swiss Criminal Code, in addition to contractual confidentiality. We clarify the exact scope per mandate.
Our tool: LexCommand
LexCommand is our in-house, citation-backed legal AI for the law of Switzerland, Germany, Austria and the EU. Developed and run sovereignly in Switzerland by Priverion GmbH, the company behind SIDD. We do not just preach data sovereignty and provability, we built them into our own tool, alongside the Priverion Platform.
The AI runs self-hosted on Swiss infrastructure, with no external cloud LLMs. As an independent Swiss company with no foreign parent, we process your documents in an environment we control.
Every legal statement traces back to a retrievable primary source, or it does not appear at all. That makes our recommendations auditable and verifiable, instead of merely sounding plausible.
LexCommand takes over searching, cross-checking and sourcing. That shortens turnaround times and frees our senior advisors for judgement and client dialogue, with no loss of diligence.
We look at data protection, information security and AI security on a shared source base with a framework crosswalk. So you see overlapping obligations in one consolidated picture, instead of three isolated analyses.
For your practice package, concretely: LexCommand populates the templates for the processing record, patient information and technical measures with content that ties each data-protection duty back to the applicable version of the revised FADP, keeping your practice documents defensible and audit-ready.
Temporally deterministic (as of today or any reference date), with jurisdiction isolation (CH/DE/AT/EU) and a citation verifier at the end of every answer.
Yes. The revised Data Protection Act has no exemption for small practices when especially sensitive health data is processed. A record, patient information and appropriate measures are core duties. With our template-based package you meet them without much effort.
We offer the base package at a fixed fee, and the ongoing support through the outsourced adviser plus the Priverion platform for a small monthly fee. We quote the concrete price after a short intro call in which we clarify your practice's size, software and needs.
No. Our outsourced data-protection adviser takes on the function externally. You save yourself an internal role and the specialist knowledge, yet still have a named contact who looks after the topic for you on an ongoing basis.
Yes. We deliver templates, patient information and training directly in German, French and English. Practices in western Switzerland receive their documents in French, without having to translate anything yourselves.
Yes. The EPR readiness module puts you in a clean starting position today: clarified roles, access rights and consents, plus a baseline assessment for a future connection to the electronic patient record. That makes a later connection plannable rather than hectic.
We start with a short intro call and a clear fixed-fee offer, template-based, legally led and multilingual.