A consultation cannot wait for the system.

• Special category data Access control, activity logging and encryption stop being good practice and become an obligation that is met.
• Downtime during consulting hours Maintenance carried out outside patient hours; connections to laboratories and insurers always up.
• Vulnerable medical equipment Ultrasound scanners, analysers and imaging workstations running legacy systems are isolated on their own network.
• Unpredictable costs With IT Unlimited, support is unlimited, with no call counting.

The risk we come across most often: backups that have run every night for years and have never been restored. Without a restore test, a backup is merely a hope.

Many clinics grow with a single network for the waiting-room Wi-Fi, the administrative workstations and the diagnostic devices. A visitor's compromised laptop is then one step away from the patient record. We separate traffic into distinct networks, with firewall rules between them. In most cases this is a matter of configuration, not new investment.

Network points sized for the busiest day

Separating networks only works with enough documented network points. Without them, the VLAN is improvised and undone at the first emergency.

• Consulting rooms Doctor's workstation, diagnostic device and printer, each with its own point.
• Imaging X-ray, ultrasound and similar always cabled, never on Wi-Fi.
• Admissions Reception, kiosks and payment terminals.
• Infrastructure Access points, cameras, access control and the rack, with headroom to grow.

An imaging system that loses its connection mid-scan forces the patient to repeat it. That is why medical equipment connects via certified cabling, on its own VLAN.

Works without cancelling appointments

We work in the evenings and at weekends, room by room, with the clinical system live. At the end we hand over the network map, the Fluke certification report for every point and the VLAN design. This documentation lets you demonstrate under GDPR that the separation of clinical data genuinely exists. The reasoning is set out in structured cabling certification.

Each audience has its own network, its own VLAN and its own rules, not just a different password.

• Clinical and administrative staff Access to the patient management software and internal systems.
• Patients Internet in the waiting room and nothing else.
• Devices Label printers, kiosks, triage tablets and mobile devices, out of reach of third parties.

On a managed business wireless network, the access points work as a single system: someone walking from the consulting room to the treatment room with their laptop open does not lose their session. Where there is telephony over Wi-Fi, this is a requirement.

Twenty patients with mobile phones place more load than a whole floor of consulting rooms. The answer is more access points at lower power with well-distributed channels, sized through an on-site survey. That calculation is what decides between Wi-Fi 6, 6E or Wi-Fi 7.

Wi-Fi that drops now and then leads someone to plug a device into the wrong network just to get things done. The network has to be good enough that nobody works around it. We cover the subject in more depth in Wi-Fi for clinics and patient data protection.

In a healthcare facility, a business video surveillance project starts with the places where there must be no camera. Footage captured in a consulting or treatment room becomes health data.

Where to film and where not to

Consulting rooms, examination and treatment rooms, toilets, changing rooms, staff rest areas and the public street are excluded. In the waiting room, the camera covers the entrance, not the people waiting. Cameras go where they solve a problem:

• Entrance Who comes in and goes out.
• Front desk Reception and payments.
• Restricted areas Restricted access points and the medication cabinet.
• Car park The facility's parking.

Verifiable obligations

• Signage Visible before each monitored area.
• Retention A defined retention period that is adhered to.
• Access to footage By role, with a log of who viewed what.
• Documentation Processing recorded in the facility's data protection documentation.

Staff are informed and the purpose is never to monitor performance. These points should be validated legally; DataRoad delivers the technical dossier that makes that validation possible.

Cameras on their own network

An IP camera is a computer powered through its cable. It needs switches with PoE headroom and a dedicated VLAN, separate from clinical workstations and medical imaging. On a flat network, the corridor camera is the shortest route to the patient record.

NVR recorders have encrypted storage, configured retention and remote viewing per user. Sizing starts from one question: how many days back do you need to go? The system then goes into maintenance, with recording checks, firmware updates and failure alerts. More detail in the guide to IP video surveillance projects.

What is being protected is the clinical history, the diaries, insurer billing and test reports. Losing a day means rebuilding appointments from memory; losing a week is a legal problem. We treat backups as a verified process.

• Two copies One local for fast restores and another off site, against fire, theft or ransomware.
• Tested restores Periodic, logged and timed.
• Encryption Health data backups encrypted, inside and outside the clinic.
• Alerts A failed backup alerts the DataRoad team, not a forgotten shared mailbox.

Servers, disks, internet, access points and firewall are monitored continuously; most problems are dealt with before reception even notices. Retention and frequency are written into the contract.

• Clínica Mulher, Twin Towers (Sete Rios, Lisbon): a new facility with 192 network points, Wi-Fi 7, firewall and ongoing IT Unlimited support.
• Clínica Lambert, Corroios: structured network, business wireless, firewall, printing and full IT Unlimited support.

In both, cameras, access points and access control share the infrastructure without being able to see each other. DataRoad has 11 years in the market, 232 clients, Top 5% PME status according to scoring.pt, 5.0 across 52 Google reviews and not a single security incident of its own in 11 years. More projects in news and case studies.

1. Survey: site visit, inventory of equipment, network and clinical software, and a conversation with the team.
2. Written assessment: risks, urgent items and what can wait, with a cost per item.
3. Phased delivery: outside patient hours, without stopping activity.
4. Ongoing management: monitoring, support and review as the clinic grows.

• Managed IT for hospitality
• IT for offices and multinationals
• IT for the public sector
• IT for embassies and international organisations
• IT for schools, colleges and universities

A quick review of your protection: the cybersecurity checklist for SMEs, covering firewall, backups, MFA and VPN.

This service is provided exclusively under an IT Unlimited contract. We do not carry out one-off call-outs or sell standalone equipment: we take full responsibility for the clinic's IT, with immediate response times.

More than 10 workstations · support contract · remote, on-site and phone support.

Call +351 211 459 950 * or write to sales@dataroad.pt. One Step Ahead of IT.

*Call to a Portuguese landline.