{"id":8572,"date":"2021-03-26T09:45:07","date_gmt":"2021-03-26T08:45:07","guid":{"rendered":"https:\/\/www.sharpcookie.se\/?page_id=8572"},"modified":"2026-09-02T15:34:55","modified_gmt":"2026-09-02T13:34:55","slug":"health","status":"publish","type":"page","link":"https:\/\/www.sharpcookie.se\/en\/industries\/health\/","title":{"rendered":"Health"},"content":{"rendered":"<h1><span class=\"s1\"><b>Healthcare &amp; Digital Health<\/b><\/span><\/h1>\n<h2><span class=\"s1\"><b>Legal advice where healthcare, technology and data meet<\/b><\/span><\/h2>\n<p class=\"p2\">Healthcare is increasingly built on technology. Patient care, clinical workflows and healthcare administration depend on SaaS platforms, cloud infrastructure, apps, connected devices, data analytics and increasingly AI.<\/p>\n<p class=\"p2\"><em>That means legal questions rarely fit neatly into one practice area.<\/em><\/p>\n<p class=\"p2\">A new digital health service may simultaneously raise questions about patient data, AI, information security, cloud architecture, healthcare regulation, public procurement, intellectual property and contractual responsibility.<\/p>\n<p class=\"p2\">Sharp Cookie advises <span class=\"s1\"><b>healthcare organisations and technology companies operating at this intersection<\/b><\/span>.<\/p>\n<p class=\"p2\">We combine experience in digital health with technology transactions, data protection, AI, cloud services, information security, procurement and commercial contracting.<\/p>\n<p class=\"p2\">Our lawyers work with management, product and engineering teams, legal and privacy functions, information security specialists and commercial teams. We understand that the objective is not simply to identify regulatory requirements. Those requirements need to work with the technology, the healthcare environment and the commercial model.<\/p>\n<h2><span class=\"s1\"><b>Digital health requires integrated legal advice<\/b><\/span><\/h2>\n<p class=\"p2\">A healthcare technology company\u2019s needs rarely sort themselves into separate legal practice areas.<\/p>\n<p class=\"p2\">A <strong>SaaS product<\/strong> may need to satisfy GDPR and information security requirements while also being commercially acceptable to hospitals and other healthcare customers.<\/p>\n<p class=\"p2\">An <strong>AI feature<\/strong> may affect product design, transparency and governance while simultaneously changing the supplier\u2019s contractual position and the customer\u2019s risk assessment.<\/p>\n<p class=\"p2\"><strong>Moving patient data into a cloud environment<\/strong> can raise questions about access controls, processor arrangements and international transfers alongside technical architecture and customer contracts.<\/p>\n<p class=\"p2\">And a solution that works for an initial pilot may require a substantially more scalable legal and contractual model before it can be rolled out across multiple healthcare organisations.<\/p>\n<p class=\"p2\">We therefore look at the <span class=\"s1\"><b>technology, data, regulatory requirements and commercial model together<\/b><\/span>.<\/p>\n<p class=\"p2\">The objective is a position that the organisation can implement, healthcare customers can accept and the business can continue to operate as the technology develops.<\/p>\n<h2><span class=\"s1\"><b>Digital health products \u2013 from development to scale<\/b><\/span><\/h2>\n<p class=\"p2\">Legal and regulatory issues are usually easier to address while a product or service can still be changed.<\/p>\n<p class=\"p2\">We work with technology companies during product development, launch, enterprise sales and expansion to identify issues before they become blockers in customer due diligence, procurement or contract negotiations.<\/p>\n<p class=\"p3\">Depending on the technology, this can include:<\/p>\n<ul>\n<li>intended use and product functionality;<\/li>\n<li>patient and healthcare-professional workflows;<\/li>\n<li>processing and use of patient and health data;<\/li>\n<li>controller and processor roles;<\/li>\n<li>AI and automated functionality;<\/li>\n<li>cloud architecture and subprocessors;<\/li>\n<li>information security;<\/li>\n<li>product claims and user information;<\/li>\n<li>customer, user and partner agreements;<\/li>\n<li>intellectual property and licensing;<\/li>\n<li>regulatory boundaries; and<\/li>\n<li>allocation of responsibility between technology supplier and healthcare provider.<\/li>\n<\/ul>\n<h3><span class=\"s1\"><b>Experience: eHealth from launch to major European hospital<\/b><\/span><\/h3>\n<p class=\"p2\">For an eHealth company, we have provided External DPO and privacy leadership through launch and scale-up, integrating data protection into telehealth, AI functionality, its app and clinical workflows as they were being developed rather than reviewing them only after launch.<\/p>\n<p class=\"p2\">The work combined ongoing privacy governance with practical support as the product, partnerships and customer requirements developed. The company subsequently expanded its business to a volume level comparable to that of the top 10 hospitals in Europe.<\/p>\n<p class=\"p2\">This is representative of how we prefer to work with digital health: legal and compliance decisions made close enough to the technology and business to help the organisation move forward.<\/p>\n<p class=\"p2\">For organisations preparing a product for launch, enterprise sales or expansion, our <a href=\"https:\/\/www.sharpcookie.se\/en\/service\/technology-product-readiness-review\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s1\"><b>Technology Product Readiness Review<\/b><\/span><\/a> provides a structured assessment of product, technology and material legal and commercial risks.<\/p>\n<h2><span class=\"s1\"><b>AI in healthcare<\/b><\/span><\/h2>\n<p class=\"p2\">AI is increasingly part of digital healthcare rather than a separate technology category.<\/p>\n<p class=\"p2\">But the relevant legal question is rarely whether a product simply \u201cuses AI\u201d.<\/p>\n<p class=\"p4\">What matters is <span class=\"s1\"><b>what the AI does, what information it uses, what output it generates and how that output affects patients, healthcare professionals and decisions<\/b><\/span><span class=\"s2\">.<\/span><\/p>\n<p class=\"p2\">Functionality that summarises information presents different risks from technology that identifies patterns, predicts outcomes, prioritises patients or supports professional decision-making.<\/p>\n<p class=\"p3\">We advise on issues including:<\/p>\n<ul>\n<li>application of the EU AI Act and GDPR;<\/li>\n<li>governance and accountability;<\/li>\n<li>training and use of data;<\/li>\n<li>transparency;<\/li>\n<li>human oversight and professional judgement;<\/li>\n<li>DPIAs and other risk assessments;<\/li>\n<li>logging and documentation;<\/li>\n<li>product claims;<\/li>\n<li>customer and user information;<\/li>\n<li>contractual allocation of responsibility; and<\/li>\n<li>governance as the functionality develops.<\/li>\n<\/ul>\n<h3><span class=\"s1\"><b>Experience: AI-supported patient and professional functionality<\/b><\/span><\/h3>\n<p class=\"p2\">We have advised on the development and launch of AI-supported functionality directed both towards patients and healthcare professionals, including predictive functionality.<\/p>\n<p class=\"p2\">The work has included privacy and data protection, governance, risk assessment, transparency, product design and internal accountability.<\/p>\n<p class=\"p2\">This experience matters because AI governance in healthcare cannot be separated from how the functionality is intended to be used in practice.<\/p>\n<p class=\"p2\">For companies adding AI to an existing product, our <a href=\"https:\/\/www.sharpcookie.se\/en\/service\/ai-feature-launch-legal-review\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s1\"><b>AI Feature Launch Legal Review<\/b><\/span><\/a> provides a focused review before launch.<\/p>\n<h2><span class=\"s1\"><b>Patient data, GDPR and privacy by design<\/b><\/span><\/h2>\n<p class=\"p2\">Healthcare involves some of the most sensitive personal data an organisation can process.<\/p>\n<p class=\"p2\">But identifying information as \u201chealth data\u201d is only the beginning of the analysis.<\/p>\n<p class=\"p2\">The practical questions concern where the data comes from, why it is processed, which organisation makes which decisions, how the technology uses it, who can access it and what happens to it over time.<\/p>\n<p class=\"p3\">We advise on:<\/p>\n<ul>\n<li>data protection strategy and governance;<\/li>\n<li>controller and processor roles;<\/li>\n<li>legal basis and processing of special categories of personal data;<\/li>\n<li>Data Protection Impact Assessments (DPIAs);<\/li>\n<li>privacy by design;<\/li>\n<li>patient and user transparency;<\/li>\n<li>retention and deletion;<\/li>\n<li>analytics and secondary use;<\/li>\n<li>AI development and use;<\/li>\n<li>processor and subprocessor arrangements;<\/li>\n<li>international transfers;<\/li>\n<li>data breaches and incidents; and<\/li>\n<li>regulatory investigations and enforcement.<\/li>\n<\/ul>\n<p class=\"p2\">Sharp Cookie Advisors also participated in legislative work relating to the GDPR.<\/p>\n<p class=\"p2\">Our approach to privacy in healthcare is therefore not limited to producing policies or DPAs. We help organisations translate data protection requirements into decisions about <span class=\"s1\"><b>products, systems, processes and commercial relationships<\/b><\/span>.<\/p>\n<h2><span class=\"s1\"><b>SaaS, cloud and patient data<\/b><\/span><\/h2>\n<p class=\"p2\">Modern digital healthcare increasingly depends on cloud infrastructure and SaaS.<\/p>\n<p class=\"p2\">That creates questions which are simultaneously technical, contractual and regulatory.<\/p>\n<p class=\"p2\">The legal model needs to reflect how the service actually works.<\/p>\n<h3><span class=\"s1\"><b>Experience: multi-tenant SaaS involving patient data<\/b><\/span><\/h3>\n<p class=\"p2\">We have advised on multi-tenant SaaS environments involving patient data, including questions concerning tenant separation, access controls, auditability, processor arrangements, information security, international transfers and customer-facing contractual structures.<\/p>\n<p class=\"p2\">These details matter.<\/p>\n<p class=\"p2\">A contractual promise about separation, access, location or deletion of data is only useful if the underlying architecture can support it.<\/p>\n<p class=\"p2\">Conversely, understanding the architecture can make it possible to resolve a legal or customer requirement without unnecessarily redesigning the service.<\/p>\n<p class=\"p2\">This is one reason our technology work starts with the actual product and data flows rather than treating the contract or GDPR analysis in isolation.<\/p>\n<h2><span class=\"s1\"><b>External DPO for healthcare and eHealth<\/b><\/span><\/h2>\n<p class=\"p2\">Sharp Cookie Advisors acts as <a href=\"https:\/\/www.sharpcookie.se\/en\/service\/data-protection-officer-dpo\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s1\"><b>External Data Protection Officer<\/b><\/span> <\/a>for organisations that need independent privacy oversight combined with substantial technology and healthcare experience.<\/p>\n<p class=\"p3\">Our DPO work can include:<\/p>\n<ul>\n<li>independent monitoring and oversight;<\/li>\n<li>privacy maturity assessments;<\/li>\n<li>DPIA governance;<\/li>\n<li>audits and compliance reviews;<\/li>\n<li>management reporting;<\/li>\n<li>privacy governance for new products and changes;<\/li>\n<li>incident and breach preparedness;<\/li>\n<li>training;<\/li>\n<li>processor and vendor governance; and<\/li>\n<li>dialogue with supervisory authorities.<\/li>\n<\/ul>\n<p class=\"p2\">We take a systematic and risk-based approach, with governance and priorities adapted to the organisation\u2019s privacy maturity, risk profile and management objectives. Our experience includes acting as DPO for start-ups, SMEs and international listed companies.<\/p>\n<p class=\"p2\">For digital health companies, technology understanding is particularly important. A DPO may need to understand the implications of a new app feature, an AI model, a clinical workflow, a cloud provider or a healthcare customer\u2019s requirements \u2013 sometimes at the same time.<\/p>\n<h3><span class=\"s1\"><b>Experience: privacy governance embedded in growth<\/b><\/span><\/h3>\n<p class=\"p2\">For our eHealth work, privacy governance has been integrated into product and business development rather than operated as a compliance gate at the end.<\/p>\n<p class=\"p2\">The underlying approach is deliberately practical: establish proportionate governance, identify when deeper assessment is required and allow routine product and business decisions to move at an appropriate pace.<\/p>\n<p class=\"p2\">As one eHealth CTO described our work:<\/p>\n<p class=\"p5\"><em>\u201cThey combine GDPR and cybersecurity expertise with practical business sense.\u201d<\/em><\/p>\n<p class=\"p2\">The client specifically linked Sharp Cookie Advisors\u2019s External DPO support to the company\u2019s successful expansion to a major European hospital.<\/p>\n<p class=\"p2\">Where we act as DPO, we maintain the independence required for the role and distinguish independent oversight from management decisions and other legal advisory work.<\/p>\n<h2><span class=\"s1\"><b>Technology companies selling to healthcare<\/b><\/span><\/h2>\n<p class=\"p2\">Healthcare organisations can be demanding technology buyers.<\/p>\n<p class=\"p2\">Hospitals, regions and other healthcare providers may impose extensive requirements concerning patient data, information security, auditability, business continuity, subcontractors, AI, service levels and regulatory compliance.<\/p>\n<p class=\"p2\">Those requirements quickly become commercial questions for the supplier:<\/p>\n<ul>\n<li class=\"p4\"><b>Can our product actually meet them?<\/b><\/li>\n<li class=\"p4\"><b>Do the requirements fit our technical architecture and delivery model?<\/b><\/li>\n<li class=\"p4\"><b>What responsibility should we accept?<\/b><\/li>\n<li class=\"p4\"><b>What will compliance cost?<\/b><\/li>\n<li class=\"p4\"><b>Will accepting this customer\u2019s requirements create problems when we sell to the next?<\/b><\/li>\n<li class=\"p4\"><b>Can we still deliver the service on commercially sustainable terms?<\/b><\/li>\n<\/ul>\n<p class=\"p2\">We support SaaS, software, AI, cloud and other technology suppliers from preparation and customer due diligence through contract review, procurement and negotiation.<\/p>\n<p class=\"p2\">For the complete supplier-side service, see <a href=\"https:\/\/www.sharpcookie.se\/en\/service\/selling-saas-it-services-public-sector\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s1\"><b>Selling Digital Services to Healthcare<\/b><\/span>.<\/a><\/p>\n<h2><span class=\"s1\"><b>Technology procurement for healthcare organisations<\/b><\/span><\/h2>\n<p class=\"p2\">We also work on the other side of the table.<\/p>\n<p class=\"p2\">Healthcare organisations adopting new technology need contracts and procurement processes that address genuine regulatory and operational risks without unnecessarily obstructing innovation.<\/p>\n<h3><span class=\"s1\"><b>Experience: SaaS procurement for a leading Swedish healthcare provider<\/b><\/span><\/h3>\n<p class=\"p2\">We advised a leading Swedish private healthcare provider on establishing its IT procurement process and developed new general terms for procurement of SaaS.<\/p>\n<p class=\"p2\">The work addressed GDPR and regulatory requirements associated with innovative uses of patient data.<\/p>\n<p class=\"p2\">That experience remains particularly relevant to our supplier-side work.<\/p>\n<p class=\"p2\">Understanding why a sophisticated healthcare customer asks a particular question makes it easier to distinguish between a requirement with a genuine regulatory or operational purpose and a standard contractual position that does not fit the service being purchased.<\/p>\n<h2><span class=\"s1\"><b>Public procurement and healthcare technology<\/b><\/span><\/h2>\n<p class=\"p2\">For many digital health companies, selling to healthcare also means selling to the public sector.<\/p>\n<p class=\"p2\">This adds another layer to the transaction.<\/p>\n<p class=\"p2\">Product, security, patient-data and contractual requirements may be fixed through the procurement process, potentially limiting the supplier\u2019s ability to negotiate them later.<\/p>\n<p class=\"p2\">Problems therefore need to be identified early.<\/p>\n<p class=\"p3\">We help suppliers understand the interaction between:<\/p>\n<ul>\n<li>public procurement;<\/li>\n<li>healthcare requirements;<\/li>\n<li>SaaS and technology contracts;<\/li>\n<li>patient data and GDPR;<\/li>\n<li>information security;<\/li>\n<li>product capabilities; and<\/li>\n<li>commercial risk.<\/li>\n<\/ul>\n<p class=\"p2\">The question is not merely whether a contractual provision would normally be negotiable. It is what can still be clarified, changed, priced or managed within the particular procurement procedure.<\/p>\n<p class=\"p4\">For more, see <span class=\"s1\"><b>Selling <a href=\"https:\/\/www.sharpcookie.se\/en\/service\/selling-saas-it-services-public-sector\/\" target=\"_blank\" rel=\"noopener\">SaaS and IT Services to the Public Sector<\/a><\/b><\/span><span class=\"s2\">.<\/span><\/p>\n<h2><span class=\"s1\"><b>Connected health, IoT and devices<\/b><\/span><\/h2>\n<p class=\"p2\">Digital healthcare extends beyond SaaS.<\/p>\n<p class=\"p2\">Connected products can combine hardware, sensors, software, cloud infrastructure, AI and personal data in one service and one supply chain.<\/p>\n<p class=\"p2\">This creates legal issues that cannot sensibly be analysed as isolated questions about software, privacy or contracts.<\/p>\n<h3><span class=\"s1\"><b>Experience: IoT, medical device, AI and public-sector customer<\/b><\/span><\/h3>\n<p class=\"p2\">Our technology compliance work has included a focused review for a global IoT manufacturer spanning a device, AI, sensors, SaaS and suppliers, including a medical-device context.<\/p>\n<p class=\"p2\">The compliance position was translated into commercial terms across a chain of transactions from subvendor to manufacturer and ultimately to a Swedish municipality customer.<\/p>\n<p class=\"p2\">The work established a baseline that could be reused for onboarding and expansion into additional markets.<\/p>\n<p class=\"p2\">This is the type of problem where technology compliance has commercial value: the objective is not merely to complete an analysis but to establish a position that can survive the next customer, supplier and market.<\/p>\n<h2><span class=\"s1\"><b>Digital services for elderly care<\/b><\/span><\/h2>\n<p class=\"p2\">We have also advised manufacturers and suppliers of connected products and digital services used in elderly care.<\/p>\n<p class=\"p2\">These services can sit at the intersection of healthcare, social care, connected technology and privacy and may involve vulnerable users, sensitive information and several organisations participating in the delivery.<\/p>\n<p class=\"p2\">Our work has included external specialist advice, data protection and DPO support for product teams and management.<\/p>\n<p class=\"p2\">Again, the relevant legal structure needs to follow the real service: who provides what, who controls which data and technology, and how responsibilities are divided across the ecosystem.<\/p>\n<h2><span class=\"s1\"><b>Commercial contracts and customer negotiations<\/b><\/span><\/h2>\n<p class=\"p2\">A digital health product that is compliant but cannot get through enterprise contracting is not commercially ready.<\/p>\n<p class=\"p3\">Healthcare transactions can involve extensive negotiations around:<\/p>\n<ul>\n<li>liability and indemnities;<\/li>\n<li>patient data and DPAs;<\/li>\n<li>information security;<\/li>\n<li>audit rights;<\/li>\n<li>service levels;<\/li>\n<li>continuity and disaster recovery;<\/li>\n<li>subcontractors and cloud providers;<\/li>\n<li>intellectual property;<\/li>\n<li>AI;<\/li>\n<li>regulatory commitments; and<\/li>\n<li>termination and exit.<\/li>\n<\/ul>\n<p class=\"p2\">We help suppliers distinguish between requirements that reflect genuine healthcare constraints and contractual positions that create disproportionate or unnecessary risk.<\/p>\n<p class=\"p2\">Our lawyers can work behind the commercial or in-house legal team, take responsibility for the contractual workstream or participate directly in negotiations.<\/p>\n<p class=\"p2\">For a specific customer agreement, see <a href=\"https:\/\/www.sharpcookie.se\/en\/service\/saas-technology-contract-review\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s1\"><b>SaaS &amp; Technology Contract Review<\/b><\/span>.<\/a><\/p>\n<p class=\"p2\">For complex ongoing negotiations, see <a href=\"https:\/\/www.sharpcookie.se\/en\/service\/saas-technology-contract-negotiations\/\" target=\"_blank\" rel=\"noopener\"><span class=\"s1\"><b>SaaS &amp; Technology Contract Negotiations<\/b><\/span>.<\/a><\/p>\n<h2><span class=\"s1\"><b>Regulatory investigations and enforcement<\/b><\/span><\/h2>\n<p class=\"p2\">Our healthcare work also includes matters where privacy and technology questions have moved from internal governance into regulatory scrutiny.<\/p>\n<h3><span class=\"s1\"><b>Experience: healthcare enforcement before the Swedish supervisory authority<\/b><\/span><\/h3>\n<p class=\"p2\">We have represented a healthcare provider in enforcement proceedings before the Swedish data protection supervisory authority.<\/p>\n<p class=\"p2\">More broadly, Sharp Cookie Advisors has acted as lead counsel in several enforcement matters involving Swedish and European data protection and cyber regulators, including matters concerning large-scale profiling, platform liability, compelled disclosure and DPO independence.<\/p>\n<p class=\"p2\">We have also defended a DPIA concerning critical infrastructure before the European Commission in connection with technology purchased for use across an EU organisation.<\/p>\n<p class=\"p2\">Enforcement experience influences how we approach advisory work.<\/p>\n<p class=\"p2\">It gives a different perspective on documentation, accountability and risk: <span class=\"s1\"><b>if this decision were challenged later, could the organisation explain what it knew, how it assessed the risk and why it made the decision it did?<\/b><\/span><\/p>\n<h2><span class=\"s1\"><b>From first pilot to repeatable healthcare sales<\/b><\/span><\/h2>\n<p class=\"p2\">An initial healthcare pilot can often be handled through bespoke arrangements.<\/p>\n<p class=\"p2\">That becomes increasingly expensive as the company grows.<\/p>\n<p class=\"p2\">New customers may ask different questions about patient data. One hospital may require additional security commitments. A region may impose public-procurement terms. A new AI feature may change the risk assessment. A customer-specific DPA may conflict with the company\u2019s standard cloud architecture.<\/p>\n<p class=\"p2\">Eventually the legal model itself needs to scale.<\/p>\n<p class=\"p3\">We help digital health companies distinguish between:<\/p>\n<ul>\n<li>requirements that should become part of the standard product;<\/li>\n<li>commitments that should become part of the standard contractual position;<\/li>\n<li>customer-specific exceptions;<\/li>\n<li>issues requiring management approval;<\/li>\n<li>risks that should be priced into the transaction; and<\/li>\n<li>positions that should not be repeated in future deals.<\/li>\n<\/ul>\n<p class=\"p2\">The objective is to avoid rebuilding the legal and compliance model for every new healthcare customer.<\/p>\n<h2><span class=\"s1\"><b>How we typically help<\/b><\/span><\/h2>\n<p class=\"p2\">Our healthcare and digital health work spans the technology lifecycle.<\/p>\n<p class=\"p2\"><b>Developing or preparing a product for market<\/b><br \/>\nProduct readiness, privacy by design, data use, AI, regulatory boundaries and contracting architecture.<\/p>\n<p class=\"p2\"><b>Introducing AI or new functionality<\/b><br \/>\nAI Feature Launch Review, GDPR and AI Act assessment, governance, human oversight, claims and customer documentation.<\/p>\n<p class=\"p2\"><b>Selling technology to healthcare<\/b><br \/>\nCustomer readiness, due diligence, SaaS and technology agreements, patient-data requirements and customer contracting.<\/p>\n<p class=\"p2\"><b>Selling to regions and other public healthcare organisations<\/b><br \/>\nPublic procurement, tender requirements, risk assessment and supplier-side contract strategy.<\/p>\n<p class=\"p2\"><b>Negotiating an important customer agreement<\/b><br \/>\nContract review, negotiation strategy, fallback positions and direct negotiation support.<\/p>\n<p class=\"p2\"><b>Scaling privacy governance<\/b><br \/>\nExternal DPO, DPIA governance, audits, management reporting and systematic privacy work.<\/p>\n<p class=\"p2\"><b>Responding to regulatory scrutiny<\/b><br \/>\nInvestigations, enforcement, incidents, DPIAs and engagement with supervisory authorities.<\/p>\n<p class=\"p2\">The appropriate starting point depends on the product, organisation and commercial situation.<\/p>\n<h2><span class=\"s1\"><b>Selected Healthcare &amp; Digital Health Experience<\/b><\/span><\/h2>\n<p class=\"p3\">Our work includes:<\/p>\n<ul>\n<li><span class=\"s1\"><b>eHealth scale-up:<\/b><\/span> External DPO and privacy leadership through launch and scale-up, with data protection integrated into telehealth, AI functionality, app and clinical workflows during development.<\/li>\n<li><span class=\"s1\"><b>AI in healthcare:<\/b><\/span> legal and privacy support for AI-supported patient- and healthcare-professional-facing functionality, including predictive features.<\/li>\n<li><span class=\"s1\"><b>Patient-data SaaS:<\/b><\/span> advice concerning multi-tenant SaaS environments involving patient data, including tenant separation, access, auditability, processor structures and international transfers.<\/li>\n<li><span class=\"s1\"><b>Healthcare procurement:<\/b><\/span> establishing an IT procurement process and SaaS procurement terms for a leading Swedish private healthcare provider, including GDPR and innovative uses of patient data.<\/li>\n<li><span class=\"s1\"><b>Connected health and elderly care:<\/b><\/span> advice to manufacturers and suppliers of connected products and digital services used in care environments.<\/li>\n<li><span class=\"s1\"><b>IoT, AI and medical devices:<\/b><\/span> technology compliance work spanning devices, AI, sensors, SaaS and vendors, translated into commercial terms through the supply chain to a Swedish municipality customer.<\/li>\n<li><span class=\"s1\"><b>Regulatory enforcement:<\/b><\/span> representation of a healthcare provider before the Swedish data protection supervisory authority.<\/li>\n<li><span class=\"s1\"><b>External DPO:<\/b><\/span> ongoing independent privacy governance for organisations ranging from technology start-ups and scale-ups to larger international businesses.<\/li>\n<\/ul>\n<h2><span class=\"s1\"><b>Talk to us about Healthcare &amp; Digital Health<\/b><\/span><\/h2>\n<p class=\"p2\">Tell us what you are developing, buying, implementing or selling and where you are in the process.<\/p>\n<p class=\"p3\">For technology companies, it is useful to tell us:<\/p>\n<ul>\n<li>what the product does;<\/li>\n<li>who uses it;<\/li>\n<li>what role it plays in the healthcare or care workflow;<\/li>\n<li>whether patient or other health data is involved;<\/li>\n<li>whether the product uses AI or automated functionality;<\/li>\n<li>who the intended customers are;<\/li>\n<li>whether you are preparing for launch, procurement or an important customer transaction; and<\/li>\n<li>any immediate customer requirement or deadline.<\/li>\n<\/ul>\n<p class=\"p2\">For healthcare organisations, tell us about the technology, data or regulatory issue you are addressing and the decision the organisation needs to make.<\/p>\n<p class=\"p6\">We will identify an appropriate starting point and propose a proportionate way forward.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Healthcare &amp; Digital Health Legal advice where healthcare, technology and data meet Healthcare is increasingly built on technology. Patient care, clinical workflows and healthcare administration depend on SaaS platforms, cloud infrastructure, apps, connected devices, data analytics and increasingly AI. That means legal questions rarely fit neatly into one practice area. A new digital health service [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":2535,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"categories":[780],"tags":[],"class_list":["post-8572","page","type-page","status-publish","hentry","category-industry-categories"],"pp_statuses_selecting_workflow":false,"pp_workflow_action":"current","pp_status_selection":"publish","yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.5 (Yoast SEO v28.7) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Health - Sharp Cookie Advisors - business lawyers<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.sharpcookie.se\/en\/industries\/health\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Health\" \/>\n<meta property=\"og:description\" content=\"Healthcare &amp; Digital Health Legal advice where healthcare, technology and data meet Healthcare is increasingly built on technology. Patient care, clinical workflows and healthcare administration depend on SaaS platforms, cloud infrastructure, apps, connected devices, data analytics and increasingly AI. That means legal questions rarely fit neatly into one practice area. A new digital health service [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.sharpcookie.se\/en\/industries\/health\/\" \/>\n<meta property=\"og:site_name\" content=\"Sharp Cookie Advisors - business lawyers\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/sharpcookieadvisors\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-02T13:34:55+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.sharpcookie.se\/wp-content\/uploads\/2015\/08\/DSC08236-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1707\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@sofia_edvardsen\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"13 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.sharpcookie.se\\\/en\\\/industries\\\/health\\\/\",\"url\":\"https:\\\/\\\/www.sharpcookie.se\\\/en\\\/industries\\\/health\\\/\",\"name\":\"Health - Sharp Cookie Advisors - business lawyers\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.sharpcookie.se\\\/en\\\/#website\"},\"datePublished\":\"2021-03-26T08:45:07+00:00\",\"dateModified\":\"2026-09-02T13:34:55+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.sharpcookie.se\\\/en\\\/industries\\\/health\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.sharpcookie.se\\\/en\\\/industries\\\/health\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.sharpcookie.se\\\/en\\\/industries\\\/health\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Start\",\"item\":\"https:\\\/\\\/www.sharpcookie.se\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Industries\",\"item\":\"https:\\\/\\\/www.sharpcookie.se\\\/en\\\/industries\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Health\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.sharpcookie.se\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.sharpcookie.se\\\/en\\\/\",\"name\":\"Sharp Cookie Advisors - business lawyers\",\"description\":\"Business law for tech and digital\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.sharpcookie.se\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.sharpcookie.se\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.sharpcookie.se\\\/en\\\/#organization\",\"name\":\"Sharp Cookie Advisors AB\",\"url\":\"https:\\\/\\\/www.sharpcookie.se\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.sharpcookie.se\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.sharpcookie.se\\\/wp-content\\\/uploads\\\/2015\\\/07\\\/New-final-logo-9-pt.png\",\"contentUrl\":\"https:\\\/\\\/www.sharpcookie.se\\\/wp-content\\\/uploads\\\/2015\\\/07\\\/New-final-logo-9-pt.png\",\"width\":247,\"height\":21,\"caption\":\"Sharp Cookie Advisors AB\"},\"image\":{\"@id\":\"https:\\\/\\\/www.sharpcookie.se\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/sharpcookieadvisors\",\"https:\\\/\\\/x.com\\\/sofia_edvardsen\",\"https:\\\/\\\/www.instagram.com\\\/sharpcookieadvisors\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/sharp-cookie-advisors\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Health - Sharp Cookie Advisors - business lawyers","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.sharpcookie.se\/en\/industries\/health\/","og_locale":"en_US","og_type":"article","og_title":"Health","og_description":"Healthcare &amp; Digital Health Legal advice where healthcare, technology and data meet Healthcare is increasingly built on technology. Patient care, clinical workflows and healthcare administration depend on SaaS platforms, cloud infrastructure, apps, connected devices, data analytics and increasingly AI. That means legal questions rarely fit neatly into one practice area. A new digital health service [&hellip;]","og_url":"https:\/\/www.sharpcookie.se\/en\/industries\/health\/","og_site_name":"Sharp Cookie Advisors - business lawyers","article_publisher":"https:\/\/www.facebook.com\/sharpcookieadvisors","article_modified_time":"2026-09-02T13:34:55+00:00","og_image":[{"width":2560,"height":1707,"url":"https:\/\/www.sharpcookie.se\/wp-content\/uploads\/2015\/08\/DSC08236-scaled.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_site":"@sofia_edvardsen","twitter_misc":{"Est. reading time":"13 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.sharpcookie.se\/en\/industries\/health\/","url":"https:\/\/www.sharpcookie.se\/en\/industries\/health\/","name":"Health - Sharp Cookie Advisors - business lawyers","isPartOf":{"@id":"https:\/\/www.sharpcookie.se\/en\/#website"},"datePublished":"2021-03-26T08:45:07+00:00","dateModified":"2026-09-02T13:34:55+00:00","breadcrumb":{"@id":"https:\/\/www.sharpcookie.se\/en\/industries\/health\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.sharpcookie.se\/en\/industries\/health\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.sharpcookie.se\/en\/industries\/health\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Start","item":"https:\/\/www.sharpcookie.se\/en\/"},{"@type":"ListItem","position":2,"name":"Industries","item":"https:\/\/www.sharpcookie.se\/en\/industries\/"},{"@type":"ListItem","position":3,"name":"Health"}]},{"@type":"WebSite","@id":"https:\/\/www.sharpcookie.se\/en\/#website","url":"https:\/\/www.sharpcookie.se\/en\/","name":"Sharp Cookie Advisors - business lawyers","description":"Business law for tech and digital","publisher":{"@id":"https:\/\/www.sharpcookie.se\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.sharpcookie.se\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.sharpcookie.se\/en\/#organization","name":"Sharp Cookie Advisors AB","url":"https:\/\/www.sharpcookie.se\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.sharpcookie.se\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.sharpcookie.se\/wp-content\/uploads\/2015\/07\/New-final-logo-9-pt.png","contentUrl":"https:\/\/www.sharpcookie.se\/wp-content\/uploads\/2015\/07\/New-final-logo-9-pt.png","width":247,"height":21,"caption":"Sharp Cookie Advisors AB"},"image":{"@id":"https:\/\/www.sharpcookie.se\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/sharpcookieadvisors","https:\/\/x.com\/sofia_edvardsen","https:\/\/www.instagram.com\/sharpcookieadvisors\/","https:\/\/www.linkedin.com\/company\/sharp-cookie-advisors"]}]}},"_links":{"self":[{"href":"https:\/\/www.sharpcookie.se\/en\/wp-json\/wp\/v2\/pages\/8572","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sharpcookie.se\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.sharpcookie.se\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.sharpcookie.se\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sharpcookie.se\/en\/wp-json\/wp\/v2\/comments?post=8572"}],"version-history":[{"count":0,"href":"https:\/\/www.sharpcookie.se\/en\/wp-json\/wp\/v2\/pages\/8572\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/www.sharpcookie.se\/en\/wp-json\/wp\/v2\/pages\/2535"}],"wp:attachment":[{"href":"https:\/\/www.sharpcookie.se\/en\/wp-json\/wp\/v2\/media?parent=8572"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sharpcookie.se\/en\/wp-json\/wp\/v2\/categories?post=8572"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sharpcookie.se\/en\/wp-json\/wp\/v2\/tags?post=8572"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}