Case Studies

Medical Messaging Software

By Daragh O Brien
May 21, 2020
5min read
Data ProtectionData Strategy
Small and Medium Sized Business


Castlebridge worked with an early stage MedTech startup working in the medical messaging space, advising on the implementation of Data Protection by Design and providing outsource DPO services.

The Pain Point

The client was an early stage MedTech startup founded by a medical professional who had identified potential issues and risks arising from the use of “consumer grade” instant messaging applications on smartphones by medical professionals to share patient information with colleagues for consultations.

The client lacked sufficient expertise and understanding of data protection law and practice to clearly define the market need and also required assistance in engaging with existing healthcare Information Governance procedures in Ireland, the UK, and other jurisdictions.

Assistance also required implementing Data Protection by Design/Privacy by Design concepts in product road map, particularly in respect of additional innovations in the context of ChatBot technology applications implemented through the secure messaging application.

The Plan

Castlebridge engaged with client as an Outsource DPO. We conducted detailed research into commonly used messaging applications, both “consumer” and existing clinical SMS systems operating in other jurisdictions. We trained the Senior Management team in Privacy by Design, as well as providing support to the team when engaging with healthcare DPOs and procurement functions in Ireland and overseas.

The Outcome

While the client’s application and market proposition have evolved since the initial engagement, Castlebridge is still engaged with them providing support and engaging on queries. The original product vision of a secure medical messaging application has evolved into a conversational decision support and information distribution tool based on bot technologies.

The potential for this approach to support data protection obligations such as purpose limitation and data minimisation was identified early on in workshops between Castlebridge and the client.

The client’s vision of improving information exchange in a clinical environment with simple and intuitive tools that support data protection obligations and data quality needs continues to develop, with Castlebridge continuing to assist.

Related Case Studies

Case Studies

The Light Bulb Moment

Castlebridge assisted a retail electricity provider to tackle data quality issues that were affecting customer service and operational efficiencies in the delivery of products and services. This issue also posed...

read full case study
Case Studies

Strategic Research Engagement

Castlebridge was engaged by the enterprise development function of an EU Member State to examine the product/market fit and strategic routes to market for Cyber Security solution providers from their...

read full case study

Keep up to date with all our latest insights, podcast, training sessions, and webinars.

This field is for validation purposes and should be left unchanged.