We work in healthcare, how heavy is NEN 7510 in practice?

NEN 7510 is the Dutch information-security standard for healthcare. It follows the ISO 27001 structure and adds care-specific measures around access, traceability and patient safety.

Try this first

1. 1Decide whether you are a care provider under Wkkgz or Wabvpz, or a supplier to one. Care institutions usually must apply NEN 7510; suppliers follow by contract.
2. 2Start with a gap analysis against NEN 7510-1 and 7510-2. Most SMB care providers fall short on patient-record logging and formal access reviews.
3. 3Access to patient data on need-to-know, with logging traceable to the individual employee. Generic accounts and shared passwords are findings.
4. 4DPAs in order with EHR vendor, hosting and any ICT manager. They process special-category data.
5. 5Plan an internal audit and, where chain partners ask, external certification. Care institutions vary in what they want to see; ask the customer.

None of the above fits?

Describe your situation below. We pass your input plus the steps you already saw to our AI and return tailored next-step advice. If it's too risky to DIY, we'll say so.