Skip to content

Your clinic may not be audit-ready. Most aren't, and don't know it yet.

EU and national compliance for aesthetic and longevity clinics: structural, operational, and data-protection readiness. Plain language, practical fixes, no law-firm overhead.

Portugal and DACH: Germany, Austria, and Switzerland

This is not for hospital systems with in-house legal teams, and not for clinics outside Portugal and the DACH region yet.

Where we work

Focused coverage for private-pay clinics in Portugal and the DACH region, not a generic EU-wide directory.

Portugal

English- and Portuguese-speaking clinics: aesthetics, longevity, and related private practices.

DACH

Germany, Austria, and Switzerland, including DSGVO/GDPR readiness and national clinic obligations.

Why this matters now

Regulators in Portugal and across the DACH region are paying closer attention to private-pay clinics, not just hospitals. Aesthetic and longevity practices face the same documentation, consent, and data-protection obligations as any healthcare provider, often with fewer internal resources to meet them.

Most enforcement actions we see stem from gaps in everyday operations: outdated consent workflows, incomplete treatment records, or staff who were never trained on GDPR/DSGVO basics. These are rarely cases of deliberate negligence. They are cases of not knowing what auditors will look for.

The financial and reputational consequences are real. A single data-protection complaint or licensing inspection can disrupt your practice for months. The cost of fixing problems under pressure is almost always higher than addressing them calmly, before an inspector arrives.

Six areas we review in a gap check

Each item maps to a concrete gap we find during readiness assessments, with a clear fix path.

  1. Compliance gap check

    A structured readiness assessment of your clinic documentation, workflows, and data practices. You receive a prioritised findings report: what to fix first, what can wait, and what is already in good shape.

  2. Regulatory monitoring

    Plain-language alerts when EU or national rules change in Portugal or DACH in ways that affect your practice. No legal jargon: just what changed, whether it applies to you, and what action to take.

  3. Audit-ready documentation

    Consent workflows, treatment records, incident logs, and retention schedules structured so an inspector can follow your paper trail without confusion. Templates and review included.

  4. Data protection (GDPR / DSGVO)

    Patient data handling, processor agreements, breach procedures, and privacy notices: the area where aesthetic clinics are most often found non-compliant. We map your current state against what regulators expect.

  5. Staff training library

    Recurring compliance training your team can complete in short sessions: consent procedures, data handling, incident reporting. Tracked so you can demonstrate due diligence if asked.

  6. Specialist referral network

    When a matter falls outside operational compliance (formal legal representation, complex licensing outside our markets), we connect you with a vetted legal partner rather than guessing at the boundary.

What we handle, and what we don't

I'd rather tell you upfront what sits outside my scope than discover it during an inspection.

What we handle

  • Structural compliance readiness: licensing documentation, organisational requirements
  • Operational workflows: consent, records, incident logging, staff procedures
  • Data-protection readiness: GDPR/DSGVO mapping, privacy notices, processor agreements
  • Ongoing monitoring and retainer support for clinics in Portugal and DACH

What we refer out

  • Formal legal representation or litigation
  • Clinical medico-legal opinions on treatment protocols
  • Complex licensing outside Portugal and the DACH region

Referrals go to a vetted legal partner, not a random directory listing. You stay with people who understand clinic operations.

How it works

  1. Book

    Tell us about your clinic in a short form. We'll confirm scope and schedule your gap check.

  2. Gap check

    A structured assessment of your documentation, workflows, and data practices, remote or on-site depending on scope.

  3. Findings & fix list

    You receive a prioritised report: what's compliant, what's at risk, and exactly what to change. No vague recommendations.

  4. Ongoing retainer

    Optional monthly support: monitoring, documentation updates, staff training, and a direct line when rules change.

Clear pricing, no surprises

Compliance gap check

€600-900one-off

Full readiness assessment with prioritised findings report.

  • Documentation and workflow review
  • GDPR/DSGVO snapshot
  • Prioritised fix list
  • 30-minute findings call
Book a compliance gap check
Clear pricing, no surprises
IncludedStarter€450/monthStandard€900/monthRecommendedPremium€1,500/month
Regulatory change alertsYesYesYes
Documentation reviewQuarterlyMonthlyMonthly
Staff training libraryYesYesCustom sessions
Consent workflow maintenanceNot includedYesYes
Incident log templates and reviewNot includedYesYes
Processor agreement reviewsNot includedNot includedYes
On-site visitNot includedNot includedQuarterly
Support response48h email24h emailDirect phone

Get in touch

Tell us about your clinic in Portugal or DACH and we will schedule a gap check. No obligation, no sales pitch.