Losing access to patient records stops a practice rather than merely inconveniencing it — and where personal data may have been exposed, a regulatory clock starts at the same moment. We work with practices, clinics and care providers across Greater Manchester on both halves of that: getting clinical systems back, and preserving the evidence needed to answer the regulator honestly. Handled here, by our own engineers, inside the UK.
Clinical databases, imaging storage and practice servers — recovered under a signed processing agreement, held only as long as you specify, and never sent outside the UK.
Where personal data may have been affected, UK GDPR gives you 72 hours to assess and if necessary notify the ICO. The answer lives in logs and file-system artefacts — and a rebuild or a restore over the top removes exactly those. Image first; it delays the restore by almost nothing.
The obligation that shapes everything else about a healthcare data incident.
Where patient data may have been accessed or lost, UK GDPR gives you 72 hours to assess and potentially notify the ICO. The question is not whether files were encrypted or a disk failed — it is whether personal data left your control, and that is answered by logs, access records and file system artefacts.
All of which a restore removes. Rebuilding a machine or restoring over the affected volume is the standard IT response and it destroys the evidence you need to answer the regulator’s question. Imaging the affected system read-only first preserves that position, costs nothing extra, and delays the restore by essentially nothing.
From single practice machines to trust-scale arrays.
Not optional in this sector, and not treated as though it were.
Signed before anything moves, alongside an NDA. We act as processor to your controller and the paperwork says so.
The same person from diagnostic to delivery. Fewer hands means a shorter list of people with access to patient records.
Data does not leave the UK and the work is not passed to another laboratory — which is a genuine differentiator in this trade.
Working copies securely destroyed after a retention period you set, with confirmation. Nothing retained beyond it.
Documented handling available on any job, so if the incident becomes reportable you have an account of who held the data and when.
Where downtime has clinical consequences rather than only commercial ones.
A practice without access to patient records is a practice that cannot safely see patients. Priority handling moves the job to the front and lets us image the records database first, so it can be back with you while imaging of the wider array continues behind it.
We will also say clearly where speed will not change the outcome — sourcing a donor head-stack takes as long as it takes, and pushing a failing drive is how data is lost rather than saved. Recovery from £500 +VAT for servers, arrays and NAS after a free 48-hour diagnostic.
A free diagnostic and a written quote — kept in-house, GDPR-compliant, and inside Britain.