- AtheosTech
Secure, Compliant, and Growth-Ready: The Digital Transformation Guide for Independent GGZ and Mental Health Practitioners in the Netherlands
The independent GGZ (Geestelijke Gezondheidszorg) and mental health sector in the Netherlands stands at a critical inflection point. With waiting lists stretching months, a projected shortage of 10,000 behandelaren (therapists/practitioners) by 2035, rising patient demand, and an increasingly complex regulatory landscape governed by the AVG (Algemene Verordening Gegevensbescherming), NEN 7510, and the Landelijk Kwaliteitsstatuut GGZ, running a future-proof private practice has never required more strategic thinking.
Yet most zelfstandige GGZ-praktijken (independent mental health practices) still operate on fragmented, non-compliant, or outdated digital infrastructure. This comprehensive guide explores the real pain points facing independent GGZ and mental health practitioners in the Netherlands today, the proven digital transformation and IT solutions that directly address them, and how AtheosTech delivers secure, AVG-compliant, and scalable digital transformation tailored specifically to the Dutch mental healthcare context.
The State of Digitalization in the Dutch GGZ Sector
Why Independent Practitioners Are Being Left Behind
The GGZ sector in the Netherlands is voortdurend in beweging (constantly changing). Major instellingen (institutions) have the budget, technical teams, and procurement capacity to adopt new digital tools. Independent practitioners - vrijgevestigde psychologen, psychiaters, psychotherapeuten, en GZ-psychologen - typically do not.
According to the Trimbos Instituut's Doorbraakproject Digitalisering GGZ, the biggest barrier to digital transformation, in the GGZ is not technology itself, but the resistance to changing established workflows among care professionals. For independent practitioners, this is compounded by the reality that:
- Most digital tools available are built for large instellingen, not solo or small group practices
- Compliance requirements like NEN 7510, NEN 7512, NEN 7513, and AVG are technically demanding to implement independently
- The cost of errors, data breaches, or regulatory non-compliance falls entirely on the individual practitioner
- Online visibility and cliëntwerving (patient acquisition) have become increasingly competitive
The Integraal Zorgakkoord (IZA) of 2022 mandated a scaling up of hybride zorg (hybrid care) across the Netherlands. This means independent practitioners who do not adapt digitally risk not only competitive disadvantage but also contractual non-compliance with insurers.
The Niche Landscape: Who Are Independent GGZ Practitioners?
Understanding the micro-level categories within the GGZ sector is essential to crafting relevant digital solutions. Independent GGZ practice in the Netherlands covers:
- Vrijgevestigde GZ-psychologen (independent health psychologists, BIG-registered)
- Vrijgevestigde psychotherapeuten (licensed psychotherapists)
- POH-GGZ (praktijkondersteuner huisarts GGZ) practices
- Basis GGZ praktijken (primary/stepped-care mental health practices)
- Specialistische GGZ praktijken (specialist mental health practices)
- Verslavingszorg aanbieders (addiction care providers)
- Jeugd-GGZ praktijken (child and youth mental health practices)
- EMDR, CGT, ACT, en schematherapie specialist practices
Each sub-category operates under its own reimbursement logic via the Zorgprestatiemodel (ZPM), the framework that replaced the former DBC system in 2022, and must align with the Landelijk Kwaliteitsstatuut GGZ (LKS), which was updated to version 4.0 in January 2025.
Business Models in Independent GGZ:
- Directe vergoeding via zorgverzekeraar: Treatment billed directly under contracted or non-contracted care (Zvw-gefinancierd)
- Zelfbetalende cliënten: Private-pay clients outside insurance coverage
- Hybrid model: Mix of insurer-contracted sessions and self-pay coaching/wellbeing sessions
- E-health platform model: Subscription-based online modules alongside in-person sessions
- B2B / Bedrijfspsychologie: Partnerships with employers (arbozorg, bedrijfsmaatschappelijk werk)
Each model has unique digital infrastructure requirements and revenue implications.
The Real Pain Points - What's Actually Slowing You Down?
AVG/GDPR Compliance Is a Daily Risk
Every independent GGZ practitioner processes bijzondere persoonsgegevens (special category personal data) - mental health records, diagnoses, session notes. Under the AVG (Dutch implementation of GDPR), this carries the highest compliance burden. The Autoriteit Persoonsgegevens (AP) has explicit enforcement powers, including imposing significant fines for inadequate data security under Article 32 of the AVG.
Common violations among independent practitioners include:
- Using non-AVG-compliant video calling tools for beeldbellen (video consultations)
- Storing client records in non-encrypted cloud environments not located within the EU/Netherlands
- Sending session notes or BSN-numbers via standard (unencrypted) email
- No formal verwerkersovereenkomst (data processing agreement) with software vendors
NEN 7510 Is Now Mandatory - Not Optional
NEN 7510 is the Dutch standard for informatiebeveiliging in de zorg (information security in healthcare). As of the 2024 revision - combined with the introduction of NIS2 and stricter oversight by the Inspectie Gezondheidszorg en Jeugd (IGJ) - compliance is now operationally required, not just an administrative checkbox.
Under Article 3 of the Decree on Electronic Data Processing by Healthcare Providers, any GGZ practitioner using a healthcare information system must follow NEN 7510, NEN 7512, and NEN 7513.
For independent practitioners, this means:
- NEN 7510: General information security management system for healthcare.
- NEN 7512: Requirements for trusted communication between parties in healthcare
- NEN 7513: Logging of access to electronic patient records (EPD/EHR)
Most off-the-shelf tools do not meet these standards. As the GGZ Oost Brabant case study highlighted, very few video and digital tools fully comply with both NEN 7510 and GDPR simultaneously.
EPD/EHR Fragmentation and Administrative Burden
The EPD (Elektronisch Patiëntendossier) landscape in the Netherlands remains fragmented. According to the M&I/Partners EPD-inventarisatie GGZ 2025, major GGZ EPD providers dominate the top 50 instellingen market, but independent practitioners often rely on small-practice software that lacks:
- Automated Zorgdomein referral intake
- Integrated ROM (Routine Outcome Monitoring) modules
- Seamless zorgverzekeraar declaratie (insurance billing) workflows
- Connection to the LSP (Landelijk Schakelpunt) or MedMij standards for health data exchange
This creates enormous administratieve lastendruk (administrative burden), which is consistently cited by GGZ professionals as one of their top complaints, drawing hours away from direct cliëntcontact.
Virtually No Online Visibility or Digital Marketing
The mental health landscape in the Netherlands is becoming increasingly competitive. A growing number of online platforms - including PsychologiePraktijk.nl, Mentaal Beter, iPractice, and international entrants - are capturing client search intent before independent practitioners even appear in Google results.
Research from the psychotherapy marketing sector shows that over 71% of patients now search for a therapist online before booking a session, and more than 60% visit at least two therapist profiles before deciding. Without lokale SEO (local search engine optimisation), a strong website, and an active online presence, independent practitioners are effectively invisible to a large portion of cliënten who are actively seeking help.
No Scalable Infrastructure for Hybrid and E-Health Care
The IZA mandates a shift toward hybride zorg - a combination of in-person and digital treatment. Evidence-based e-health modules, beeldbellen, asynchronous messaging, and online intake tools are now expected components of modern GGZ practice. However, building this infrastructure securely, compliantly, and in a way that integrates with existing workflows is beyond the technical capacity of most independent practitioners.
Further Reading
If you are a fysiotherapeut - or if you work alongside physiotherapy practices in a multidisciplinary setting - the digital challenges are strikingly similar: AVG compliance, EPD administration burden, low online visibility, and the need to attract and retain cliënten in an increasingly competitive market.
AtheosTech's Digital Solutions - Built for GGZ Compliance and Growth
At AtheosTech, we approach the digital transformation of GGZ practices not as a one-size-fits-all product sale, but as a 360° digital consultancy engagement. We combine R&D-driven solution design with deep sector-specific compliance knowledge to deliver infrastructure that is AVG-ready, NEN 7510-aligned, and built for scale.
Secure, Compliant Practice Website Development
Your website is the digital front door of your praktijk. For independent GGZ practitioners, it must do several things simultaneously:
- Establish clinical authority and vertrouwen (trust) with potential cliënten
- Meet AVG/GDPR requirements (cookie consent, privacy policy, processing register)
- Perform in lokale SEO searches such as "psycholoog Amsterdam" or "GZ-psycholoog Rotterdam"
- Function as an intake conversion tool - not merely an informational brochure
AtheosTech builds AVG-compliant GGZ websites that include:
- Encrypted contact and aanmeldformulieren (intake forms) with lawful basis documentation
- NEN 7510-compatible hosting infrastructure (EU-based servers, data residency in the Netherlands)
- Schema markup for healthcare providers recognised by Google Nederland
- Performance-optimised architecture for Core Web Vitals - a ranking factor in Google's algorithm
- Integration-ready structure for Zorgdomein referral links and online agendabeheer (appointment booking)
Digital Marketing and Cliëntwerving (Patient Acquisition)
Digital marketing is the single highest-leverage activity for a growing independent GGZ practice, and it is the area where most practitioners have zero structured strategy.
AtheosTech's digital marketing services for GGZ practitioners include:
Lokale SEO (Local Search Engine Optimisation)
- Google Bedrijfsprofiel (Google Business Profile) optimisation for search terms like "psychotherapeut [stad]" and "GGZ praktijk [regio]."
- Local keyword research targeting Nederlandstalige zoektermen (Dutch-language search queries) relevant to your specialisation (e.g., "CGT therapist Utrecht", "EMDR behandeling Den Haag")
- On-page SEO optimisation of all practice pages
- Structured data markup for healthcare providers
- Link building through Dutch healthcare directories and professional bodies (NIP, NVvP, LVVP)
Content Marketing
- Authoritative blogs, kennisartikelen (knowledge articles), and FAQ content that ranks for informational queries around anxiety, depression, burnout, ADHD - conditions your target cliënten are actively searching
- Educational content builds vertrouwen (trust) faster than any promotional material
- Content audit and editorial calendar aligned with the Dutch mental health conversation
Social Media Management
- LinkedIn strategy for B2B referral networks (huisartsen, bedrijfsartsen, HR-professionals)
- Instagram and Facebook presence building cliënt trust through educational mental health content
- AVG-compliant social media practices (no client data, no testimonials without explicit consent)
PPC Advertising (Betaald zoekverkeer)
- Google Ads targets high-intent search queries like "psycholoog [stad]" or "burn-out behandeling Utrecht" - putting your praktijk in front of cliënten who are actively searching for help right now
- Meta Ads (Facebook en Instagram) reaches Dutch adults through interest- and life-event-based targeting around mental health signals such as stress, burn-out, and relatieproblemen - building awareness before the search even starts
- Conversion tracking integrated with your online aanmeldformulier, with full AVG-compliant pixel and cookie setup across both platforms
- ROI reporting and campaign optimisation with clear cost-per-cliënt-acquisition dashboards for both Google and Meta channels
What a GGZ Practice Can Achieve Through Digital Marketing:
- Structurally reduced dependence on verwijzers (referrers) and waiting list pressure
- Consistent inflow of cliënten who are pre-qualified by search intent
- Greater brand authority versus both large instellingen and digital-native platforms
- Measurable cliëntacquisitiekosten (cost per client acquisition) and campaign ROI
Is Your GGZ Practice Invisible Online?
While your waiting list grows, potential cliënten are searching for practitioners just like you - and finding someone else. AtheosTech's GGZ Digital Marketing Service combines lokale SEO, content marketing, and AVG-compliant Google Ads into one coordinated growth engine built specifically for independent practitioners in the Netherlands.
Custom EPD/EHR and Practice Management Systems
Rather than recommending you sign another expensive contract with an off-the-shelf EPD provider that wasn't designed for independent practices, AtheosTech builds custom practice management platforms that mirror the functionality of leading systems like Karify, Minddistrict, Mestic, and HCI GGZ EPD - but tailored to your specific workflow, scale, and compliance requirements.
Our custom practice management solutions include:
- Secure, encrypted cliëntendossier management (NEN 7510 / NEN 7513 compliant audit logs)
- Online intakeformulieren with digital signature and consent management
- Integrated agenda en afspraakbeheer (scheduling) with automated reminders via SMS or secure messaging
- ROM (Routine Outcome Monitoring) questionnaire modules (SQ-48, OQ-45, PHQ-9)
- Declaratiemodule for Zvw billing aligned with the Zorgprestatiemodel (ZPM)
- Cliëntportaal (patient portal) for secure messaging, homework assignments, and session documents
- API connections to Zorgdomein for referral intake automation
Platforms like Karify and Minddistrict have set the benchmark for e-health module delivery in the Dutch GGZ market. AtheosTech builds custom solutions with similar capabilities - fully owned by your practice, not rented from a vendor - giving you complete control over your data and workflow.
Secure Telehealth and Beeldbellen Platforms
Beeldbellen (video calling for healthcare) is now a standard expectation. Yet as the GGZ Oost Brabant case study illustrates, virtually no mainstream video platforms (Zoom, Teams in standard configuration, WhatsApp) fully comply with NEN 7510 and AVG simultaneously.
AtheosTech builds custom telehealth and beeldbellen solutions that:
- Store all session metadata on Netherlands-based, EU-certified servers
- Encrypt all video streams end-to-end
- Include full audit logging per NEN 7513 requirements
- Prevent recording without both-party consent (AVG-vereist)
- Offer practitioner-controlled group therapy modules for behandelteams
- Are white-labelled under your praktijk brand
This mirrors the functionality of platforms like Pluform and Switch-ggz - but delivered as a custom solution owned and controlled entirely by your practice.
Digital Intake, Online Aanmelding, and Patient Onboarding Automation
The aanmeldprocedure (registration and referral intake process) is one of the most time-consuming administrative burdens for independent GGZ practitioners. Platforms like Beterggz have already moved to fully digital intake processes, requiring a valid Zorgdomein referral before any insured care begins
AtheosTech automates this process end-to-end:
- Online aanmeldformulier with encrypted form submission
- Automated Zorgdomein referral verification check
- Automatic confirmation emails and intake document packages
- Digital consent forms (behandelovereenkomst, privacyverklaring)
- Intake questionnaire automation with ROM pre-screening
- CRM integration for cliëntfunnel tracking
Cybersecurity, Data Protection, and Compliance Infrastructure
Given the NIS2 directive (effective in the Netherlands via the Cyberbeveiligingswet), the 2024 NEN 7510 revision, and escalating cyberattacks targeting healthcare providers, cybersecurity is no longer optional infrastructure for any GGZ practice.
AtheosTech's compliance and security services include:
- AVG/GDPR compliance audit and remediation (verwerkingsregister, privacybeleid, DPIA)
- NEN 7510 gap analysis and implementation support
- Secure cloud infrastructure setup with EU/NL data residency
- Penetration testing and vulnerability assessment
- Incident response planning (datalekmelding procedure per AVG Article 33)
- Staff cybersecurity awareness training for praktijkmedewerkers
- Verwerkersovereenkomsten (data processing agreements) review and drafting support
All AtheosTech digital marketing solutions are built AVG-ready, NEN 7510-aligned, and NIS2-aware from the ground up. Compliance is not retrofitted – it is embedded in architecture from day one.
Compliance Framework for Independent GGZ Practitioners
Navigating the regulatory landscape is one of the most high-stakes aspects of running an independent GGZ practice in the Netherlands. Here is a structured overview of the applicable compliance requirements and how AtheosTech’s solutions address each:
AVG (Algemene Verordening Gegevensbescherming)
- Dutch implementation of EU GDPR
- Governs all processing of bijzondere persoonsgegevens (mental health data)
- Requires: lawful basis, data minimisation, breach notification within 72 hours, DPIA for high-risk processing
- Enforced by: Autoriteit Persoonsgegevens (AP)
- Source: autoriteitpersoonsgegevens.nl
- AtheosTech solutions: AVG-compliant by architecture
NEN 7510 / NEN 7512 / NEN 7513
- Mandatory Dutch standards for healthcare information security
- Legally required per Decree on Electronic Data Processing by Healthcare Providers
- The 2024 revision introduced stricter operational requirements beyond paper compliance
- Source: ICTRecht
- AtheosTech solutions: NEN 7510-aligned infrastructure and audit logging
Landelijk Kwaliteitsstatuut GGZ (LKS) 4.0
- Governs quality management and accountability for all GGZ zorgaanbieders
- Updated to version 4.0 in January 2025
- All vrijgevestigde praktijken must annually verify their sectie classification (Sectie II or III) as of July 1
- Source: zorginzicht.nl
- AtheosTech solutions: Compliant digital workflows supporting LKS documentation requirements
Zorgprestatiemodel (ZPM)
- Billing and reimbursement framework replacing the DBC system
- Requires accurate digital declaratie infrastructure aligned with NZa tariffs
- AtheosTech solutions: Custom declaratiemodule ZPM-compatible
Wabvpz (Wet aanvullende bepalingen verwerking persoonsgegevens in de zorg)
- Additional provisions for healthcare data processing, including BSN usage
- AtheosTech solutions: BSN handling in compliant, encrypted environments only
NIS2 / Cyberbeveiligingswet
- New cybersecurity requirements for healthcare providers in the Netherlands
- AtheosTech solutions: Security-by-design infrastructure, incident response planning
Digital Transformation in Practice - A Scenario-Based View
Scenario A: The Solo GZ-Psychologist in Amsterdam
Situation: A BIG-registered GZ-psychologist runs a solo practice from a rented consulting room in Amsterdam. She sees 20 cliënten per week, works with both insured and zelfbetalende clients, and wants to add online behandeling. Her current setup: paper dossiers, email intake, WhatsApp for scheduling.
Risks in the current setup:
- AVG violation (WhatsApp is not healthcare-compliant for client communication)
- No NEN 7510-compliant data storage
- No online visibility – new cliënten find her only through GP referrals
- No capacity to scale without physical space constraints
AtheosTech Digital Transformation Roadmap:
- Phase 1: AVG-compliant website with lokale SEO and online intake form
- Phase 2: Secure beeldbellen module and digital cliëntendossier
- Phase 3: Content marketing strategy targeting anxiety and burnout keywords in the Amsterdam region
- Phase 4: Google Ads campaign for niche specialisations (OCD, trauma, postpartum)
Outcome potential: Structurally reduced dependence on verwijzers, hybrid practice capability, full AVG/NEN 7510 compliance, measurable online cliëntwerving.
Scenario B: The Multi-Practitioner Basis GGZ Praktijk in Rotterdam
Situation: A Basis GGZ praktijk with 4 behandelaren, contracted with three zorgverzekeraars. Their EPD is outdated, billing is manual, and they have no digital marketing presence. They want to scale to 8 behandelaren within 2 years.
AtheosTech Digital Transformation Roadmap:
- Phase 1: Custom practice management platform with ZPM-compliant declaratiemodule
- Phase 2: Cliëntportaal with e-health module delivery (CGT, ACT, mindfulness modules)
- Phase 3: Full digital marketing strategy (lokale SEO, Google Ads, LinkedIn referral network)
- Phase 4: Cybersecurity infrastructure and NEN 7510 implementation
Outcome potential: Significantly reduced administratieve lastendruk, scalable infrastructure for practice growth, demonstrable compliance for verzekeraarcontracten (insurer contracts).
Recommended Engagement Models for GGZ Practitioners
At AtheosTech, we work across several engagement models depending on the scope, stage, and growth trajectory of your practice. For independent GGZ practitioners, we recommend the following:
Project-Based Engagement Best for: Solo practitioners or small practices with a defined, scoped need (e.g., “build me an AVG-compliant website” or “set up my digital intake process”).
- Clear deliverables, fixed timeline, defined budget
- Ideal for Phase 1 of digital transformation
Retainer / Ongoing Partnership Best for: Practices that want continuous digital marketing management (SEO, content, Google Ads, social media) and technical support.
- Monthly deliverables and reporting
- Continuous optimisation based on performance data
- Scales as your practice grows
360° Digital Transformation Consultancy Best for: Multi-practitioner practices or those planning significant growth, new service lines, or e-health expansion.
- Full-spectrum advisory: strategy, compliance, development, marketing, analytics
- Dedicated AtheosTech account management
- Most impactful for practices with a 2-3 year growth horizon
Compliance and Security Audit Best for: Practices that have existing digital infrastructure and need to validate AVG/NEN 7510 compliance before an IGJ inspection or verzekeraarcontract audit.
- Point-in-time assessment with remediation roadmap
- Can be delivered as a standalone engagement or as the entry point to broader transformation work
What to Look for in a Digital IT Partner as a GGZ Practitioner
Choosing the wrong IT partner in the GGZ sector can expose your practice to significant AVG/compliance risk, wasted investment, and reputational harm. When evaluating IT and digital partners, independent practitioners should assess:
- Does the partner demonstrate aantoonbare kennis (demonstrable knowledge) of NEN 7510, AVG, and the Zorgprestatiemodel?
- Can they provide a verwerkersovereenkomst (DPA) that meets Dutch healthcare requirements?
- Are their hosting solutions EU/Netherlands-based with documented data residency?
- Do they have experience with Zorgdomein, MedMij, or other Dutch healthcare interoperability standards?
- Do they understand the distinction between Basis GGZ and Specialistische GGZ and the corresponding digital requirements?
- Can they deliver both compliance infrastructure and commercial growth (SEO, digital marketing) – or only one of the two?
AtheosTech combines deep IT and digital marketing expertise with sector-specific compliance knowledge, positioning us as a genuinely 360-degree partner for independent GGZ practices in the Netherlands.
Your Praktijk Deserves Infrastructure That Matches Your Expertise
The clinical expertise of independent GGZ and mental health practitioners in the Netherlands is not in question. What holds many practices back is the absence of the digital infrastructure, compliance architecture, and online visibility needed to grow sustainably and confidently in the current landscape.
The demands of the Landelijk Kwaliteitsstatuut GGZ 4.0, the AVG, NEN 7510 (revised 2024), and the IZA’s hybride zorg mandate are not going away. They are accelerating. At the same time, the opportunity to build a thriving, compliant, digitally visible independent practice has never been greater for those who act with strategic clarity.
AtheosTech exists to be that strategic and technical partner – combining 360° digital consultancy, compliance-first development, and data-driven digital marketing into a cohesive transformation roadmap built specifically for zelfstandige GGZ-praktijken in Nederland.
Whether you are a solo vrijgevestigde psycholoog taking your first step toward an AVG-compliant digital setup, or a multi-practitioner Basis GGZ praktijk planning significant growth over the next three years, the path forward starts with a conversation.
Start Your Digital Transformation - On Your Terms
Whether you are a solo vrijgevestigde psycholoog taking your first step online, or a growing Basis GGZ praktijk planning for the next three years, AtheosTech delivers the full picture: secure infrastructure, AVG/NEN 7510 compliance, and measurable online growth.
We do not offer packages. We build partnerships.
FAQ's
FAQ's
Independent GGZ practitioners in the Netherlands must comply with the AVG (Algemene Verordening Gegevensbescherming), NEN 7510, NEN 7512, and NEN 7513 for healthcare information security, the Landelijk Kwaliteitsstatuut GGZ (LKS) 4.0 (updated January 2025), and the Zorgprestatiemodel (ZPM) for insurance billing.
Since the 2024 NEN 7510 revision and the introduction of the NIS2 directive, compliance is operationally required - not just a paper formality. Non-compliance can result in enforcement action by the Autoriteit Persoonsgegevens (AP) and the Inspectie Gezondheidszorg en Jeugd (IGJ).
Yes. Under the Decree on Electronic Data Processing by Healthcare Providers, every GGZ practitioner using a healthcare information system - including an EPD, cliëntportaal, or beeldbellen tool — must follow NEN 7510, NEN 7512, and NEN 7513.
This applies to solo vrijgevestigde practitioners, not only large instellingen. The 2024 NEN 7510 revision introduced stricter operational requirements, meaning compliance must be demonstrated in practice, not merely documented on paper.
The most effective digital channels for independent GGZ practices are lokale SEO (optimising for location-specific searches like "psycholoog Amsterdam" or "GZ-psycholoog Rotterdam"), Google Bedrijfsprofiel (Google Business Profile) optimisation, content marketing around high-demand mental health topics (angst, burn-out, depressie, ADHD), and targeted Google Ads.
Research shows that over 71% of patients now search for a therapist online before booking. A professionally built, AVG-compliant website with integrated online intake is the foundation for all digital cliëntwerving.
Basis GGZ addresses mild to moderate mental health conditions and typically involves shorter treatment pathways with e-health modules playing a significant supporting role. Specialistische GGZ handles complex, severe psychiatric conditions requiring intensive, multi-disciplinary care.
Digitally, Basis GGZ practices gain the most immediate leverage from e-health modules, online intake automation, and digital marketing - while Specialistische GGZ practices benefit most from advanced EPD systems, ROM integrations, and multi-practitioner workflow automation. Both must comply equally with AVG, NEN 7510, and the Landelijk Kwaliteitsstatuut GGZ.
Standard consumer tools such as WhatsApp, standard Zoom, and unmanaged Microsoft Teams do not meet the combined requirements of AVG and NEN 7510 for healthcare use without specific contractual and technical configurations.
Healthcare-specific compliant options must guarantee end-to-end encryption, EU/Netherlands data residency, no unauthorised recording, and full audit logging per NEN 7513. Custom-built telehealth platforms - like those developed by AtheosTech - are designed to meet all these requirements from the ground up, giving practitioners full ownership and compliance control.
