Today there lots of laws and regulations are developed in security and personal data protection sphere.
For each startup or solution, device or application there is need to comply with standards of specific categories, classes specific countries.
Many countries start to treat software as medical devices and require compliance with proper standards:
3 major categories (Medical Device Directive 93/42/EEC (MDD)):
Classification for devices in EU (Medical Devices Regulation (EU) 2017/745):
And ISO 13485, which is designed to be used by organizations involved in the design, production, installation and servicing of medical devices and related services.
Laws and regulations - how to store, transmit, make accessible and protect personal information:
GDPR EU, GDPR UK, PIPEDA (Canada)