# Backup and recovery: when technology fails, your backup saves you Source: https://baqueiro.es/en/desarrollo-y-tecnologia/clinic-backup-recovery/ Published: 2025-09-10T06:49:00+00:00 Updated: 2025-09-10T06:49:00+00:00 Author: Baqueiro Desarrollo Web Language: en-US Usage: Attribution required: quoting allowed with a visible link back --- **TL;DR** - Losing medical records isn’t just a technical problem: it’s also a legal and patient care problem. - The 3-2-1 rule: 3 copies, on 2 different types of media, 1 of them outside the practice. - The GDPR requires you to be able to restore data in a timely manner, and in practice that means automatic backups. - Test recovery regularly: a backup that doesn’t restore is useless. ## The day the hard drive died You get to the practice, turn on the computer and nothing. The technician confirms the worst: the drive has failed and the data can’t be recovered. Years of medical records, appointments, billing and patient contacts, gone. There’s no backup. It happens more often than you’d think: failed drives, theft, ransomware. And in healthcare the consequences are also legal, because you’re required to keep medical records, and clinical, because without them you can’t provide proper care. Backups aren’t paranoia: they’re a legal obligation and common sense. Here’s how to set up backup for clinics in a way that actually works. ## The 3-2-1 backup rule **3 copies of your data:** - The original, the one you use every day. - A local copy for fast recovery. - A remote copy, outside the practice. **2 different types of media:** - For example, a local NAS plus the cloud. - Or a NAS plus rotating external drives. **1 copy outside the practice:** - In another physical location, safe from fire, theft or flooding. - The cloud counts as an offsite copy. ## What the backup should include ### Critical data - **Medical records:** your practice management software’s database. - **Schedule:** upcoming appointments and bookings. - **Patient data:** contacts and interaction history. - **Billing:** invoices, payments and accounting. - **Documents:** consent forms, reports and test results. - **Website:** files, database and configuration. - **Email:** relevant correspondence. Microsoft 365 and Google Workspace only let you recover deleted items for a limited time. If your practice management software is cloud-based, ask the provider how often it backs up, how long it keeps backups, where they’re stored and whether you can export your data. It’s part of knowing [where your patients’ data is actually stored](https://baqueiro.es/en/seguridad-y-juridico/where-is-your-customer-data-stored/). ### Backup frequency by criticality A rough guide for a small or mid-sized practice: | Data | Minimum frequency | Retention | | --- | --- | --- | | Medical records | Daily | Legal retention period | | Schedule | Daily | 6 months | | Billing | Daily | 4 to 6 years | | Website | Weekly (daily if it takes bookings or forms) | Several versions, at least 1 month | | Email | Weekly | 1 year | ## Backup options for clinics ### Option 1: automatic cloud backup (the recommended foundation) **Tools:** - **Backblaze:** unlimited backup per computer for a low monthly fee. - **Carbonite:** similar, with a good reputation. - **Google Drive, OneDrive or Dropbox:** they sync and keep versions, but on their own they aren’t a backup. **Advantages:** - Automatic: set it up once and it runs on its own. - Offsite by definition. - Keeps versions from days or weeks back. **Disadvantages:** - It depends on your internet connection. - It’s a recurring cost. - Privacy: check the encryption, choose EU servers where possible and sign a data processing agreement. ### Option 2: a local NAS A NAS is a storage device connected to your local network, such as those made by Synology or QNAP. **Advantages:** - Fast, because it doesn’t depend on the internet. - Full control of your data. - It also works as a file server. **Disadvantages:** - It’s in the same place: it doesn’t protect against fire or theft. - It needs to be set up properly. - Rough upfront cost: €300 to €800 for the device and drives. **Recommended use:** as a complement to the cloud, not a replacement. ### Option 3: rotating external drives 2 drives that you swap every week: one connected and running the backup, the other stored somewhere else. Make sure they’re encrypted, though: you’ll be taking health data out of the practice. **Advantages:** - Simple. - The disconnected drive is out of ransomware’s reach. - Low cost. **Disadvantages:** - It’s manual and takes discipline. - Frequency is limited. - It’s easy to forget. ### Option 4: your practice management software’s own backup Almost every practice management system comes with its own backup feature: - Configure it following the vendor’s documentation. - Check that it runs and where it saves the backups. - Don’t trust it blindly: test a restore. ## Recommended practical setup ### Solo practitioner on a tight budget 1. Backblaze or similar on the main computer, running automatically. 2. A weekly backup to an encrypted external drive, rotating drives if possible. 3. A monthly export of medical records to a second cloud storage service. **Rough cost:** €10 to €20 a month. ### Clinic with several computers or a server 1. A local NAS for fast backups of every computer. 2. NAS replication to the cloud (Backblaze B2, Wasabi or similar), with immutable backups if the service supports them. 3. Server or practice management software backups as the vendor recommends. 4. A monthly external drive backup stored outside the practice. **Rough cost:** €50 to €150 a month, plus the NAS. ## The golden rule: test recovery A backup you’ve never tried to restore is an illusion of security. ### Quarterly test 1. Pick a random file from a backup made 1 month ago. 2. Restore it. 3. Check that it opens properly. 4. Write down the result. ### Full annual test 1. Simulate a disaster on a test computer. 2. Restore the entire system from the backup. 3. Check that the practice management software starts. 4. Verify that the data is complete. 5. Time how long it took. ### RTO and RPO: how much time and how much data you can afford to lose RTO is how long you can go without access to your data: - 1 hour: you need a fast local backup and some kind of redundant system. - 24 hours: the cloud may be enough. - 1 week: rotating drives might get you there, but it’s risky. RPO is how much data you can afford to lose: with daily backups, 1 day of work at most. For a clinic, aim for an RTO under 24 hours and an RPO of 1 day. ## Healthcare-specific considerations ### GDPR and backups - A copy of medical records is still health data and deserves the same protection as the originals. - Article 32 of the GDPR requires the ability to restore access to data quickly after an incident and to regularly test that your measures work. - Encrypted backups, with restricted access and a log of who accesses them. - If you erase data you aren’t required to keep, record it so you can repeat the erasure if you ever restore an older backup. - Losing health data, even through a technical failure, is a personal data breach and may require you to notify the Spanish data protection authority (AEPD) within 72 hours. You’ll find the broader context in our guide to [GDPR for clinics](https://baqueiro.es/en/seguridad-y-juridico/gdpr-for-clinics-minimum-requirements/). ### Legal retention - Medical records: at least 5 years from discharge for each episode of care under Spanish law (Ley 41/2002); some regions require longer. - Billing: 4 years under tax rules, and up to 6 if commercial law applies to you. - Plan backup retention and destruction around those periods. ## Ransomware: today’s enemy It encrypts your files and demands a ransom. Clinics are an attractive target because without their data they can’t work. ### How backups protect you - A cloud backup with versioning lets you go back to before the encryption. - A disconnected backup is out of the attack’s reach. ### Anti-ransomware strategy - Several layers: local, cloud and offline. - Restricted access to backups, with separate accounts and [2-step verification](https://baqueiro.es/en/seguridad-y-juridico/passwords-2fa-password-managers-team/). - Automatic alerts if a backup fails or changes abnormally. ## Document your backup system Put it in writing: - What gets backed up. - How often. - Where each copy is. - How to restore it, step by step. - Who has access. - When it was last tested. And keep a printed copy: if everything goes down, you’ll need it. ## An example: the backup that saved the practice Picture a dental clinic: ransomware encrypts the server and demands a ransom. Its backups: - Local NAS: also encrypted, because it was connected. - Cloud: it uploaded the encrypted files, but the version history still had the ones from 6 hours earlier. - Weekly external drive: disconnected, with data from 5 days earlier intact. **Recovery:** 1. Clean the machine and reinstall the system and practice management software. 2. Restore medical records and the schedule from the cloud. 3. Restore non-critical documents from the external drive. 4. Verify data integrity. The result: 1 day of technical work, the appointments from the last 6 hours are lost (and recovered with a few phone calls) and no ransom is paid. Without an offsite backup, it would have been a very different story. ## Fatal backup mistakes ### “I have a backup on an external drive… that’s always plugged in” Ransomware encrypts whatever is connected too. Unplug the drive after each backup. ### “I back up monthly, that’s enough” Losing a month of data at a clinic is a disaster. For critical data, back up daily at the very least. ### “My hosting provider already does backups” Many hosting plans don’t include backups, charge extra for them or only keep a few days. Check your contract and what [website maintenance in production](https://baqueiro.es/en/ingenieria-sin-atajos/real-cost-website-maintenance/) should cover. ### “I use Dropbox, that’s my backup” Syncing isn’t backing up: if you delete something by mistake, it’s deleted on every device. You need versioning or an independent backup. ### Never testing a restore Disaster day is not the time to find out your backup is corrupted. ## Conclusion: the insurance you hope never to use A backup is like home insurance: you pay for something you hope you’ll never need, but the day you need it decides whether you keep working. In healthcare it’s also a legal and ethical obligation, and a few dozen euros a month is very little compared with a serious data loss. The best backup is the one you never use. The second best is the one you restore without a hitch. The worst is the one you discover is broken at the worst possible moment. Set it up, automate it, test it and sleep easy. If you want to know whether your clinic could recover from a failure tomorrow, [get in touch](https://baqueiro.es/en/contact/) and we’ll review your backup system with you: what gets backed up, where, and whether it can really be restored.