It looks like in the USA developers adhere to HIPAA standards when developing and hosting health-related software. But I can't find anything similar to the EU. GDPR is all about being transparent and asking for consent and there nothing about any technical requirements that I must follow legally.
Does that mean I don't need all these expensive HIPAA hosting solutions? And can just get away with a GDPR compliant approach?
Maybe, there is another HIPAA like standard for the EU? I'd love to read about it.
My goal is to make sure our customers feel safe sharing health-related data with us through our web application. This web application collects some health-related data, stores it and analyses it. Everything will be done through the website (Wordpress based).