Use Cases

Shield for healthcare, legal, and finance

6 min readApril 2026Industries

In some industries, screen privacy isn't a preference. It's a legal obligation. Patient records, case files, financial data, and personal information are protected by law. If someone sees them on your screen who shouldn't, that's not just careless. It can be a compliance violation with real consequences.

Healthcare

Hospitals, clinics, and medical offices are some of the most difficult environments for screen privacy. Doctors, nurses, and administrative staff work on computers that are often in shared spaces: reception desks, nursing stations, consultation rooms, corridors. Patients, visitors, and other staff walk by constantly.

Every screen in a medical facility can display protected health information. Patient names, diagnoses, test results, medication lists, medical history. In the EU, this data is protected under GDPR with some of the highest possible fines. In the US, HIPAA requires covered entities to implement safeguards against unauthorized access to patient information, including visual access.

A receptionist steps away from the desk for 30 seconds to hand a document to a colleague. The screen shows a patient's appointment list with names and reasons for visit. Anyone standing at the reception desk can read it. This happens hundreds of times a day in hospitals around the world.

With Shield, the screen locks the moment the receptionist steps away. When a patient standing at the desk leans forward, Shoulder Guard blurs the content. No training needed, no reminders, no policy enforcement. The protection is automatic.

The cost of non-compliance

GDPR fines for healthcare data breaches can reach up to 4% of annual global turnover or 20 million euros, whichever is higher. HIPAA violations range from $100 to $50,000 per violation, with annual maximums up to $1.5 million per violation category. Visual data exposure (someone reading a screen) counts as unauthorized access under both frameworks.

Legal

Law firms handle some of the most sensitive information that exists. Client communications protected by attorney-client privilege, ongoing case strategies, settlement negotiations, witness statements, confidential corporate documents under NDA. A single glance at the wrong screen can compromise a case or violate privilege.

Lawyers work in environments that aren't designed for privacy. Open-plan offices, shared conference rooms, courthouses, client meetings in restaurants or hotel lobbies. They carry laptops between locations and open case files in places where other people can see them.

The problem is compounded by the fact that lawyers often work on cases involving opposing parties who may be in the same building. In a courthouse, the other side's attorney might be sitting in the same waiting area. At a large firm, one team might be representing a company while another team represents a competitor. Screen visibility becomes a conflict risk.

Shield protects against all of these scenarios. Away Lock ensures that case files aren't visible when a lawyer steps out of a meeting room. Shoulder Guard prevents visual access from people sitting nearby. The protection works in any location, without the lawyer needing to change their habits or remember to lock the screen manually.

Finance

Banks, investment firms, insurance companies, accounting firms, and financial advisors work with data that is both personally sensitive and commercially valuable. Account balances, transaction histories, investment portfolios, tax returns, credit reports, merger documents, trading positions.

Financial data is protected by regulations in every jurisdiction. In the EU, GDPR applies to all personal financial information. In the US, the Gramm-Leach-Bliley Act requires financial institutions to protect consumer financial data. PCI DSS governs payment card information. Each of these frameworks includes requirements for access control that extend to visual access.

A financial advisor meeting a client has their portfolio on screen. Another client walks in early for the next appointment and sees the previous client's account balance. An accountant working on tax returns in an open office has client income data visible to colleagues who don't need to see it. A banker reviewing a loan application at their desk has personal financial details exposed to anyone walking by.

These scenarios happen daily. Most of the time, nothing comes of it. But when it does go wrong, the consequences are severe: regulatory fines, loss of client trust, reputational damage, and potential lawsuits.

What regulations require

GDPR (EU) requires "appropriate technical and organisational measures" to protect personal data. Visual access to screens displaying personal data is a recognized data breach vector.

HIPAA (US) requires "physical safeguards" to limit access to electronic protected health information, including measures to prevent unauthorized viewing.

Gramm-Leach-Bliley Act (US) requires financial institutions to implement safeguards for customer information, including physical and technical measures.

PCI DSS requires restriction of physical access to cardholder data, which includes visual access to screens displaying card numbers.

Why traditional solutions fail

Most organizations in these industries rely on two things: privacy screen filters and screen timeout policies.

Privacy screen filters are physical overlays that narrow the viewing angle. They help, but they're not perfect. They reduce brightness and color quality, they don't work when someone is standing directly behind you, and they don't protect the screen when you walk away.

Screen timeout policies (lock the screen after 5 or 10 minutes of inactivity) leave a gap. Five minutes is a long time. In healthcare, a patient's record is visible for five full minutes after the doctor walks away. In a law firm, a case file sits open for five minutes after the lawyer leaves for a call. That's not protection, that's hope.

Shield closes both gaps. Shoulder Guard works from any angle, including directly behind. Away Lock triggers in seconds, not minutes. And neither requires the user to do anything.

Why Shield fits regulated industries

Beyond the core protection features, Shield has specific characteristics that make it suitable for regulated environments:

For compliance teams evaluating Shield, the assessment is straightforward: Shield reduces data exposure risk while introducing zero data processing risk of its own.

Summary

If your organization handles patient records, legal case files, financial data, or any other regulated information, screen privacy is not optional. Shield provides automatic, continuous protection without requiring users to change their behavior. It locks when they leave, blurs when someone else looks, and never sends a single byte of data anywhere.

Go to Avalw Shield