Hipaa Cloud Storage Requirements

The health insurance portability and accountability act hipaa is us legislation that was signed into law by president bill clinton in 1996.

Hipaa cloud storage requirements. There is no hipaa certification for a cloud service provider csp such as aws. As such it must show that it within cloud compliance standards and follows any relevant standards. Addressing hipaa security and privacy requirements in the microsoft cloud offers a brief overview of regulation requirements. Top 8 hipaa compliant cloud features.

While this is not meant to be a comprehensive list a hipaa compliant cloud hosting environment and the hosting company should offer the following core features. Many of ocr s settlements include lack of properly executed baas among the violations. The essential nature of the baa is underscored in the hhs s guidance on hipaa cloud computing to maintain hipaa compliance both parties. In order to meet the hipaa requirements applicable to our operating model aws aligns our hipaa risk management program with fedramp and nist 800 53 which are higher security standards that map to the hipaa security rule.

A covered entity ce under hipaa for example a healthcare provider or payor needs to treat the cloud storage provider csp as a business associate ba. In healthcare safeguarding protected healthcare information phi and abiding by hipaa compliant cloud data storage requirements is a top priority. What are hipaa compliant storage requirements. This means that csps storing phi are subject to hipaa and need to have appropriate administrative physical and technical controls in place to address the requirements of the hipaa.

The downside of cloud computing is the risk of having your data stolen or deleted by hackers. Hipaa cloud storage and data backup requirements. A cloud service provider doing business with a company operating under the hipaa hitech act rules is considered a business associate. It also provides a detailed analysis of how microsoft s cloud services were built with methodologies that map to those requirements and guidance on how to build compliance ready solutions.