HIPAA ComPlIAnCe CHeCklIst for HeAltHCAre Cloud storAge
With healthcare professionals embracing digital technologies to protect their patients' information, there is an industry wide need to ensure that the digital ecosystems are compliant with the Health Insurance Portability and Accountability Act.
Sign Business Associate Agreements - Cloud provider that signs BAA confirms that he is HIPAA compliant with physical and digital security, storage management and backup technology along with user authentication and administrative practices.
Conduct Assessments as per NIST Guidelines – While seeking cloud services, one must conduct assessments of the service provider according to the National Institutes of Standards and Technology (NIST) Guidelines.
Apt Policies and Procedures in Place – The cloud service provider should have policies and procedures in place that are relevant to the HIPAA Privacy Rule, the HIPAA Security Rule, and the HIPAA Breach Notification Rule.
Security and Privacy Issues are Aptly Addressed – The cloud service providers should appropriately address all security, privacy, and administrative deficiencies and issues.