Cloud Service Providers Handling ePHI Are Now Business Associates
New guidance from the Department of Health and Human Services (HHS) Office for Civil Rights (OCR) requires cloud service providers (CSP) that store patient information to be HIPAA compliant. While CSPs have typically been treated as business associates when electronic…