logo
logo
Sign in

What does it mean to be a HIPAA Compliant Datacenters?

avatar
VISTA InfoSec
What does it mean to be a HIPAA Compliant Datacenters?

HIPAA Compliant Datacenters are an essential part of the Healthcare Industry. With the increasing amount of regulations and penalties imposed by the Department of Health & Human Services and the Office of Civil Rights for PHI breaches, there is now a growing trend of outsourcing services to Datacenter and Hosting service providers in the industry.

Since Datacenters directly deal with ePHI i.e. store, process and transmit PHI on behalf of healthcare institutes, they fall in the scope of HIPAA Regulation. The HIPAA Omnibus Rule holds all third-party including contractors and sub-contractors accountable for a data breach that may occur. This does not just include Business Associates but also subcontractors, entities who transmit or deal with protected health information (PHI).


Earlier all the liability was assumed by the covered entity and not the business associates who directly or indirectly entered into a service agreement with the covered entity. So, Datacenters engage or deal with ePHI they are required to comply with the HIPAA Regulation and establish the same level of administrative safeguards, physical safeguards, technical safeguards, and conduct ongoing due diligence as the Covered Entity (Healthcare Institutes).


The Health Insurance Portability and Accountability Act which is also known as HIPAA was established as a security standard for protecting the privacy and confidentiality of electronic Protected Health Information (ePHI) in the Healthcare industry. As per this HIPAA Rule, covered entities who store, transmit or process electronically protected health information (ePHI) are required to implement administrative, physical, and technical safeguards as stated in the regulation. 

This is to ensure that the safeguards implemented preserves the confidentiality, availability, and integrity of ePHI while preventing the possibility of unauthorized access to ePHI. So, explaining this in detail, we have covered an article elaborating what HIPAA compliant Datacenters mean and what are the various HIPAA Datacenter requirements that the service providers need to adhere to.


collect
0
avatar
VISTA InfoSec
guide
Zupyak is the world’s largest content marketing community, with over 400 000 members and 3 million articles. Explore and get your content discovered.
Read more