Hacker News new | ask | show | jobs
by jghn 3589 days ago
Why is it "have to own", HIPAA?

I know that both HIPAA and CLIA have issues with things like the spot market but you can still be approved via cloud.

1 comments

Not so much HIPAA directly, but the business associate agreements that many customers make use of. In order to meet the requirements of many of the agreements we have in place, we have to own any and all hardware that PHI data lives on. They don't exactly accept redlines on those kinds of agreements.