For others, strong certifications of privacy are enough, HIPAA among others: https://support.google.com/work/answer/6056694