Reader Questions:
Don’t Forget HIPAA Still Applies to Outsourced CSPs
Published on Tue Sep 21, 2021
Question: Our organization uses a small cloud services provider (CSP) based in Canada. Does HIPAA still apply to our business arrangement? North Carolina Subscriber Answer: Yes, and all of the rules about electronic protected health information (ePHI), including the need for business associate agreements (BAAs), still apply. “Be aware that HHS Office for Civil Rights (OCR) warns of increased risk [...]