HIPAA Compliant Cloud for Sensitive Health Data

Valentina Salapura

2017

Abstract

Cloud environments offer flexibility, elasticity, and low cost compute infrastructure. Electronic health records (EHRs) require infrastructure which is regulated under several IT compliances with security and data persistence and restore. To enable customers to bring sensitive medical data in the cloud, we enabled the IBM Watson Health Cloud (WHC) for compliance with the U.S. federal electronic health record regulation. This paper briefly outlines how we create HIPAA- (Health Insurance Portability and Accountability Act) compliant cloud computing. We focus on the privacy and security rules for protecting Protected Health Information (PHI) and use data encryption for data-in-motion and data-at-rest. To meet HIPAA requirements for data persistence, we implement data back-ups, archiving service and disaster recovery plan. In this paper, we discuss various challenges and lessons learned for implementing the diverse set of compliance features required by HIPAA in the IBM WHC cloud.

Paper Citation

in Harvard Style

Salapura V. (2017). HIPAA Compliant Cloud for Sensitive Health Data . In Proceedings of the 7th International Conference on Cloud Computing and Services Science - Volume 1: CLOSER, ISBN 978-989-758-243-1, pages 596-602. DOI: 10.5220/0006356705960602

in Bibtex Style

@conference{closer17,
author={Valentina Salapura},
title={HIPAA Compliant Cloud for Sensitive Health Data},
booktitle={Proceedings of the 7th International Conference on Cloud Computing and Services Science - Volume 1: CLOSER,},
year={2017},
pages={596-602},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0006356705960602},
isbn={978-989-758-243-1},
}

in EndNote Style

TY - CONF
JO - Proceedings of the 7th International Conference on Cloud Computing and Services Science - Volume 1: CLOSER,
TI - HIPAA Compliant Cloud for Sensitive Health Data
SN - 978-989-758-243-1
AU - Salapura V.
PY - 2017
SP - 596
EP - 602
DO - 10.5220/0006356705960602